How we collect, use and protect personal information across the OG01 platform and services.
OG One Pty Ltd (ABN 23 676 552 855) operates OG01™. We are committed to protecting the privacy of people who use the OG01 website, scoring platform, reports, remediation services and associated products. This Privacy Policy explains what personal information we collect, how we use it, how we protect it and the choices available to you. It applies to the OG01 website, platform and associated services.
We may collect personal information in the following ways:
Information you provide directly, when you create an account, submit a property, business or domain for scoring, make a purchase, request a report, request remediation, register interest in a product or service, or contact us. This may include your name, email address, phone number, business name, organisation, job title and the domains or website URLs you submit.
Payment information, when you make a purchase, payment is processed by our payment provider. We do not store your full payment card details on our systems.
Usage information, we may collect basic technical and usage information about how visitors interact with OG01, including information required to operate, secure and improve the platform.
When you submit a domain, property or organisation to OG01, the platform may analyse publicly available information and generate scoring and diagnostic outputs. These may include: overall scores; Smart Card readings; technical and retrieval findings; search and brand intelligence; AI-readiness and risk findings; reports; remediation priorities; remediation status; and rescore history.
Submitted domains, resulting scores and associated reports may be stored so we can deliver the service, maintain scoring history, undertake remediation where purchased, and allow results to be compared over time.
OG01 scoring may use publicly accessible information including website content, structured data, search signals, citation and source signals, location and entity information, and data made available through third-party providers.
Where you submit a domain or organisation that you do not own or control, you must use OG01 only for a lawful and legitimate purpose.
You can ask us to delete a stored score history for a domain you own or control by emailing support@og01.ai.
Where you connect a Google account, we access only the read-only data you authorise (Search Console and Analytics), store the connection securely, and you can disconnect at any time. Connections expire after ninety days.
Connecting a Google account is optional. OG01 works without it. If you choose to connect, you select a Google account that already has access to the website you want verified, and Google asks you to approve the access before anything is shared with us.
Through Google sign-in we may receive basic account identity information, including an account identifier, your email address and basic profile information.
We request read-only access to two Google services. Google Search Console (read-only) is used to confirm that the connected Google account has access to the website being scored; to identify the matching Search Console property; and to retrieve first-party search performance information such as clicks, impressions, click-through rate, average position, queries, pages, countries and devices. Google Analytics (read-only) is used to identify the matching GA4 property; to retrieve first-party traffic and channel information such as sessions, users, channel and source; and to identify AI assistant referral traffic where present.
The access is read-only. OG01 does not request permission to modify Google Search Console or Google Analytics data, and does not modify it. We do not request access to Gmail, Google Drive or Google Business Profile.
How we use it. Google data is used to provide and improve the OG01 report and rescoring functionality for the website you connected. Verified Google evidence supplements the report. It is not used to create a score uplift that the evidence does not support, and your original score remains retrievable. Only properties matching the website being scored are associated with that report.
How it is stored and shared. Google OAuth credentials and tokens are held by OG01 infrastructure and are not provided to the independent scoring component. Google connections are associated with your site or domain so that first-party data can be refreshed when you rescore. Any processing by third-party service providers is only for providing or securing the OG01 service, and is subject to the Service providers section of this policy. We do not sell Google user data. We do not use Google user data for advertising. We do not use Google user data to train generalised artificial intelligence or machine learning models.
How to revoke access. You can revoke OG01’s access at any time through your Google Account permissions or security settings, at myaccount.google.com/permissions. Where available, you can also disconnect Google from within OG01. Revoking access stops any further retrieval of Google data. Information already received is handled under the data retention and deletion terms set out elsewhere in this policy.
Limited Use. OG01’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We may use the information we collect to: provide OG01 scoring and diagnostic services; generate and store scores, Smart Cards and reports; identify and prioritise remediation work; provide managed remediation services where purchased; perform rescoring and compare changes over time; process payments; create and manage accounts and licences; provide customer support; respond to enquiries; maintain and secure the platform; improve OG01 products and services; maintain transaction and operational records; and communicate with you about your account, purchases and services.
Where you have purchased a service or requested updates, we may also send transactional, service and product communications. You may opt out of marketing communications at any time using the unsubscribe mechanism provided in those communications or by contacting us.
We do not sell or rent your personal information to third parties.
Payments may be processed securely by Stripe or another payment provider disclosed at the point of purchase. When you make a payment, your payment information is transmitted directly to the payment provider and handled under its own privacy and security terms. OG One Pty Ltd may receive payment confirmation and limited transaction information required to fulfil your purchase, provide the service and maintain financial records. We do not receive or store your complete payment card number.
We use third-party email and communications providers to deliver operational emails such as: score and report delivery; purchase confirmations; account notifications; service updates; remediation communications; and product communications where permitted.
Your email address and related communications data may be processed by those providers only to the extent necessary to provide these services. You can unsubscribe from marketing communications at any time. Transactional or operational communications required to provide a product or manage your account may continue where necessary.
OG One Pty Ltd uses third-party service providers to operate OG01. These may include providers of: cloud infrastructure; databases and data storage; payment processing; email delivery; analytics; security; website infrastructure; customer support; and data and scoring inputs.
These providers may process personal information only to the extent necessary to provide their services to us and are subject to their own contractual, privacy and security obligations. Some service providers may store or process information outside Australia. Where Australian privacy law requires us to take particular steps in relation to overseas disclosure or processing, we will do so.
We may use analytics to understand how visitors and customers use OG01 and to improve the platform. We do not sell analytics data. Where analytics or other technologies involve non-essential tracking, we will provide any notice or consent mechanism required by applicable law.
OG01 may use cookies and similar technologies required to: keep users signed in; maintain sessions; provide platform functionality; protect accounts and the service; remember necessary preferences; and understand platform performance.
Necessary cookies may operate automatically because they are required to provide the service. Where non-essential cookies require consent, we will seek that consent before they are used.
og01_ref — first-party, 90 days — records which team member introduced you so we can attribute the sale; no tracking beyond og01.ai.
We take reasonable technical and organisational steps to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure. These measures may include: encrypted connections; access controls; secure infrastructure; authentication controls; restricted internal access; and operational security procedures.
Access to personal information within OG One Pty Ltd is limited to people who require it to operate or provide OG01 services. No internet-based service can guarantee absolute security, but we take reasonable steps appropriate to the nature of the information we hold and the services we provide.
If OG One Pty Ltd is subject to the Notifiable Data Breaches scheme and an eligible data breach occurs, we will assess the incident and notify affected individuals and the Office of the Australian Information Commissioner where required by law.
We retain personal information, scoring data, remediation records and transaction records for as long as reasonably necessary to: provide OG01 services; maintain customer accounts; maintain scoring and rescore history; meet contractual commitments; comply with legal and accounting obligations; resolve disputes; and maintain appropriate business records.
Where information is no longer reasonably required and we are not legally required to retain it, we will take reasonable steps to delete it or de-identify it. You may request deletion of your account and associated personal information, subject to information we are legally or reasonably required to retain.
You may request access to personal information we hold about you and request correction where information is inaccurate, incomplete or out of date. You may also request deletion of personal information where applicable. Contact us using the details below. We will respond within a reasonable period and in accordance with applicable Australian privacy law.
If you believe we have not handled your personal information appropriately, please contact us first so we can investigate the issue. If you are not satisfied with our response, you may have the right to contact the Office of the Australian Information Commissioner.
We may update this Privacy Policy from time to time to reflect changes to OG01, our information-handling practices, our service providers or applicable law. The current version will be published on the OG01 website with the date of the latest update shown above.
Contact: