API Integration Disclosure
Last updated: 2026-09-04
wamert integrates with several third-party APIs to provide SEO, ads, and analytics services. This page discloses exactly which APIs we use, what data flows in/out, and how we protect it.
01
Google APIs
2026-09-04 更新：Google Search Console 数据源已撤销。在 wamert 真实租户规模化之前，不再向租户开放 GSC OAuth 授权。 下方 GSC 段为历史能力备份，保留以说明曾经的数据边界。 详见
docs/2026-09-04-GSC-撤销决议.md。Google Search Console API（已撤销）
- OAuth scope:
https://www.googleapis.com/auth/webmasters.readonly(read-only) - Data accessed: site list, search analytics (impressions, clicks, CTR, position), per-query and per-page breakdowns, countries/devices filters.
- Use case: display search performance inside wamert dashboard; SEO recommendations based on real search data; identify keywords/landing pages that need optimization.
- Limited Use: we do not transfer GSC data to third parties, do not use it for ads retargeting, do not use it to train AI/ML models. Stored encrypted at rest. User can revoke at any time.
Google Ads API
- Auth: OAuth 2.0 + developer token (manager account).
- Data accessed: campaign performance, keyword metrics, ad groups, conversion data (when user enables it).
- Use case: SEM engine: bid optimization, keyword expansion, cross-platform ad reporting.
02
Infrastructure
- Alibaba Cloud ECS (Singapore): compute + PostgreSQL primary database
- Redis: session and cache layer
- MinIO: object storage for user-uploaded assets
- Cloudflare: CDN, anti-DDoS, DNS
03
Data security
- All transport forced TLS 1.2+ (HSTS enabled)
- Sensitive fields encrypted at rest: AES-256-GCM (passwords, OAuth tokens)
- RBAC: tenant isolation, per-role row-level access control
- Audit log: every admin action logged with actor + IP + timestamp (90-day retention)
- Pen test: annual 3rd-party penetration test, latest report available on request
04
OAuth application
- App name: wamert SEO
- App type: Web Application
- Scopes:
webmasters.readonly,adwords - Authorized domains: wamert.com, www.wamert.com
- Privacy policy URL: https://wamert.com/privacy
- Home page URL: https://wamert.com