Privacy policy · Last updated 21 October 2026

What we read, what we keep, and how to take it back

This page covers the Cachi AI website at cachiai.com.au, the free Google Maps ranking report, the emails that come with it, and the optional “Connect my Google account” button on a report.

1. Who we are

Cachi AI is a small local SEO business run by Johann Aguirre, based on the Gold Coast, Queensland, Australia. We build free Google Maps ranking reports for local businesses, and work on their Google ranking for a monthly fee. “We” and “us” on this page means Cachi AI.

2. What the free report reads

A free report is built from information anyone can see. We do not need to log in to anything to build it.

• Public Google Maps data. Where the business comes up for one search from nine points across its town, its public Google listing (name, category, rating, review count, photos count, hours, phone, website), the businesses that come up above it, and their public reviews and posts. We read this through DataForSEO and Google’s Places API. We use Google’s Places details while we build a report, and for a report asked for on our form also while we look for the business’s listing, and keep only Google’s place id and our own conclusions from them, never the details themselves. For a report asked for on our form, the business details we keep, such as the name, address, phone and website on the listing, come from DataForSEO. While you fill in the form we show the listings on Google Maps that match, and we keep only the one you pick.
• Where the town is. For a report we build now, the centre of the town the nine points are spread around comes from OpenStreetMap, the free map anyone can edit, not from Google, and we keep it with the report, which then credits it. When OpenStreetMap cannot place the town, the points are spread around the business’s own pin on Google Maps instead. Some reports we prepare before anyone asks start from the centre of the suburb in the suburb boundaries of the Australian Bureau of Statistics. Reports built before 21 October 2026 keep the centre they were built with, which came from Google. Town centre © OpenStreetMap contributors.
• The business’s website. Up to twelve public pages, the robots.txt file and the sitemap, and Google’s PageSpeed figures for the homepage.
• The figures Google already shows the business. How many people search for the trade in the town each month, as Google reports it, and where the website comes up in the ordinary search results.

The report page is private to its link. It is never listed on search engines, and only someone who has the link can open it. To write the plain English summary on the report and some of our follow-up emails, the figures above are passed to our AI provider, Anthropic, whose terms do not let it train its models on them.

3. What you tell us on the form

When you ask for a report we keep your name, email address, phone number if you give it, business name, website and town. We use them to build and send the report, and to send a short series of follow-up emails about it. Every email has a link to stop them, and replying with the word stop does the same. We never sell or rent your details, and we do not add you to anyone else’s list.

4. Google user data, when you connect your Google profile

A report can show the figures Google already shows you about your own website and, once Google has approved it, your Business Profile, if you choose to connect. This is optional. Nothing is read until you press “Connect my Google account” on your report and agree on Google’s own consent screen.

What we ask Google for

• https://www.googleapis.com/auth/webmasters.readonly, read only access to Google Search Console. We read how many times your website was shown in Google search, how many times it was clicked, its average position, and the searches that showed it, for the last 90 days.
• Your Google account’s email address and account id (openid and email), so we know which account was connected. The id is kept only as a one-way hash under a secret key of ours, enough to tell one account from another and useless to anyone without the key.
• Only once Google has approved our project for it, https://www.googleapis.com/auth/business.manage, which we use to read your Business Profile’s performance figures: how many people saw the profile on Maps and in Search, called, asked for directions, visited the website, booked or sent a message, for the last 90 days, and the searches that showed the profile over the last three full months. To find the right profile we look, when you connect, at the names and Google place ids of the profiles your Google account manages (if Google does not answer then, we try again once a day for up to a week, then stop), and keep only the Google id of the one for this business. Google names this scope “manage”, but we only ever read with it.

What we do with it

• Read only. We never write, post, edit, reply or delete anything in your Google account, your Search Console or your Business Profile.
• Used only for your report. The figures are used to build that business’s own report and its monthly figures, to write the follow-up emails we send you about that report, which may mention them, and, if you become a client, to write our monthly advice on your business. To write the summary on your report, those emails and that advice, the figures are passed to our AI provider, Anthropic, as in section 2, only to write those words for that business. They are never sold, never used for advertising, never shared with anyone else, and never used to train AI models.
• Stored encrypted. The access Google gives us is kept as a token encrypted with AES-256, under a key kept apart from every other key we hold. The figures are stored with your report.
• Who sees it. The figures appear on your report page, which only someone with its link can open. A person at Cachi AI looks at them only to answer you, to fix a problem with your report, or, if you are a client, to read and check the monthly advice written from them before it is used for your business.

How to disconnect

• Press “Disconnect” on your report page. We revoke the access with Google at once.
• Or email [email protected] and we do the same by hand.
• Or remove Cachi AI from your Google account at myaccount.google.com/permissions. Google does not tell us, so we check every connection at least once a week and notice within 7 days.
• Stopping our emails, or telling us you are not interested, disconnects it as well.

How long we keep it

• When you press Disconnect, ask us by email, stop our emails or tell us you are not interested, the figures from Google and any monthly advice written from them, the stored token, your Google account’s email address, the hash of its id, the id of your Business Profile and your Search Console property are deleted at once. If Google cannot be reached at that moment, we keep only the encrypted token until the revoke goes through, and nothing is read with it. Emails we have already sent you stay as they were sent, so a figure one of them mentions stays in that email.
• When you remove our access in your Google account, the same are deleted within 7 days, as soon as we notice.
• We read your figures again once a month. If Google stops letting us read your Search Console or your Business Profile, we find out at that read, and that side’s figures come off your report straight away when Google says the access is gone, or within a week of that read when it does not say why.
• Figures from Google older than 13 months are deleted, whether or not you are still connected, and so is any monthly advice written from them.

5. Cookies and tracking

• The report page records which sections are read. It notes which parts of the page are on screen and for how long, and which buttons are pressed, under a random id kept in your browser’s storage. It sets no advertising cookie.
• Our emails carry a one pixel image that tells us when an email is opened, and their links pass through a counter that tells us when one is clicked.
• Connect my Google account sets one cookie for ten minutes, which protects the sign in with Google from being forged. It is deleted when you come back.
• The website, report pages included, may carry the Meta pixel, which tells Meta that a page was visited so we can measure our ads. It sends the page’s address, never your figures.

6. Contact

Ask us anything about this page, or ask for a copy of what we hold about you or for it to be deleted, at [email protected] or on +61 477 404 430. We answer within a few working days. You can also read our contact page.