Privacy Policy

Effective date: 18 July 2026

GBP Manager (“the Service”) is operated by Zero Dimensions Private Limited (“we”, “us”). This policy explains what information we collect, how we use it, and the choices you have. It covers, in particular, data we access from Google Business Profile with your permission.

1. Who this applies to

The Service is a business tool used by agencies and businesses to manage their own or their clients’ Google Business Profiles. You must be authorized to manage any Google Business Profile you connect.

2. Information we collect

Account information you provide when you sign up: name, email address, and a hashed password.
Google account & Business Profile data, accessed only after you grant permission via Google’s secure OAuth consent screen using thebusiness.manage scope. This includes your Google Business Profile accounts and locations, business information, posts, reviews, and performance metrics.
Content you create in the Service: draft posts, draft review replies, brand-voice settings, and approvals.
Basic usage and security logs (e.g. sign-in events, audit records of approvals and publishes).

3. How we use Google user data

We use the Google data you connect solely to provide the features you ask for: showing your locations, reviews, posts and insights in the dashboard; generating draft posts and draft review replies for your approval; and publishing content only after you approve it. We do not use Google user data for advertising, and we do not sell it.

4. Limited Use disclosure

GBP Manager’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. AI processing

To draft posts and review replies, the relevant text and, where applicable, the review content you choose to act on is sent to our AI provider(s) (currently OpenAI and kie.ai) purely to generate a draft that you then review. These providers process the content only to return that draft and do not use it to train their models. Google user data is never used to train any AI model.

6. How we store and protect data

Data is stored on our own secured PostgreSQL database. Google OAuth refresh tokens are encrypted at rest (AES-256-GCM). Access is restricted, transport is encrypted (HTTPS), and every publish, approval, and edit is written to an append-only audit log.

7. Data retention

We retain your account and the content you create for as long as your account is active. Raw Google Business Profile content that we fetch (such as review text) is retained for no longer than needed to provide the feature and, for cached content, is purged within 30 days. When you disconnect a Google account or delete your account, we revoke the stored tokens and delete the associated Google data.

8. Sharing

We do not sell your data. We share it only with: (a) Google, to perform the actions you request; (b) the AI provider(s) described above, solely to generate drafts; and (c) service providers that host our infrastructure, under confidentiality obligations. We may disclose data if required by law.

9. Your choices & rights

You can disconnect any Google account at any time from within the Service, which revokes our access. You may request access to, correction of, or deletion of your data by contacting us. You can also revoke the Service’s access directly from your Google Account permissions.

10. Contact us

Zero Dimensions Private Limited — email [email protected]. For data-deletion requests, please include the email address on your account.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.