Effective Date: June 2026 Company: IndicatorFoundry LLC Contact:support@weeklift.com
Weeklift is a product operated by IndicatorFoundry LLC. References to "we," "our," or "us" in this policy refer to IndicatorFoundry LLC as the data controller for Weeklift.
1. Introduction
Weeklift ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service to generate automated weekly SEO insights. Our core principle is data minimization: we only extract the data strictly necessary to deliver your weekly email digest.
2. Information We Collect
To provide our service, we require specific data from you and from your connected accounts:
Account Information: When you register, we collect your email address to deliver your weekly digest and manage your account.
Payment Information: Subscriptions are securely processed via Stripe. We do not store or have direct access to your credit card numbers.
Google Search Console Data: With your explicit permission via OAuth, we request read-only access to your Google Search Console (https://www.googleapis.com/auth/webmasters.readonly). We extract performance metrics (Clicks, Impressions, and Position) tied to your search queries and page URLs.
3. How We Use Your Data
We use the information we collect exclusively to operate and maintain the Weeklift service. Specifically, we use your data to:
Calculate week-over-week deltas for your SEO performance.
Apply conditional logic to identify specific tasks (rising keywords, losing keywords, and zero-click pages).
Generate and send the plain-text weekly email to your inbox.
Provide customer support and manage your subscription.
We do not sell, rent, or trade your personal information or Google Search Console data to any third parties.
4. Data Storage, Security, and Retention
Your trust is our priority. We implement strict security measures to protect your data:
No Historical Data Storage: Weeklift does not store your Google Search Console data at all. Each week, we fetch your current Search Console metrics directly from Google, compute your digest in memory, send it to your inbox, and discard the underlying data. We do not maintain a historical database of your search queries, clicks, impressions, or rankings.
Token Storage: Your Google OAuth access and refresh tokens are stored in our database, which is protected by strict access controls (see below) and is never exposed to any client-side application, browser, or public-facing interface. Only our backend server can read these tokens, and only to make authorized requests to the Search Console API on your behalf.
Infrastructure: Our databases are secured with Row Level Security (RLS) and are only accessible via an authenticated server-side connection, ensuring your data is strictly isolated to your authenticated account and is never directly reachable from outside our backend.
5. Google API Services Disclosure (Limited Use Policy)
Weeklift's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
We only use the data to provide the core user-facing feature (the weekly email digest).
We do not use or transfer the data for serving ads, including retargeting, personalized, or interest-based advertising.
We do not allow humans to read the data, unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes (e.g., investigating a bug or abuse), or it is required to comply with applicable law.
6. Revoking Access and Deletion
You maintain complete control over your data.
Revoking Google Access: You can disconnect Weeklift from your Google account at any time by visiting your Google Account Security settings.
Account Deletion: You may request the complete deletion of your Weeklift account and all associated historical data by contacting support@weeklift.com. Upon request, all associated records, tokens, and historical snapshots will be permanently deleted from our servers within 30 days.
7. Changes to This Policy
We may update this Privacy Policy occasionally to reflect changes in our practices or technical infrastructure. We will notify you of any material changes via the email address associated with your account.