Privacy Policy

Last updated: 13 October 2026

Who we are

GMB Pro is operated by Apnaaapan. Contact us at gauravfeel@gmail.com about anything on this page, including a request to delete your data.

What we collect

Account data you give us:

• Your name, email address and phone number.
• A password, stored only as a hash. If you sign in with an emailed code instead, we store no password at all.
• If you choose to sign in with Google, we receive your Google account id, email address, name and profile picture URL, only to sign you in. We keep the Google account id (to recognise you next time) and use the name only if your profile has none; we do not store the picture URL or any Google token, and we get no other Google data through sign-in. Signing in with Google does not connect a Business Profile.
• Your billing plan and subscription status.

Business data, once you connect a Google Business Profile:

• Your business listing — name, address, phone, categories, hours, photos and other profile fields.
• Reviews left on your profile, including the reviewer name and photo that Google publishes with them.
• Posts, replies and reports generated or published through us.
• Google access tokens, encrypted at rest, used only to act on the profiles you connect.

Data your own customers give us, if you use review links:

• Private feedback they submit, and any name, email or phone they choose to include. All of those fields are optional to them.
• Which of the two options they chose on the link page. We record this after they have chosen. It never affects what they are shown.

What we do not do

We do not sell your data or your customers' data, and we do not use it to train AI models. Post and reply text is sent to Anthropic to be generated, and Anthropic processes it only to return a result for you. AI image generation is switched off today, so nothing is sent to OpenAI. If we switch it on, image prompts will go to OpenAI only for locations where you turn images on.

We do not ask your customers for a rating before showing them the option to leave a public review, and we do not route unhappy customers away from Google. Every customer who opens one of your review links sees the same two options in the same order.

Where it is stored

On servers in Mumbai, India (AWS Lightsail, ap-south-1). Backups are taken nightly and kept for 14 days. Generated images are written to the same server and served publicly at an unguessable URL, because Google fetches them when a post is published.

How long we keep it

For as long as your account exists. When you delete your account we delete your data immediately — see below. Deleted data can still exist in a backup for up to 14 days, after which the backup itself expires.

Disconnecting Google

An account Owner or Admin can disconnect a Google connection inside GMB Pro. Disconnecting revokes GMB Pro's access at Google, so we can no longer read or change the Business Profiles that connection covered.

Disconnecting does not delete anything. The locations and their history (posts, reviews and replies, reports, citations and private feedback) stay in your account, so they can be reattached if you connect Google again. To delete that data, delete your account as described below.

You can also remove our access yourself at any time from the third-party access settings of your Google Account.

Deleting your data

The account owner can delete the entire account from Settings. It removes your account, your team's memberships, every location, the stored Google tokens, and all posts, reviews, reports, citations, private feedback and generated images under them. It cannot be undone. There is no separate way to delete a single location's data today; deleting the account is how you delete it.

Deleting the account does not change anything on Google itself: your Business Profile, its reviews and anything already published there stay on Google. If you want Google to show our access as removed as well, disconnect Google first or remove our access from your Google Account.

You can also email us and we will do it for you. Under India's Digital Personal Data Protection Act, and the GDPR if you are in the EU or UK, you may additionally ask what we hold about you, ask us to correct it, or object to how we use it.

Who else sees it

• Google, for the profiles you connect and the posts you publish.
• Anthropic, for the text we generate on your behalf.
• OpenAI, for image generation, only once it is switched on and only for locations where you turn images on. It is switched off today.
• Our email provider, to send sign-in codes and notifications.

Cookies

One cookie, holding your sign-in session, plus short-lived ones during the Google connection and Google sign-in flows. No advertising or analytics cookies.