GSC Bing Auto Sync Privacy Policy

Scope of this policy

This policy applies only to the separately operated GSC Bing Auto Sync Google Apps Script application. It does not replace the IntentWorth privacy policy.

Google user data we collect

With the read-only webmasters.readonly permission, the application accesses the authorized Google account's Search Console site-property list, root URLs, and permission levels. It uses this information only to identify owned properties and the matching Bing Webmaster site records. It does not request Search Analytics queries or collect clicks, impressions, Google account profile data, Gmail data, Drive data, or website content through the Google Search Console API.

Public website checks

The script can request the public homepage HTML and sitemap.xml of an owned site before synchronizing it. It uses these public responses to check reachability, identify a noindex directive, and find an available sitemap URL. It does not authenticate to the website, access non-public pages, or collect visitor data.

How data is used and shared

The application uses owned property URLs only for the administrator-requested synchronization. For that purpose, it may send the root site URL to the public website being checked, to Bing Webmaster Tools when registering, verifying, submitting, inspecting, or removing a Bing Webmaster entry, and to an administrator-selected Vercel or Cloudflare DNS provider when DNS verification is enabled. Before selecting a DNS provider, the optional DNS-verification flow queries Google Public DNS (dns.google) with only the public zone or Bing verification hostname and record type to identify the authoritative DNS service and check the Bing CNAME. It does not send a Google OAuth token, Bing API key, or DNS-provider token to Google Public DNS. It does not sell Google user data, use it for advertising, expose it to other users, or send it to IntentWorth.

Optional DNS providers

DNS verification remains disabled unless the administrator enables it and configures a Vercel or Cloudflare token. When enabled, the script sends only the request needed to create or inspect the Bing verification record with the selected provider.

Storage and retention

The application stores configuration, API credentials, selected root URLs, and limited synchronization and safety state in Google Apps Script Script Properties for the administrator's own script. This state is retained only while the administrator keeps the script and until the administrator deletes the script or its Script Properties. Removing the script or its Script Properties removes the stored state; the administrator can contact support for privacy questions.

Security and contact

The application uses Google Apps Script authorization and does not display or publish configured API credentials. For access, deletion, or privacy questions, contact support@intentworth.com.