Privacy policy

Last updated: June 24, 2026

Data we process

We process your Google account identity, connected Business Profile identifiers, content you schedule, review content, consent records and official performance metrics needed to provide the service.

Google user data

Access is obtained through OAuth, limited to requested scopes and revocable. Refresh tokens are encrypted at rest. Cached Google Business Profile content is deleted within 30 days unless a shorter retention period applies.

Service providers

Cloudflare hosts the application and D1 database. Resend sends transactional emails. Google provides identity and Business Profile APIs. Each provider is used only where necessary to deliver the service.

Your controls

You can disable each automation, revoke Google access, export relevant data or request account deletion from workspace settings.

Contact

Privacy requests can be sent to [email protected].