Legal

Privacy policy

Last updated 3 October 2026

Athena is a private, invite-only SEO dashboard operated by Madushan Kavisekara ("we"). It shows search and traffic reports for websites that its users manage. This policy explains what we collect and why.

Information we collect

• Your Google account details. When you sign in with Google we receive your email address and name, and use them only to confirm you have been invited and to show who is signed in.
• Google Search Console and Google Analytics data. If you connect a site, Athena asks Google for read-only access to that site's Search Console reports (clicks, impressions, queries, pages, index status) and Google Analytics reports (sessions and referral sources). We store these reports and an encrypted access token so the data can refresh each day.
• Bing Webmaster Tools data, if you add a Bing API key, on the same read-only basis.
• What you enter. Keywords, notes, blog plans, booked calls, uploaded CSV exports and anything else you type or upload.

Google permissions we request

• Sign-in: your email address and basic profile (openid, email, profile).
• Search Console: read-only access (webmasters.readonly).
• Google Analytics: read-only access (analytics.readonly).

Athena cannot change your websites, Search Console settings or Analytics properties.

How we use Google user data

We use data received from Google APIs only to provide the features you see in Athena: charts, tables, audits, indexing checks and reports about your own sites. We do not use it for advertising, do not sell it, and do not use it to train artificial intelligence or machine learning models. People cannot read it except you, the people you have invited to the same Athena account, and the operator when needed for security, support or to comply with the law.

Athena's use and transfer to any other app of information received from Google APIs will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements.

Who we share data with

Only the service providers that run Athena: Vercel, which hosts the app, and Supabase, which hosts its database. They process data on our behalf and may not use it for anything else. We do not share data with anyone else unless the law requires it.

How we protect it

All traffic uses HTTPS. Google access tokens are encrypted before they are stored. The database is locked so that only the app, using its own private credentials, can read it, and only invited accounts can sign in.

How long we keep it, and deleting it

We keep a site's data while that site is tracked in Athena. Deleting a site from Athena deletes its data and its stored Google access. You can also remove Athena's access at any time from your Google account'sthird-party connections page. To have your account or any data deleted, email madushankavisekara@gmail.com and we will do it within 30 days.

Cookies

Athena uses only the cookies it needs to keep you signed in and to remember which site you are viewing. There are no advertising or tracking cookies, on the app or on this website.

Changes and contact

If this policy changes, we will update the date at the top of this page. Questions:madushankavisekara@gmail.com.