SECURITY AND DATA

Read-only access. Your data stays yours.

What TouchTargets can see, what it can change, where your data lives and how to delete it, in plain words.

See what we accessWhat we access Read the privacy policyPrivacy policy

✓ Read-only Google accessRead-only✓ A DPA on requestDPA✓ Delete on request

permissions/your-workspace

Search ConsoleRead-only

Google Analytics 4Read-only

Your public pagesRead-only

WordPress pluginApproved fixes only

Payment detailsNever seen

WHAT WE CAN SEE✓ Your public website pages, once you have proved you own the site✓ Search Console data, read-only✓ GA4 reports, read-only✓ Bing Webmaster Tools and PageSpeed data✓ Business details you enter yourself

WHAT WE NEVER DO✕ Change your site without your approval✕ See or store your card details✕ Sell your data or use it for advertising✕ Use your data to train AI models

HOW IT'S PROTECTED

The details.

Encrypted in transit and credentials at restConnections are encrypted in transit. Credentials and Google tokens are stored encrypted.

Where data livesHosted on a dedicated server managed through Laravel Forge.

Google tokensUsed only to read your own data. Revoke them from your Google account any time.

Workspace isolationEach workspace’s data is kept separate from every other workspace.

Restore points for fixesEvery Auto-fix change keeps a restore point, so you can undo it.

Audit logChanges made through TouchTargets are written to an audit log.

Deleting your dataAsk us at any time. We delete or anonymise your data within 30 days, except records we must keep by law. Backups roll off within 35 days.

Privacy policyHow we handle personal data.Data processing agreementFor businesses that need a DPA.Sub-processorsEvery service that touches your data.Our crawlerHow our bot identifies itself and behaves.

Questions about security

No. Google access is read-only. We can read Search Console and GA4 data but cannot change settings, users or properties.

Remove the connection in your workspace settings, or revoke access from your Google account’s security page.

Use the contact page and choose “Something else”. Please include what you found and how to reproduce it.