Core infrastructure
Cloud hosting, managed database, cache or queue, and object storage providers may process customer information to operate the service.
Product operations
Payment, transactional email, support and consented analytics providers may process limited information for their defined service purpose.
AI providers
AI model providers may process prompts, retrieved evidence and generated artifacts when a customer requests an AI-assisted feature. Applicable provider roles, retention and training terms depend on the selected service and contract.
OpenAI: Google-derived AI evidence
When AI assistance and the relevant Google sharing permission are enabled, selected GSC search-query and page-path summaries with performance metrics and GA4 landing-page and traffic summaries may be sent to OpenAI with relevant project context to produce the requested content opportunities or recommendations. Each Google source is included only if you have enabled it for that project. These summaries remain Google-derived data even when aggregated. Google connection credentials are not sent as AI prompt evidence.
Manage your choices in Settings > Privacy & AI. AI assistance and Google sharing start off and are not accepted automatically when you register or connect Google. AI assistance allows OpenAI processing of your submitted messages, business answers and selected SEO evidence. Search Console and GA4 sharing are separate, optional choices for each project and your own requests. Saved choices apply to future requests until you change them; we do not ask again for every generation. Turning a permission off blocks future transmissions that have not already been sent, including pending work.
Google sign-in and viewing reports from connected Google services do not require AI sharing. Leaving the choice off does not recall earlier transmissions or delete saved results.
We do not opt in to sharing Google data with OpenAI for model improvement. We do not use Google data to train general-purpose AI models.
OpenAI may retain data for security and abuse prevention under its applicable terms. This is not a zero-retention promise. See OpenAI API data controls.
Previously generated content opportunities, recommendations and supporting evidence may be stored separately from a live Google connection. Disconnection does not retract data already processed by OpenAI, delete your Bostic.ai account, or automatically delete saved AI evidence, generated results or database backups.
See the Google data privacy disclosures for Google sign-in, read-only connections, data use restrictions, disconnection and deletion details.
Updates and questions
This page will be updated as the production vendor register changes. Questions about provider processing may be sent to privacy@bostic.ai.