Google Business Profile API Use Policy

Plain-English summary

Google Business Profile API Use Policy

ReplyAide uses Google Business Profile APIs only for owners, managers, or authorized representatives who manually sign in with Google and connect eligible Business Profiles. The product is a controlled review workflow, not a ratings manipulation tool or a public API proxy.

Product and business purpose

ReplyAide is a hosted workflow product for local businesses that need safer Google review monitoring, AI-assisted reply drafts, owner approval queues, and optional low-risk autopost rules. The Google Business Profile API access is requested so connected business owners or managers can manage their own review reply workflow from a clear account interface.

Who can connect a Business Profile

• A user must manually sign in with a Google account and complete OAuth consent before ReplyAide can access Google Business Profile data.
• The connected Google account must own, manage, or be otherwise authorized to operate the Business Profile locations used inside ReplyAide.
• ReplyAide does not ask users for Google passwords, one-time passcodes, shared credentials, private keys, or service-account delegation to avoid normal Google account controls.
• If Google returns no eligible Business Profile location, review sync and posting remain unavailable until the user connects an owner or manager account or fixes Business Profile access in Google.

Google OAuth scope

• ReplyAide requests the Google Business Profile OAuth scope https://www.googleapis.com/auth/business.manage.
• The scope is used to list authorized Business Profile accounts and locations, sync review data for connected locations, generate owner-controlled reply drafts, and post replies only when the connected account has permission.
• ReplyAide does not request Gmail, Google Drive, Google Calendar, Google Contacts, Google Ads, or unrelated Google account data for Google Review Autopilot.
• Users can revoke access through ReplyAide controls where available or directly from Google Account permissions at https://myaccount.google.com/permissions.

Review reply controls

• ReplyAide does not create reviews, buy reviews, remove reviews, suppress negative reviews, change ratings, or manipulate search or Maps visibility.
• AI-generated replies are drafts until the user approves them or configures a narrow paid-plan safe-autopost rule.
• Safe autopost is limited to configured low-risk positive review categories and stays off until paid plan access, Google API access, quota, location access, and safety rules are active.
• Reviews involving refund, legal, hygiene, medical, privacy, payment, profanity, threats, harassment, discrimination, unclear complaints, or policy disputes require human approval and are not auto-posted.
• The user can disable autopost, change blocked keywords, disconnect Google access, or stop using ReplyAide at any time.

No API proxy or scripted customer access

• ReplyAide does not sell raw Google Business Profile API access, API keys, developer identifiers, scripts, scraping endpoints, or backend API proxy access to customers.
• Customers use the hosted ReplyAide interface and must manually sign in with Google. They are not given programmatic access to ReplyAide's Google API project.
• ReplyAide is not designed for lead generation scraping, bulk Google Maps data extraction, hidden account changes, automatic listing edits, or customer scripts that bypass Google's normal access controls.
• The product is limited to authorized review workflow operations for connected Business Profile owners, managers, or authorized representatives.

Google Business data use and retention

• Google Business Profile data is used only to provide connected-location review workflow features, account setup status, draft generation, approval routing, safe posting controls, troubleshooting, security, and quota enforcement.
• ReplyAide stores only the limited Google Business data needed to run the active review workflow, such as account and location identifiers, business profile names, review identifiers, ratings, review text, timestamps, existing reply status, generated draft text, and posting status.
• Google review content is not sold, used for unrelated advertising, or used to train a general-purpose public AI model.
• If a user disconnects Google access or asks ReplyAide to delete Google Business data, ReplyAide removes active OAuth access and deletes connected review workflow records from active systems within 30 days where technically and legally possible.
• Billing records, security logs, dispute records, provider logs, and backups may be retained longer when needed for security, tax, payment, abuse prevention, or legal obligations.

Support and contact

Google Business Profile API access, review sync, and posting depend on Google approval, quota, account permissions, location eligibility, and Google service availability. For Google Business Profile API use questions, disconnect requests, or deletion requests, contact privacy@replyaide.com. For setup troubleshooting, contact support@replyaide.com.

Contact

Questions about this policy can be sent to privacy@replyaide.com. Do not send passwords, private keys, bank details, tax IDs, full payment card numbers, or sensitive customer lists.