Read-only by design.

Alpaga exists to read your analytics, not to change them. These are the guarantees the product is built around.

Access you grant

• Sign in uses Google OpenID Connect (openid, email, profile), for identity only.
• Google Analytics is a separate consent for analytics.readonly.
• Search Console is a separate consent for webmasters.readonly.
• OAuth uses the authorization-code flow with PKCE and a single-use, expiring state bound to your user and workspace.

How tokens are stored

Refresh tokens are encrypted with AES-256-GCM using a server-held key before they are written to the database. They are never returned to the browser, never logged and never included in AI prompts. Disconnecting revokes the token with Google and stops all scheduled access; you can also delete the cached analytics data.

Tenant isolation

Every query, mutation, background job and AI tool call verifies workspace membership on the server. Website IDs supplied by the browser or the AI model are re-checked against your workspace before any data is read. Properties can only be mapped if they were discovered through your own Google connection.

Google user data

Alpaga's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google data is used only to show you your dashboards, generate insights and answer your questions.
• It is not sold, not used for advertising, and not used to train AI models.
• The AI provider receives only the aggregated metrics needed to answer a specific question, under a no-training API agreement.
• Humans do not read your data unless you ask for support, it is required for security, or the law requires it.

AI safety

The model cannot run database queries or code. Content fetched from web pages is labeled untrusted and cannot override system rules. Page inspection is limited to your own domains, blocks private and IP-literal hosts, re-validates every redirect and caps response size.

Reporting a vulnerability

Email security@alpaga.si. We respond within two business days.