This document describes what Google data RecensioAI has access to and how we use that data, in compliance with the Google API Services User Data Policy.

1. What Google data do we access?

RecensioAI requests access to your Google Business Profile through the following OAuth scope:

https://www.googleapis.com/auth/business.manage

With this scope we can read and manage the following data on your behalf:

Business profile information (name, address, phone, hours, description)
Reviews and ratings (text, stars, author, date, replies)
Google Posts (messages, images, publish dates)
Photos and media on your profile
Q&A (questions and answers)
Performance insights (searches, views, interactions)

2. How do we use this data?

We use this data solely to provide the services you have requested. Concrete examples:

Sync reviews to your RecensioAI dashboard so you can manage and reply to them.
Generate AI-assisted replies based on review text, which you can then edit and publish.
Publish Google Posts from the RecensioAI dashboard.
Display performance insights so you can monitor your visibility on Google Maps.
Update your profile information from the dashboard.

3. Limited Use Statement

RecensioAI's use of information received from Google APIs, including information from the Google Business Profile API, adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, this means we will NOT use your Google data:

sell, share, or transfer to third parties for advertising or AI training purposes;
use for building user profiles for advertising purposes;
use for purposes not directly related to providing our services.

4. Data Retention and Deletion

Your Google data is only retained while you have an active connection. You can at any time:

Disconnect your Google Business Profile connection via your RecensioAI dashboard (Settings → Google Profile → Disconnect).
Delete your account, after which all linked Google data will be deleted within 30 days.
Submit a request via [email protected] to have specific data deleted.

5. Security

All communication with Google APIs occurs via encrypted HTTPS connections. OAuth tokens are encrypted in our database and are not accessible to unauthorized parties. We implement Row Level Security (RLS) and strict access controls.

6. Contact

Questions about this Google Data Use policy? Contact us at [email protected] or view our Privacy Policy and Terms & Conditions.

Google Data Use