Privacy Policy
This policy explains what data the Intrinsic applications access, how we use it, and the choices you have — covering both our SEO tools and Intrinsic Loop, our call-tracking and lead-attribution service, with particular attention to data we access from your Google and Meta accounts.
Who we are
Intrinsic and Intrinsic Loop ("the app", "we", "us") are operated by We Are Intrinsic Limited, a company registered in England and Wales (company number 13158150) with its registered office at Mabgate Business Centre, Mabgate, Leeds, England, LS9 7DR. You can reach us about privacy at hello@weareintrinsic.co.uk.
The data we handle
Account information
When you create an account we store your email address and basic profile and plan information so we can authenticate you and provide the service.
Project and analysis data
We store the websites, keywords, competitors and reports you create within the app so your projects persist between sessions.
Call, enquiry and lead data (Intrinsic Loop)
Intrinsic Loop tracks the enquiries a business receives so it can attribute them to the marketing that caused them. On behalf of the businesses that use it, Loop processes:
- Phone calls — the caller's number, call time, duration and outcome. Where a business enables it, calls are recorded and transcribed; callers hear an announcement before recording starts and, where configured, can opt out.
- Forms, chats and bookings — details a visitor submits on the business's own website, such as name, email address, phone number and message.
- E-commerce events — order references and values a business's website reports, used for revenue attribution.
- Visit measurement — a first-party visitor identifier, the pages visited and the advertising source (for example a search keyword or ad click id). Loop's website tag only runs this measurement after the visitor has given consent through the site's cookie banner where one is present.
For this data, the business using Loop is the data controller and We Are Intrinsic Limited processes it on their instructions. If you have contacted a business that uses Loop and want to exercise your rights over that data, you can contact the business directly or reach us at the address above and we will pass your request on.
Meta account data (only if you connect it)
Connecting a Meta (Facebook) ad account is entirely optional. If you choose to connect it, we access your ad account list and read-only advertising spend and performance figures so the app can report your return on ad spend. If you enable conversion sharing, the app sends conversion events (for example, a qualified phone call) to Meta's Conversions API for your own ad account, using identifiers that are hashed before sending. We do not post to your pages, read your profile beyond basic account identity, or access your personal content.
Google account data (only if you connect it)
Connecting your Google account is entirely optional. If you choose to connect it, you grant the app read-only access to the following, and nothing else:
- Google Search Console (scope: webmasters.readonly) — search-performance data for sites you have access to: search queries, impressions, clicks, click-through rate and average ranking position, by page and over time.
- Google Analytics 4 (scope: analytics.readonly) — traffic, engagement and conversion metrics for the properties you have access to, such as sessions, users, channels and landing-page performance.
- Your Google account email address — used only to show you which Google account is connected.
We never request write access, and we cannot change anything in your Google Search Console or Analytics. We only read the properties and sites you explicitly select for a project.
How we use Google data
We use the Search Console and Analytics data solely to produce the features you ask for inside your own account: performance reporting and AI-generated insights and recommendations aimed at improving your search rankings and site performance.
To generate those insights, the relevant performance figures are sent to our AI provider (Anthropic) to be analysed and turned into written advice. This data is processed to deliver the feature you requested and is not used by us, or by Anthropic, to train AI models. We do not use your Google data for advertising, and we do not sell it.
Intrinsic's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We only use Google user data to provide and improve the features you request, we do not transfer or sell it to third parties except as needed to operate those features, and we do not use it for advertising or to train generalised AI/ML models.
How your data is stored and protected
- Application and project data is stored in our managed database provider (Supabase), protected by row-level security so each account can only access its own data.
- Google access and refresh tokens are stored separately from all other data and are restricted to back-end services only — they are never exposed to the browser or to other users.
- Access to the underlying systems is limited to authorised personnel.
Sharing and subprocessors
We do not sell your personal data or your Google data. We share data only with the service providers needed to run the app, acting on our instructions:
- Supabase — database and authentication hosting.
- Vercel — application hosting.
- Anthropic — AI analysis used to generate insights from the data you submit.
- Twilio — telephone numbers, call routing and recording for Intrinsic Loop.
- Deepgram — call transcription for Intrinsic Loop.
- Postmark / Resend — transactional email delivery.
- Google and Meta — only when you connect those accounts, as described above.
Data retention and deletion
We keep your data for as long as your account is active. You can disconnect your Google account at any time from within the app, which deletes the stored access and refresh tokens; you can also revoke the app's access directly at myaccount.google.com/permissions. You can disconnect a Meta ad account from within the app, which deletes the stored token; you can also remove the app under Business Integrations in your Facebook settings.
To request deletion of your account and associated data — including any data received from Google or Meta — email hello@weareintrinsic.co.uk from the address on your account with the subject "Data deletion request". We will delete the data and confirm within 30 days. Callers and website visitors of businesses that use Intrinsic Loop can make the same request and we will action it with the relevant business.
Your rights
Depending on your location, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these, contact us at hello@weareintrinsic.co.uk.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "last updated" date above and, where appropriate, notify you within the app.
WE ARE INTRINSIC · PRIVACY POLICY
Template note for the operator: This is a starting template to satisfy Google's OAuth requirements and common privacy expectations — it isn't legal advice; have it reviewed against your obligations (e.g. UK GDPR) before relying on it.