Privacy Policy

Account information

When you sign up, we collect your name, email address, and authentication identifiers provided through Google Sign-In.

Google user data

When you connect your Google Business Profile (GBP) account, we access data through Google APIs to provide the Service. See the dedicated “Google User Data” section below for the full list and our Limited Use commitments.

Billing information

If you purchase a paid plan, payment is processed by our payment processor. We do not store full card numbers on our servers; we retain only limited billing metadata (plan, status, last four digits, invoices).

Usage data

We collect log data, device and browser information, IP address, and product analytics about how you interact with the Service.

Cookies

We use cookies and similar technologies for authentication, preferences, and analytics.

Communications

Records of your support requests and correspondence with us.

What we access (only with your authorization)

• Your Google Business Profile account and location/profile details (business name, address, hours, categories, attributes, description, contact info).
• Reviews and ratings on your profiles, and the ability to post replies you create or approve.
• Posts and media you create or schedule through the Service.
• Performance and insights metrics for your profiles.
• Questions and answers on your profiles.
• Basic Google account identifiers (name, email) used for sign-in.

Limited Use commitment

GBPilot’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve user-facing features of the Service.
• We do not transfer or sell Google user data to third parties except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger/acquisition with appropriate notice.
• We do not use Google user data for advertising.
• We do not allow humans to read Google user data unless: (a) you give explicit consent for specific data; (b) it is necessary for security purposes (e.g. investigating abuse); (c) to comply with applicable law; or (d) the data is aggregated and anonymized and used for internal operations.

AI processing of Google data

To generate review replies, descriptions, and post content, relevant text (e.g. review content, business details) is sent to our AI providers solely to produce that output. We instruct our AI providers not to train models on this data. AI-generated replies are editable and are only published with your action.

Revoking access

You can disconnect GBPilot from your Google account at any time via your Google Account permissions page or by deleting your GBPilot account. On revocation we stop accessing new data and delete stored Google user data per the retention section below.