Legal and data controls

Privacy Policy

Effective July 26, 2026

This policy applies to Arsnovaa Business Profile Manager at gmbexp.arsnovaa.cloud, operated by Arsnovaa Studio.

Information we access

When an authorized user connects a Google account, we receive OAuth authorization and information needed to identify the user and the Google Business Profile accounts and locations they are permitted to manage. Depending on the features used, this can include business information, categories, hours, service areas, attributes, reviews and owner replies, local posts, media metadata, and Business Profile performance data.

We do not request Gmail, Google Drive, contacts, or unrelated Google account data.

How information is used

We use Google Business Profile data to synchronize authorized locations, monitor listing completeness and changes, organize reviews, prepare and publish approved owner replies and posts, retrieve performance reporting, and maintain security and audit records. We do not sell Google user data or use it for advertising.

Sharing and transfers

Data is available only to authorized Arsnovaa Studio personnel and approved client users who need it to provide or receive the service. We do not disclose Google user data to data brokers or unrelated third parties. Infrastructure providers may process limited information only to host, secure, back up, or operate the service under appropriate confidentiality controls.

Google API policy

Arsnovaa Studio’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Security and retention

OAuth credentials are encrypted at rest. Access is role-controlled, sensitive actions require approval, and operations are audited. Connected data is retained only while needed for the authorized service or legal and security obligations. Encrypted backup copies expire through the normal retention cycle within 30 days.

Revocation and deletion

Users may revoke access through their Google Account connections. To request deletion of active credentials and associated synchronized data, email adityalavate1011@gmail.com. We verify the request before deletion; residual encrypted backups expire within 30 days.

Contact

Privacy questions and data requests: adityalavate1011@gmail.com.