Security

Read-only by default. Human approval always.

What Crescade can access, what the AI model sees, where your data lives and how to take it with you. Questions: hello@crescade.com.

Read-only Google access

Crescade requests only analytics.readonly and webmasters.readonly, plus your Google identity. It cannot change tracking, campaigns, properties or Search Console settings. Disconnecting deletes the stored tokens and asks Google to revoke the grant.

Tokens encrypted at rest

Google access and refresh tokens are encrypted with AES-256-GCM before they are stored. Exports never include connector secrets.

Nothing ships without a person

Crescade does not write to your website, analytics or ad accounts. Agents produce findings, briefs and plans that wait for a human decision.

Your Google data stays out of AI models

Connected Google Analytics and Search Console data is never sent to an AI provider. Measurement reports are computed without a model.

What the AI model sees

Sent to the model

Public text captured from your website
Sources saved in your workspace
Company context you confirmed

Never sent

Google Analytics or Search Console data
Passwords, tokens or payment details
Anything from another customer's workspace

Every agent run is recorded in your workspace with the model used and its credit cost. Website text is treated as untrusted evidence: instructions found on a page are ignored by the agents.

Infrastructure and accounts

HTTPS everywhere with HSTS; the database is reachable only from the application network, not from the internet.
Accounts require a verified email or Google or Apple sign-in. Repeated failed sign-ins lock the account temporarily.
Public forms and the free scan are rate limited, and the scanner refuses private and internal network addresses.
Workspace roles (owner, admin, member, viewer) are checked on the server for every change.

Your data, your call

Export a JSON copy of your workspace from Account settings at any time.
Delete your account from the same page: you are signed out, connections are revoked and running work stops immediately; customer content is erased after 30 days.
Anonymised billing and security records are kept only for the retention period the law requires.

Service providers

Provider	Purpose	Location
OVHcloud	Application server and database	United Kingdom
Cloudflare	DNS and bot protection on public forms	Global network
DeepSeek	AI model for agent tasks and the scan's first-impression read	China
Google	Analytics and Search Console data you connect; site analytics only after consent	Global
Resend	Account and task emails	United States
PostHog	Product usage events, sent from our servers	United States
Sentry	Error monitoring, with personal data stripped	United States

Report a vulnerability to hello@crescade.com. See also the privacy policy.

What the AI model sees

Sent to the model

Public text captured from your website
Sources saved in your workspace
Company context you confirmed

Never sent

Google Analytics or Search Console data
Passwords, tokens or payment details
Anything from another customer's workspace

Every agent run is recorded in your workspace with the model used and its credit cost. Website text is treated as untrusted evidence: instructions found on a page are ignored by the agents.

Infrastructure and accounts

HTTPS everywhere with HSTS; the database is reachable only from the application network, not from the internet.

Accounts require a verified email or Google or Apple sign-in. Repeated failed sign-ins lock the account temporarily.

Public forms and the free scan are rate limited, and the scanner refuses private and internal network addresses.

Workspace roles (owner, admin, member, viewer) are checked on the server for every change.

Your data, your call

Export a JSON copy of your workspace from Account settings at any time.

Delete your account from the same page: you are signed out, connections are revoked and running work stops immediately; customer content is erased after 30 days.

Anonymised billing and security records are kept only for the retention period the law requires.

Service providers

Provider	Purpose	Location
OVHcloud	Application server and database	United Kingdom
Cloudflare	DNS and bot protection on public forms	Global network
DeepSeek	AI model for agent tasks and the scan's first-impression read	China
Google	Analytics and Search Console data you connect; site analytics only after consent	Global
Resend	Account and task emails	United States
PostHog	Product usage events, sent from our servers	United States
Sentry	Error monitoring, with personal data stripped	United States