隱私權政策與 AI 數據清洗宣告

English version: Google user data

Last updated: October 3, 2026. This section explains how TrueLink, operated by Chengtong Zhihui Co., Ltd. (誠通智匯有限公司, Taiwan tax ID 60381491), accesses, uses, stores, shares and deletes data obtained through Google APIs after you choose to connect your Google Account ("Google user data"). For Google user data, this section prevails over any other part of this policy.

Limited Use: TrueLink's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When we access it. Only after you click a connect button in TrueLink and approve Google's consent screen. Each data source is authorized separately. Signing in to TrueLink with Google only gives us basic sign-in information (name, email address, profile photo), not the data below.

• Google Search Console. Scopes: https://www.googleapis.com/auth/webmasters (includes read/write access). The current Search Console connection flow uses this scope for search-performance queries and sitemap features; sitemap submission is separately restricted by TrueLink administrator permissions. Data: the list of sites you can access and their search performance (impressions, clicks, click-through rate, average position, grouped by date, query and page); with the read/write scope, sitemap listing and submission. Purpose: show your site's Google Search performance and trends in your dashboard, keep a daily archive so you can see history beyond Google's own retention window, generate improvement tips, and ground answers in our AI features. Retention: Daily archives, cached query results and derived suggestions are stored in TrueLink. Removing Google access does not automatically delete stored data. You may request export or deletion by email as described below. A complete self-service purge of Google data and a uniform automatic expiry period for these records are not currently provided.
• Google Analytics 4. Scope: https://www.googleapis.com/auth/analytics.readonly. Data: the list of GA4 accounts and properties you can access (names, IDs) and aggregated report figures for the property you select: active users, sessions, views, default channel group, top page paths and event counts. We do not read data that identifies individual visitors. Purpose and retention: same as Search Console.
• Google Business Profile. Scope: https://www.googleapis.com/auth/business.manage. Google offers only this scope for Business Profile, and it includes management rights; TrueLink currently uses it only to read data. We do not edit your Business Profile, post on your behalf or reply to reviews. Data: the business accounts and locations you manage (location name, address, location ID). Purpose: let you choose which location matches your TrueLink brand profile. Retention: the location list is read live for selection; this query does not store the list. New location bindings store the Google location ID and remove any previously saved Google location name from that brand record. Existing records may still contain names from earlier bindings; this change does not purge historical records. You may request deletion by email. Future performance or review features must follow the Business Profile API policies, including the 30-day maximum content-cache period and restrictions on aggregation. New uses require updated disclosures and your consent. This section does not claim that retention controls for all existing Business Profile data are complete.

AI features. When you ask the TrueLink AI copilot about traffic, keywords or SEO, or purchase an AI-generated GEO report, summary figures from your own account (for example recent clicks, impressions, opportunity keywords, active users and sessions) are sent together with your request to Google Vertex AI (Gemini) or to AI servers operated by us, so the answer reflects your real data. These figures are used for the AI response you request. Requests and responses may be saved in your chat history and are not automatically deleted when you remove Google access. Use of Google user data is limited to the user-facing features disclosed in this section and is subject to the Limited Use requirements above.

What we never do. We do not sell Google user data or transfer it to advertising platforms, data brokers or information resellers. We do not use it to serve ads, including retargeting, personalized or interest-based ads, and we do not use it to determine credit-worthiness or for lending. We use it only for user-facing features that are visible in TrueLink, and we transfer it only to provide those features, for security purposes (such as investigating abuse), to comply with applicable law, or as part of a merger, acquisition or sale of assets with your explicit prior consent.

Who can see it. Google reports are for the member who connected the account; authorized workspace members may manage brand/site connections. Location IDs and names previously saved in public brand records may be readable with those public records. Our staff do not read your Google user data unless you give us explicit permission (for example, to help check a specific report), it is necessary for security purposes (such as investigating a bug or abuse), it is required by law, or the data has been aggregated so that no individual member can be identified and is used for internal operations. Google user data is stored and processed in our Google Cloud (Firebase) environment and by the AI services described above; it is not shared with the other service providers listed in Section B.

Security. All traffic uses HTTPS. Authorization credentials are handled by the server and are not returned through report interfaces. Encryption and audit measures in the newer authorization flow require deployment and verification; this section does not claim that all existing credentials have been migrated.

Removing access and requesting deletion. Remove TrueLink at Google Account > Third-party apps & services to revoke future API access. The invalidation timing of credentials already issued by Google depends on Google's processing. Stored history is not automatically deleted. Email privacy@truelink-group.com to request export or deletion, identifying the Google data and connected account; do not send passwords or authorization credentials. A TrueLink account-deletion request does not mean all Google data has been purged: the current self-service flow does not cover all Google daily archives, caches, suggestions and newer connection records. Please submit a separate Google-data deletion request so we can confirm its scope and processing status; we do not promise a complete purge within seven days.