Private SEO tools
Privacy policy
Effective 9 November 2026.
Ndat SEO Tools is operated by Ndat Tran for personal use by ndat.tran@gmail.com. Contact: ndat.tran@gmail.com.
Google data and its use
The service verifies the owner's Google identity and accesses authorized Google API data to answer the owner's SEO and traffic-research requests. Depending on the tool, it reads Search Console properties, performance, indexing and sitemap data; GA4 account and property reports; and Google Ads account identifiers and keyword-planning results.
Search Console changes are limited to explicitly requested property additions and sitemap submissions with separate change permission. Google's Ads OAuth permission is used for research; this service exposes no campaign or billing mutation tools. GA4 access is read-only.
Storage and security
Google account identifiers, granted scopes, connection timestamps, encrypted Google refresh/access credentials and encrypted keyword-research caches are stored in Cloudflare D1. Assistant OAuth authorization records use Cloudflare KV. HTTPS, owner-identity checks, bearer/OAuth authentication, rate limits, short-lived consent cookies and authorization state protect the service.
Change audit records contain the client identifier, action, target, time and outcome, rather than Google credentials or full Google response bodies. Infrastructure providers process connection and security information needed to operate the service.
Sharing and use
Requested data is returned to the assistant service the owner has connected, such as ChatGPT or Claude, or the owner's authorized coding client. Cloudflare processes storage and requests as the hosting provider; Google processes API and authentication requests. Connected assistant providers apply their own terms, retention and account settings to data they receive.
This service does not sell Google user data, provide it to other users, or use it to train models. Google user data is used for the owner-requested features in accordance with the Google API Services User Data Policy, including its Limited Use requirements where applicable.
Retention and deletion
Credentials and connection records remain until replaced or removed by the operator. Keyword results are eligible for cache reuse for up to 24 hours; expired rows may remain until replaced or manually deleted. Change audit records remain until the operator deletes them.
Revoking a Google grant stops future authorized API access once Google invalidates the credentials; it does not erase existing Cloudflare records or copies already received by an assistant. The operator can remove credentials, caches, audit records and assistant grants from D1/KV storage. Send deletion requests to ndat.tran@gmail.com.
Your controls
Revoke Google access in Google Account connections, and disconnect an assistant through its connection settings. The grants are separate. Connecting this service does not install a website analytics tracker.