سياسة الخصوصية

Privacy Policy — English

Effective 25 October 2026

Operator and scope

LeaforyX AI Intelligence is an internal reporting application operated for the LeaforyX store. This policy covers the reporting application, separately from store purchases. Privacy contact: leaforyx.sa@gmail.com.

Data processed and purpose

The application processes a hosting-provided sign-in identifier, connection settings and OAuth tokens, the owner's selected GA4 property ID, aggregate Google Search Console and GA4 reports, source identifiers and capture metadata, authorized Snapchat ad reports, owner-uploaded reports and bounded public product data. These data are used to fetch, retain, display, analyze, compare and export reports for the authorized owner. Do not upload passwords, one-time codes or personal customer records to aggregate-report imports.

Google API data and Limited Use

The direct Google connection requests the webmasters.readonly and analytics.readonly scopes to read Saudi web search and analytics reporting. A refresh token allows the server to renew authorized access when reports are requested. LeaforyX does not sell Google user data, use it for personalized advertising, or use it to train general-purpose AI models. The application's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and service providers

The private dashboard is hosted through Sites and its Cloudflare infrastructure. Connection configuration and OAuth tokens are encrypted in server-side storage. Reports and metadata are retained in the owner's private application storage. When the owner uses LeaforyX tools in ChatGPT, requested report results are returned to that ChatGPT session for processing and responses. Hosting and ChatGPT processing is subject to the relevant providers' policies and account settings. OAuth secrets are not returned in reporting-tool results. These public pages contain no private reports or credentials.

Retention, revocation and deletion

The application retains the last successful Google report per source and may retain additional snapshots or imports within its archive limits. It has no single automatic retention period for all data. Failed refreshes preserve the last successful report and record the latest attempt. Disconnecting Google in the application removes the local connection configuration and tokens; it can leave earlier reports retained and does not automatically revoke consent at Google. The owner can revoke access in Google Account connection settings and request deletion of retained application data by emailing the privacy contact. Account-control verification may be required before fulfilling a data request.

Control and updates

The owner can inspect and export reports and control source authorization. Source delays and coverage limitations apply; missing dates are not automatically treated as zero activity. Policy changes are published here with an updated effective date. Contact the address above for access or deletion requests.