CSignal Attract Privacy & Data Policy
Applies to: the Attract capabilities of CSignal (Organic Search and AI Search) Data controller / processor: Charle London Limited, see the Platform Policy Version: 1.0 Last updated: 1 July 2026
1. About this policy
This policy explains how CSignal Attract handles data. Attract is the part of CSignal that helps you understand and improve how your store is found in organic search and in AI search (AI assistants and answer engines).
It should be read together with the CSignal Platform Privacy & Data Policy, which is the umbrella policy for the whole product. Where this policy refers to who we are, how we secure data, international transfers, your rights, or how to contact us, it means the corresponding sections of the Platform Policy, the same standards apply here.
The methods and models CSignal uses to analyse this data and produce recommendations are proprietary to Charle. This policy describes what data Attract uses and why: not how the analysis works.
2. The short version
Attract works almost entirely with data about your website and the public search landscape: not with personal data about your individual shoppers. In plain terms:
- We read your own search and analytics data, which you connect to CSignal.
- We collect publicly available search results and AI-assistant answers.
- We keep a history of changes so we can show what moved and when.
None of this involves us tracking or identifying individual people. (The separate CSignal Convert capability is the part that involves on-site visitor behaviour; it has its own policy.)
3. The data Attract uses
a. Google Analytics 4 (connected by you) When you connect your Google Analytics account, CSignal reads aggregated performance data, such as sessions, channels, top pages and conversions, using read-only access. We use this to show how organic and AI-driven traffic performs. We do not use it to identify individual visitors, and we request only read-only access, which you can revoke at any time.
b. Google Search Console (connected by you) When you connect Google Search Console, CSignal reads your search performance data, the queries, impressions, clicks and positions Google reports for your site. This data is already aggregated and anonymised by Google (for example, Google withholds rare queries to protect user privacy). We use read-only access, which you can revoke at any time.
c. Public search and AI-assistant data (collected for you) To show where you rank and how you appear in AI answers, CSignal collects publicly available information, search engine results and the answers given by AI assistants for relevant queries. This is public information about web pages and brands; it does not contain personal data about your shoppers or ours.
d. Change history CSignal keeps a record of relevant changes over time, for example changes in your rankings, visibility and content, so it can show you what changed and correlate it with performance. This is information about your website and its performance, not about individuals.
e. Additional tools connected for your account For some stores we connect further analytics or marketing data sources to enrich your Attract insights. These are set up specifically for your account, accessed on a read-only basis, and used only to provide the service to you. The specific tools connected for you are recorded against your account and available on request, and any personal data they contain is handled as described in the Platform Policy. You can ask us to disconnect any of them at any time.
4. Is any of this personal data?
For the most part, no. Attract deals with your site's aggregated analytics and with public search data, neither of which identifies an individual person.
Where a limited amount of personal data is involved, for example the authorisation tokens that let CSignal read the accounts you connect, it is handled as described in the Platform Policy (sections on the information we hold, security, and your rights). We do not attempt to re-identify individuals from aggregated analytics, and you should not enter personal data into free-text fields in Attract.
5. Network insights
To improve CSignal for everyone, we analyse trends across our network of stores, for example, how search and AI visibility typically behave, or which changes tend to move performance. This analysis uses anonymised and aggregated data only. Network insights describe patterns; they never identify an individual person, and they never expose one store's data to another. Because Attract data is largely non-personal to begin with, this pooling carries very low privacy risk.
6. Why we are allowed to process this data
We rely on the same lawful bases set out in the Platform Policy, principally performance of our contract with you (to provide the Attract service) and our legitimate interests in maintaining, securing and improving the service. You connect your Google accounts voluntarily and can disconnect them at any time.
7. Security
Attract data is protected using the measures described in the Security section of the Platform Policy, encryption in transit and at rest, least-privilege access controls, per-customer isolation, and reputable infrastructure.
8. Third parties that help provide Attract
In addition to the platform-wide sub-processors listed in the Platform Policy, Attract relies on:
| Category | Purpose | Handles your personal data? |
|---|---|---|
| OAuth-connected analytics access | The accounts you connect, read via read-only OAuth | Minimal, authorisation tokens only |
| Specialist search-data providers | Collecting publicly available search and AI-assistant results on our behalf | No, public data only |
Where any of these operate outside the UK/EU, the international-transfer safeguards described in the Platform Policy apply. The search-data providers collect public information and do not process personal data about your shoppers.
Where additional tools are connected specifically for your account (for example Triple Whale), they are recorded against your account and, where they process any personal data, are covered by the same contractual and transfer safeguards.
9. How long we keep it
We retain Attract data for as long as needed to provide the service and to show meaningful trends over time, after which it is deleted or anonymised. Anonymised, aggregated network insights are not personal data and may be kept indefinitely.
10. Your rights and contact
Your rights, and how to exercise them, are set out in the Platform Policy. For any question about how Attract handles data, contact us at hello@charle.co.uk.