Privacy Policy

Last updated: 5 September 2026

Who we are

GMB Pro is operated by Apnaaapan. Contact us at gauravfeel@gmail.com about anything on this page, including a request to delete your data.

What we collect

Account data you give us:

• Your name, email address and phone number.
• A password, stored only as a hash. If you sign in with an emailed code instead, we store no password at all.
• Your billing plan and subscription status.

Business data, once you connect a Google Business Profile:

• Your business listing — name, address, phone, categories, hours, photos and other profile fields.
• Reviews left on your profile, including the reviewer name and photo that Google publishes with them.
• Posts, replies and reports generated or published through us.
• Google access tokens, encrypted at rest, used only to act on the profiles you connect.

Data your own customers give us, if you use review links:

• Private feedback they submit, and any name, email or phone they choose to include. All of those fields are optional to them.
• Which of the two options they chose on the link page. We record this after they have chosen. It never affects what they are shown.

What we do not do

We do not sell your data or your customers' data, and we do not use it to train AI models. Post and reply text is sent to Anthropic to be generated, and image prompts to OpenAI where you enable images; those providers process it to return a result for you.

We do not ask your customers for a rating before showing them the option to leave a public review, and we do not route unhappy customers away from Google. Every customer who opens one of your review links sees the same two options in the same order.

Where it is stored

On servers in Mumbai, India (AWS Lightsail, ap-south-1). Backups are taken nightly and kept for 14 days. Generated images are written to the same server and served publicly at an unguessable URL, because Google fetches them when a post is published.

How long we keep it

For as long as your account exists. When you delete your account we delete your data immediately — see below. Deleted data can still exist in a backup for up to 14 days, after which the backup itself expires.

Deleting your data

You can delete your entire account from Settings. It removes your account, your team's memberships, every connected location, and all posts, reviews, reports, citations, private feedback and generated images under them. It cannot be undone.

You can also email us and we will do it for you. Under India's Digital Personal Data Protection Act, and the GDPR if you are in the EU or UK, you may additionally ask what we hold about you, ask us to correct it, or object to how we use it.

Disconnecting a Google Business Profile revokes our access to it. It does not by itself delete the data we already synced; deleting the location or the account does.

Who else sees it

• Google, for the profiles you connect and the posts you publish.
• Anthropic, for the text we generate on your behalf.
• OpenAI, for image generation, only if you turn images on.
• Our email provider, to send sign-in codes and notifications.

Cookies

One cookie, holding your sign-in session, plus a short-lived one during the Google connection flow. No advertising or analytics cookies.