Privacy Policy

1. Overview

We are “GBP Reviews Assistant” (operated by Aspereo), offering APIs that enable businesses to retrieve and reply to their Google Business Profile reviews.

2. Data We Access

As part of our service, we access review data from your Google Business Profile via the business.manage OAuth scope. This includes:

• Reviewer name (public profile)
• Review text and timestamp
• Rating and reply history

We only request access during OAuth authorization, and only with your explicit permission.

3. How We Use Your Data

• Display recent reviews for the specified locations
• Enable user-submitted replies to reviews via our API

We do not use this data for any other purpose, such as advertising, data aggregation, or third-party sharing.

4. Data Storage and Retention

• Storage: Review data is stored temporarily (≤ 30 days) to optimize performance.
• Deletion: You can request deletion of your data at any time by emailing support@aspereo.com.
• Security: Data is encrypted at rest and in transit. Access is limited to authorized personnel only.

5. Data Sharing

We do not share your Google review data with third-party services.
We may share minimal metrics (e.g. usage counts) with Stripe for billing, but only using anonymized, aggregated data—never content or user tokens.

6. User Control

• OAuth tokens: Only you, as the Google account owner, complete the OAuth flow and authorize access.
• Revocation: You can revoke access via your Google Account’s “Third-party apps” settings.
• End-of-service: If you stop using our service or revoke access, we will delete all stored data within 7 business days.

7. Children’s Data

Our service is not directed at children under 13—no data is knowingly collected from them. This Privacy Policy is COPPA compliant.

8. Policy Updates

We may update this Privacy Policy periodically. Updates will be posted with a new “Last updated” date. If changes materially affect your rights, we will notify you via email or in-app notice.

9. Contact Us