Harlemon Legal
Privacy Policy
Harlemon operates LemonX, an AI-powered WordPress growth suite. This Privacy Policy explains how we handle personal information and Google Search Console data when you use our website, applications and services.
Last updated: July 31, 2026
1. Information we collect
We may collect account and contact information, organisation and service settings, support communications, security and audit records, and technical information needed to operate, secure and improve the service.
2. Google Search Console data
When you choose to connect Google Search Console, Harlemon requests only read-only access. We receive your Google account email, Search Console properties and permission level, and, for the properties you select, Search Analytics data such as queries, pages, dates, clicks, impressions, click-through rate and position. When you request them, we may also retrieve sitemap and URL Inspection results.
We use this information only to connect your account, display and synchronise Search Console information, provide the analytics and SEO/AEO features you request, and maintain and secure the service. We do not receive permission to edit your Search Console property.
We store a refresh token in encrypted form on our servers so the connection can continue until you disconnect it or it is no longer valid. The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Sharing and sale
We do not sell Google user data or use it for advertising, retargeting, credit decisions or data-broker services. We share information only with service providers that help us operate the service under appropriate safeguards, when necessary for security or abuse prevention, to comply with law, or as part of a business transaction where legally permitted and appropriately notified.
4. Retention and your choices
We retain information for as long as needed to provide the service, maintain security and audit records, resolve disputes and meet legal obligations. You can disconnect a Google Search Console connection from the Harlemon application; we then delete the saved connection credentials and request revocation from Google. Historical data already synchronised to a project may remain until the project or account is deleted, or you ask us to delete it.
You can also revoke Harlemon access from your Google Account. For access, correction, deletion or other privacy requests, contact fav@harlemon.com.
5. Security, international transfers and changes
We use reasonable technical and organisational safeguards, including encryption for stored Search Console refresh tokens, to protect information. Information may be processed where Harlemon or its service providers operate, subject to appropriate safeguards. We may update this policy; material changes will be posted here with an updated date and, where required, we will seek consent before using Google user data in a new way.
6. Contact
Questions about this policy or our data practices can be sent to fav@harlemon.com. See also our Terms of Service.