Skip to content
Regenious

Security & Google data

Least access. Encrypted. Never sold.

Regenious uses Google data for one thing: showing your clients’ performance in your dashboards and reports.

Google permissions

What we ask Google for, and why

We request only the access needed for the features you use.

Google Search Console

In use

Read search performance (clicks, impressions, CTR, average position, queries, pages, devices) and URL Inspection index status for the sites you choose to connect.

https://www.googleapis.com/auth/webmasters.readonly

Google Analytics 4

In use

Read website traffic reports (sessions, users, channels, landing pages, events and key events — for example phone clicks and forms sent) and which events are marked as key events, for the GA4 properties you choose to connect.

https://www.googleapis.com/auth/analytics.readonly

Google Business Profile

In use

Read the locations you manage and their performance (calls, direction requests, website clicks, Search and Maps views, search keywords), reviews and posts, so they can be shown in dashboards and reports. Publish, only when a member of your team does it (or schedules it): replies to reviews and posts (text, an optional photo and button) on the locations you choose — and edit or delete those replies and posts when a member asks. We never edit or delete your listing details. Only requested when you choose to connect Business Profile.

https://www.googleapis.com/auth/business.manage

Google Tag Manager

In use

Read the containers you can see and, for the ones you link to a client, their published version (tags, triggers, variables) and unpublished workspace changes, to check that Google Analytics, phone-click and form tracking are set up correctly and to show when a new version is published. Read-only: we never create, change or publish anything in Tag Manager. Only requested when you choose to connect Tag Manager.

https://www.googleapis.com/auth/tagmanager.readonly

Regenious’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is never sold, never used for advertising and never used to train AI models.

How we protect it

Security built in, not bolted on

  • Least Google access

    Search Console and Analytics are connected with read-only scopes. On Business Profile we publish only the review replies and posts your team writes and chooses to publish, change or remove them only when your team does, and never edit your listing details.

  • Encrypted tokens

    Google access and refresh tokens are encrypted with AES-256-GCM using rotatable keys, and refreshed automatically before they expire.

  • Secure sign-in to Google

    Connecting uses Google’s OAuth with PKCE and a one-time state — only the browser that started it can finish it.

  • Workspace isolation

    Every database query is limited to the agency that owns the data. Team members can be restricted to their assigned clients.

  • Private files

    Logos and PDF reports live in private storage and open only through short-lived signed links. Share links store only a hash.

  • Audit log & 2FA

    Important actions are written to an audit log. Two-factor sign-in is available and sessions are bound to the device.

  • No human access by default

    Our staff do not read your Google data, except with your permission for support, for security, or when the law requires it.

  • Disconnect & delete anytime

    Disconnect stops syncing and revokes our access at Google. Ask us and we delete the rest within 30 days.

Your clients stay yours. We never contact your clients for our own purposes, share your client list with another agency or anyone else, or use it for our own sales or marketing. Your clients only get the emails your team sets up, such as reports and portal sign-in links. Under our data processing agreement you are the controller of that data, and a signed copy is available on request.

Full details in our privacy policy and on the data deletion page.

Your next client report, done before lunch.

Pick a plan, create your agency workspace, connect Google and send a branded report today.

Choose your plan Talk to us