Last updated: June 3, 2026
Privacy Policy
This Privacy Policy explains how AstraGBP collects, uses, and protects information when agencies and businesses use our Google Business Profile management tools.
Information we collect
- Account information such as name, email address, avatar, and team membership.
- Google OAuth tokens needed to access Google Business Profile APIs with your consent.
- Business profile data such as location names, categories, addresses, websites, phone numbers, posts, media, reviews, and insights.
- Usage, billing, sync-job, and operational event data needed to run and secure the service.
Google data use disclosure
We use Google Business Profile data only to provide and improve the features you request, including syncing locations, managing posts and media, replying to reviews, editing profile information, and showing analytics. We do not sell Google user data. We do not use Google data for advertising.
When you use AI features, business context or customer review text may be sent to our AI provider to generate drafts or recommendations. You choose whether to use or publish the generated content.
OAuth and token storage
Google requires OAuth consent for Business Profile API access. We store access and refresh tokens so you can run background syncs and scheduled actions after sign-in. You can revoke access from your Google account or disconnect the integration in the product.
Cookies
We use essential cookies for authentication and security. We also use local storage to remember nonessential UI preferences such as cookie notice acknowledgement.
Sharing
We share data with service providers that help operate the product, such as hosting, database, authentication, payment, email, analytics, and AI infrastructure. These providers process data for us.
Retention
We retain workspace and profile data while your account is active, and for a reasonable period after cancellation where needed for backups, security, tax, legal, and dispute purposes.
Security
We use access controls, row-level database policies, token refresh handling, operational logging, and rate limits to protect customer data.
Contact
Privacy questions or deletion requests can be sent to support@astragbp.com.