Privacy Policy

Content Miner is operated by Corriston Consulting, LLC, Tampa, Florida 33616. Privacy questions and account requests can be sent to sales@corristonconsulting.com.

This policy explains how we handle information submitted through the Content Miner website, checker, gated site scan, portal, support channels, and related product workflows.

Information we process

Submitted page URLs, site domains, email addresses, scan results, plan status, and support messages may be stored so reports can be shown again and improved over time.

Depending on how you use the service, we may also process account identifiers, license status, payment-provider references, browser and device information, IP-derived operational logs, analytics events, error reports, and communications you send to us.

How information is used

We use submitted information to generate reports, maintain usage limits, troubleshoot the service, provide support, and understand which product surfaces are useful.

We may use aggregated or de-identified operational information to improve scoring, reduce duplicate findings, monitor reliability, prevent abuse, and decide which checker, scan, and portal features need work.

Website and page data

Public scans may read publicly available page content, titles, headings, links, metadata, schema, robots directives, sitemap entries, and similar technical signals. Content Miner does not change your website, publish content, or log into private areas unless a separate integration is explicitly provided and authorized.

Google account connections

Content Miner can connect to Google Search Console, Google Analytics 4, and Google Business Profile, and to Bing Webmaster Tools. These connections are optional and you authorize each one yourself. Content Miner only ever reads. It never creates, edits, or deletes anything in your Google or Bing account, your Analytics property, your Business Profile, or your website.

Where Google offers a read-only permission, that is the one we ask for. Search Console and Analytics are both connected with read-only permissions. Google publishes no read-only permission for Business Profile, so the only one available also grants management access, and Google’s consent screen will say Content Miner can edit or delete your listings. We do not. Every Business Profile request we make is a read.

What we read and store, per site you have saved:

• Search Console: the verified property name, and performance rows covering search queries, pages, clicks, impressions, click-through rate, and average position.
• Google Analytics 4: the property identifier, which events you have configured as key events, and how many times each event occurred over a date window. We do not request or store user-level data, demographics, or page-path reports.
• Google Business Profile: a timestamped snapshot of the public profile fields for a location you select, including name, address, phone, website, hours, categories, services, and service area.
• Bing Webmaster Tools: the verified site and top-page performance rows.

We use this only to produce your reports: to ground scoring in real search queries rather than guesses, to tell you whether the outcomes you care about are actually being measured, and to compare your public pages against your business profile. We do not sell it, use it for advertising, or use it to train machine-learning models.

How we protect connected account data

The access credential a provider issues when you connect an account is encrypted before it is stored, never in plain text. We use AES-256-GCM, and every credential gets its own randomly generated initialization vector, so no two are encrypted the same way. A credential is decrypted only by code running on our own servers, at the moment we make a read-only request to that provider on your behalf. It is never sent to your browser, and it never appears in a report.

Every table in the Content Miner database has row-level security enabled. Nobody browsing the site logged out can reach any of your connected account data. Most of it — your Analytics 4, Business Profile, and Bing records, and your stored Search Console query rows — cannot be read by a browser session at all, even a signed-in one: it is reachable only by our server-side code, which checks that you belong to the saved site before it reads anything. The remaining Search Console records can be read by your signed-in session, but the database itself restricts every row to sites you are a member of. One customer’s evidence is never reachable from another customer’s session.

All traffic between you and Content Miner is encrypted in transit over HTTPS. The credentials we use to talk to each provider, and the key that encrypts your stored tokens, are held in our hosting environment’s configuration. They are not written into the application source code and are not kept in our code repository.

Connected account data and Content Wizard

Content Wizard answers questions about your own report. When you ask it something, the relevant evidence from that report is sent to our third-party AI provider so it can generate the answer. That evidence can include search queries and their impression counts, page-level performance figures from Search Console and Bing Webmaster Tools, and Analytics event names and counts for the site you are asking about.

This transfer happens only to produce the answer you asked for. Your connected account data is not used to train or improve any generalized AI or machine-learning model, is not shared with anyone else, and is not used for advertising. If you would rather no connected account data reach the AI provider, do not use Content Wizard on a site with a connected account.

Google API Services Limited Use

Content Miner’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Third-party services

The site may use hosting, analytics, email, payment, and plugin delivery services. Those providers process data only for the function they provide to the site.

Examples may include infrastructure hosting, database storage, email delivery, analytics, payment processing, and software licensing. We do not sell submitted scan data as a standalone data product.

Retention

Scan records, portal history, account records, and support messages may be retained while needed to provide the service, maintain audit history, support subscriptions, resolve disputes, comply with law, and protect the service from abuse.

Evidence imported from a connected Google or Bing account is stored per saved site and goes stale on a schedule, after which a fresh import is required before it appears in a new report.

When you disconnect Google Analytics 4 or Google Business Profile, Content Miner stops importing immediately and asks Google to revoke our access. Snapshots already stored for that provider are deleted automatically 90 days after you disconnect, or immediately if you choose that option at the time you disconnect. You can also revoke Content Miner’s access at any time from your Google Account permissions page, and you can request deletion of any stored evidence by emailing sales@corristonconsulting.com.

Your choices

You can avoid gated scans by using the public checker only. For account or support requests, contact the operator from the email address used to access the portal.

You may request access, correction, deletion, or account support by emailing sales@corristonconsulting.com. We may need to verify the email address, account, domain relationship, or transaction record before acting on a request.