Privacy Policy

HyperLocal SEO AI, operated by Genesis Virtue ("we", "us", or "our"), helps authorized users manage the Google Business Profiles they own or are permitted to manage. This policy explains what we collect, how we use it, who else can see it, and how to have it deleted.

Information we collect

To create a workspace we collect your name, work email address, an optional business or agency name, and a hashed password. We never store your password in readable form.

When you connect Google we receive OAuth authorization tokens and, using them, the Google Business Profile account, location, review, post, media, and performance data that your Google account is permitted to access. We also record when you accepted these terms.

Google API scopes we request, and why

We request a single scope, https://www.googleapis.com/auth/business.manage. It is required because the product exists to manage listings on your behalf: reading locations and their details, reading performance and search keywords, publishing and scheduling posts, reading reviews and posting or removing replies, and updating listing fields such as phone number, website, categories, and description. We do not request any other Google scope.

How we use Google data

Google Business Profile data is used only to provide the functions you ask for in your workspace: listing the profiles you manage, showing reporting, preparing and sending updates you approve, publishing posts, managing reviews, and keeping a history of what changed. We store performance and review data in our own database so dashboards load quickly and stay inside Google's API limits.

Limited Use of Google user data

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described above.
• We do not sell Google user data, and we do not use it for advertising or for building advertising profiles.
• We do not use Google user data to train generalized artificial intelligence or machine learning models.
• We do not allow humans to read Google user data except with your explicit permission, to resolve a support issue you raise, for security purposes such as investigating abuse, or where required by law.

Automated drafting and service providers

Some features draft text for you. When you ask for a suggested post or a review reply, we send only the content needed to produce that draft — for example the review text, the star rating, the business name, and its category — to our language model provider so it can return suggested wording. Your Google credentials and OAuth tokens are never sent to these providers, and drafts are only published to Google when you or your configured automation approves them.

Besides those providers we share Google Business Profile data only with the hosting and infrastructure services needed to run the platform, where required by law, or on your explicit instruction.

Storage and security

OAuth tokens are encrypted at rest with a key held only by the environment that stored them. Each customer workspace is isolated, and every request is scoped to the workspace of the signed-in user, so one customer cannot read another's listings, reviews, or reporting. Access to production systems is limited to staff who need it.

Retention and deletion

We keep account and workspace data while your account is active. You can disconnect Google at any time from the Account page, which immediately stops further API access for that workspace and disables its listings in the product. You can also revoke our access directly in your Google Account permissions.

You can erase everything yourself. On the Account page, "Delete this workspace" sends a one-time confirmation link to your registered email address; opening that link permanently removes your account, your stored Google authorization, and every listing, post, review, reply and performance record held for your workspace. The confirmation step exists so an account cannot be destroyed by a stray click or by someone using an unattended browser. Deletion is immediate and irreversible.

If you would rather we do it, email us from your registered address using the contact below. We complete those requests within 30 days and confirm by email.

Your responsibilities

You must connect only Google accounts and Business Profiles that you own or are authorized to manage, and you confirm this when you create a workspace. Google controls profile ownership, verification, and API permissions; if Google withdraws your access to a profile, the product loses it too.

Changes to this policy

If we change how Google user data is used, we will update this page and the date above before the change takes effect.

Contact

For privacy questions or deletion requests, contact gmb@genesisvirtue.com. We are based in India and respond within five working days.