Your Search Console data stays under your control

The only Google scope Search Portfolio requests for Search Console is the read-only one, webmasters.readonly, plus your Google account’s email address to label the connection. If Google returns a grant without the read-only scope, the connection is refused, and the grant is revoked unless that Google account is already connected to Search Portfolio, in this workspace or another.

With it, Search Portfolio reads the properties your account can access (and your permission level), performance data (clicks, impressions, click-through rate and average position by date, query, page, country, device and search appearance), the status of submitted sitemaps, and URL Inspection results for URLs you choose to inspect. It cannot add or remove properties or users, submit or delete sitemaps, or change any setting. No other Google service is accessed.

It depends on the tool, so check four things before you approve any connection: the access it asks for, where it keeps your Google tokens, what it does with your data, and how you take access back. For Search Portfolio:

• It asks only for read-only access, as above.
• Google tokens are encrypted with AES-256-GCM using a server-only key, stored apart from everything else, and never written to logs or exposed to your browser.
• Your data is used only to provide the product to you. It is not sold, not used for advertising, and never used to train AI models: the analysis is rule-based.
• You can disconnect at any time, in Search Portfolio or in your Google Account.

In Search Portfolio, open Settings → Google Connections and choose Disconnect: Search Portfolio asks Google to revoke its access (unless the same Google account is still connected to another Search Portfolio workspace) and deletes the stored tokens. The data already imported stays until you delete it.

You can also remove access from Google’s side, in your Google Account’s permissions page, without signing in to Search Portfolio.

In Settings → Data & Privacy you can delete all imported Search Console data (which also disconnects every Google account) or your whole account; if a paid plan still renews, cancel it in Billing first. Deletion takes effect immediately in our live database, and encrypted backups expire within 30 days.

Daily totals, and the analyses and reports generated from them, are kept while your account is active, so you can see history; detailed query and page tables are kept only for the most recent analysis windows, and cached responses from Google expire automatically. How long data is kept · How deletion works

Analysis is rule-based and uses only the days Google has finalized, so every view says how fresh it is. Search Portfolio is an independent product and is not affiliated with or endorsed by Google. Google Search Console is a trademark of Google LLC. Search Portfolio follows the Google API Services User Data Policy, and the privacy policy lists exactly what is stored and for how long.