How We Use Google Business Profile Data

What Google data we access

When a business owner connects their Google Business Profile to ReviewFloAI by granting our team Manager access, we are able to:

• Read reviews posted to their business profile (reviewer name, star rating, review text, review date)
• Post replies to those reviews, either approved by the owner (self-serve) or posted by our team after quality review on the owner's behalf (managed plans)

We do not access Gmail, Calendar, Drive, Contacts, or any other Google service. Manager access only allows review management. Nothing more.

What we do with that data

• Display reviews in the owner's ReviewFloAI dashboard. So they can see and respond efficiently.
• Generate AI-drafted reply suggestions. Review text is sent to our AI providers (OpenAI and Anthropic) to produce a suggested response. No personally identifying information beyond what the reviewer chose to make public is included.
• Run quality and safety checks on every draft. Every draft is checked for tone, missing apologies, banned phrases, and sensitive content (food safety, legal threats, etc.) before it is approved or posted. Drafts that fail quality checks are regenerated automatically.
• Post replies to Google. We post on the owner's behalf via Manager access. On Starter, after the owner approves each reply (posted the next business day). On Concierge, our team handles and posts replies for the owner, with lower-star (1–2★) and sensitive reviews flagged to the owner first.
• Learn the owner's voice. Edits the owner makes to drafts are used to improve future draft suggestions for that owner's account only. Voice learning data is never shared across accounts.

What we do NOT do

• We do not filter, gate, suppress, or hide reviews.
• We do not solicit reviews from the business's customers.
• We do not incentivize customers to leave reviews.
• We do not auto-post replies with no human review. On self-serve plans the owner approves each reply; on managed plans our team reviews every reply before posting, and flags lower-star and sensitive reviews to the owner first.
• We do not sell, rent, or share Google data with third parties for advertising, marketing, or any commercial purpose.
• We do not use Google data to train general-purpose AI models. Review data is used only to serve the specific business owner whose profile it came from.
• We do not access or store any Google data beyond what is required to operate the Service.

Human-in-the-loop by design

ReviewFloAI is built so that no response is ever posted to Google without human review. On self-serve plans, the business owner reviews and approves every reply before it posts. On managed plans, our team reviews every reply before posting on the owner's behalf, and lower-star (1–2★) and sensitive reviews are always flagged to the owner before anything goes live. No reply is ever generated and posted with no human in the loop.

How we handle your Google data

We access your Google Business Profile only through the Manager access you grant us, and we handle that data responsibly:

• We use your Google data only to provide the review-management features you signed up for.
• We do not transfer your Google data to third parties except as necessary to provide the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets (with notice to you).
• We do not use your Google data to serve advertisements.
• Our team accesses your review data only to operate the Service for you, with your consent, for security purposes, or to comply with applicable law.

Disconnecting and data deletion

Business owners can revoke ReviewFloAI's Manager access at any time directly from their Google Business Profile settings, and we provide simple instructions on request. You can also contact us to disconnect from our side.

When an owner disconnects or deletes their ReviewFloAI account, we delete all associated Google data within 30 days. Owners may also request immediate deletion by emailing support@reviewflo.ai.

Data security

Google data in transit is encrypted using TLS 1.2 or higher. At rest, it is stored in encrypted databases on Microsoft Azure infrastructure. Access to production data is restricted to authorized personnel for the purposes of providing support, ensuring security, or complying with law.

Questions

If you have questions about how ReviewFloAI handles Google Business Profile data, email us at support@reviewflo.ai.