Skip to content
EightySixOS

Privacy

Privacy, plainly.

Last updated: August 2026

EightySixOS is built by EightySix Digital. This policy covers two things: the EightySixOS marketing website at eightysixos.com, and the EightySixOS application, which business owners can connect to their own Google accounts. It is written to be read, not to hide behind legal language.

The marketing website

If you sign up for EightySixOS Solo, I collect the details you provide in that form, such as your name, email and business details. I use this only to set up and support your account, and to contact you about EightySixOS. Form submissions are handled by my form provider, and the site is hosted on a standard cloud platform. I do not sell this information, and I do not use advertising cookies or cross-site tracking on the site.

The EightySixOS application and Google user data

Inside the application, your business can connect its own Google account so that EightySixOS can show its search and analytics performance in one place. The rest of this policy explains exactly what that involves.

What Google data EightySixOS accesses

When you connect Google, EightySixOS requests two read-only scopes, and nothing more:

  • Google Search Console (read-only): webmasters.readonly. Your properties and their search-performance data.
  • Google Analytics (read-only): analytics.readonly. Your GA4 properties and their traffic data.

These are read-only. EightySixOS cannot change anything in your Google account. It does not use Google to sign you in, and it does not request access to Gmail, Drive, contacts, or any other Google service. I only request the minimum scopes the features need.

Why I access it, and how it is used

The connected data is used for one purpose: to power the search and analytics views inside EightySixOS that you can see and asked for. It is not used for anything else. EightySixOS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What is stored

When you connect Google and EightySixOS syncs your data, it stores:

  • The Google OAuth refresh token for your connection, encrypted.
  • A limited window of Search Console performance data (roughly the last 90 days): daily clicks, impressions, click-through rate and average position, and your top queries and pages.
  • GA4 performance data over the same kind of window: sessions, users, engaged sessions and landing-page figures.
  • The names of the Google properties you connect, and basic connection status.

Short-lived Google access tokens are requested when needed and are never stored.

How stored and transmitted data is protected

These are the actual mechanisms EightySixOS uses, not general reassurances:

  • Encryption in transit. All communication with Google and between you and EightySixOS uses HTTPS/TLS.
  • Encrypted tokens at rest. Your Google OAuth refresh token is encrypted with AES-256-GCM at the application level before it is stored.
  • Locked-down token storage. Encrypted tokens live in a dedicated table with row-level security enabled and no access policies, so no ordinary application role can read it. Only a single server-side credential service, using a restricted service-role key, can reach it.
  • Tokens stay on the server. Tokens are never sent to the browser, and access tokens are never persisted.
  • Tenant isolation. All stored Google data is scoped to your own account and protected by row-level security on a default-deny basis: access is derived from your own membership, so one account can never see another's data.
  • Restricted administrative access. The service-role key that can bypass row-level security is used only by controlled server-side paths and is never exposed to the browser.
  • Least privilege. Only read-only Google scopes are requested, and only what the features need.

Who can access it

Your connected Google data is visible to the members of your own account inside EightySixOS, and to me (EightySix Digital) only where necessary to operate, support or secure the service. It is not read by anyone else.

Sharing, selling and advertising

I do not sell Google user data, and I never share it with advertising platforms, data brokers or resellers. It is shared only with the infrastructure providers that run EightySixOS on my behalf, under their own security and privacy terms: the managed database, authentication and storage provider (Supabase) and the hosting provider (Vercel). Google user data is never used for advertising, retargeting or building advertising profiles.

AI and machine learning

EightySixOS does not currently process your Google user data with any AI or machine-learning system, and it does not use your Google user data to train or fine-tune any AI or ML model, including general-purpose or non-personalized models. If EightySixOS later offers AI-assisted analysis or reporting, it will operate only on your own authorised data to provide features you can see, and your Google user data will still never be used to train general-purpose or non-personalized AI or ML models.

Retention

The performance data covers a limited recent window and is refreshed when your data syncs. Your Google data and encrypted token are kept while your connection and the related account exist. There is no separate, longer archive: when the underlying records are removed, the data is removed with them (see below). If you would like a specific retention period defined for your account, contact me.

Deletion and disconnecting Google

You can remove your data in any of these ways:

  • Revoke access in Google. You can revoke EightySixOS's access at any time from your Google Account at myaccount.google.com/permissions. Once revoked, EightySixOS can no longer refresh access and stops retrieving your Google data.
  • Delete records in the app. Deleting a client, a project or your account removes the associated Google-derived data. Deleting your account also removes the connection and its encrypted token.
  • Ask me. Email me and I will delete the Google data and the stored token held for your account, and confirm when it is done.

Contact and requests

For any privacy question, or to see, correct or delete the information I hold about you, email me at hello@eightysix.digital. If this policy changes, I will update the date at the top of this page.