Privacy built around
authorized evidence.

We collect account and contact information you provide, project settings such as domains and business locations, and operational records needed to deliver SEO audits, reporting, review campaigns, and client collaboration.

When an authorized user connects Google Business Profile, we may receive Google account and location identifiers, business profile information, customer reviews, existing owner replies, OAuth access and refresh tokens, and synchronization timestamps. We do not receive or store your Google password.

Google Business Profile data is used only to let authorized users select managed locations, synchronize authentic customer reviews, prepare editable response drafts, publish a reply after explicit approval, and display source-aware review analytics inside the corresponding company workspace.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, used for advertising, or transferred for unrelated purposes.

Customer review drafts are grounded in experience details entered by the customer. Business reply drafts are grounded in the synchronized review text. Drafts are suggestions and remain editable; the system does not publish a customer review and does not publish a business reply without an authorized user action.

Relevant submitted text may be processed by an AI service solely to generate the requested draft. Users should review every draft for accuracy, tone, and suitability before using it.

Google refresh tokens are encrypted before database storage. Access to company data is restricted through authenticated, company-separated workspaces and role-aware server procedures. No method of transmission or storage can be guaranteed to be completely secure.

We retain project and integration data while it is needed to provide the service, maintain audit history, meet security obligations, or comply with law. An authorized customer may request deletion of its workspace or connected Google data by contacting us.

We share data only with infrastructure, authentication, storage, analytics, and AI-processing providers required to operate the service; with Google when an authorized user requests an API action; when required by law; or as part of a business transaction subject to appropriate safeguards.

You may request access, correction, export, or deletion of personal information, subject to applicable law. You can revoke EXPERT SEO access at any time from your Google Account permissions. Revocation prevents future Google API access but does not automatically erase historical records that must be retained for security, contractual, or legal reasons.