Google API Services Disclosure

1. What Google Data We Access

Sections 1 to 5 describe the data from your business listing on Google; sections 6 to 8 describe the separate features for blogs, YouTube and file imports. When you connect your business listing on Google to StarPresence, we request access to the following data through Google's business listing service:

• Reviews: Review text, reviewer display name, star rating, and timestamp
• Location information: Business name, address, and location identifiers
• Posts and performance: The posts on your listing and its daily performance figures (such as how often it was seen)
• Reply publishing: The ability to post replies to reviews on your behalf
• Post publishing: The ability to publish, edit and delete posts on your listing on your behalf

2. How We Use This Data

StarPresence uses the data from your business listing on Google exclusively for the following purposes:

• Reading new reviews to generate reply suggestions
• Publishing replies to reviews after you have granted permission during onboarding
• Displaying your business locations within the StarPresence dashboard
• Publishing, editing and deleting posts on your listing after your approval or that of an AI agent you have authorised to publish, and publishing posts automatically from a source you have set to publish without separate approval
• Showing the posts on your listing and their history
• Showing your listing's performance figures
• Sending you weekly email summaries of new reviews

We do not use this business-listing data for advertising, selling to third parties, or any purpose unrelated to the business-listing features described in sections 1 to 5.

3. Data Storage & Retention

• Review data is stored in data centers in Ireland
• Review texts sent to our AI provider for reply generation are kept by it only for a limited time, as a rule for up to 30 days (see our Privacy Policy, section 6), and are not used to train its models
• OAuth tokens for your business listing are stored in our database, which encrypts all stored data at rest, and used solely to maintain that connection
• Once the deletion of your account has started, it can be restored for 30 days; then your user data is erased, except the invoice, payment and acceptance records described in section 4 of our Privacy Policy; the backups and the limited-time copies of our providers described in its sections 4 and 6 are deleted within the periods stated there

4. User Consent & Control

• You explicitly authorise Google API access through the standard Google OAuth consent flow
• During onboarding, you confirm via a consent checkbox that you authorise StarPresence to publish AI-generated replies to your reviews. The date and time of your consent is recorded.
• By default, every reply requires your manual approval, regardless of star rating. You explicitly enable automatic publishing per star rating in Settings (e.g. only for 5-star reviews). Negative reviews (1-2 stars) almost always remain in manual-approval mode in practice, since tone matters most there.
• Scheduled replies are published with a delay, spread out like natural human responses, a limited number per business per day, within the business's daytime hours; a reply you send with “Post now” is published at once.
• You can withdraw your consent, pause, or change automation settings at any time in your account settings
• You can revoke StarPresence's access to your business listing on Google at any time through your Google account permissions

5. Limited Use Compliance

StarPresence complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use this business-listing data to provide and improve the business-listing features described in sections 1 to 5
• We do not transfer this business-listing data to third parties, except as necessary to provide the service (e.g., review text and photos sent to our AI provider for reply generation, which keeps them only within the periods in our Privacy Policy, section 6)
• We do not use Google API data for serving advertisements
• People at StarPresence read Google API data only with your agreement to view the specific data (for example, when you switch on Admin access for a support request), where it is necessary for security purposes such as investigating a bug or abuse, or to comply with applicable law; for internal operations, only once the data has been aggregated and anonymised

6. Blogs on Google

When you connect a blog hosted on Google to StarPresence, we ask Google for one permission. It is the only permission we ask for the blog:

Reading the blog and its comments, and publishing, editing and deleting the posts you approve.

What we access

• Your blog: its name and address, and the list of blogs of the Google account you sign in with, so that you can choose which ones to connect
• Posts: the posts you create with StarPresence, so that we can publish, edit and delete them after your approval and confirm the result
• Comments: the comments on your blog, including those awaiting your moderation: the text, the display name of the commenter, the identifier and time of the comment, and the post it belongs to

How we use it

• Showing you the comments on your blog in StarPresence so that you can answer them. Google offers no way for us to write a reply there, so you copy your reply and paste it on your blog yourself; StarPresence does not post replies to the blog
• Publishing a comment that is awaiting your moderation, when you click Publish
• Publishing, editing and deleting posts you composed in StarPresence, after your approval
• Suggesting a reply to a comment, only when you ask for one

We do not use this blog data for advertising, for selling to third parties, or for any purpose unrelated to these features.

Storage, retention and deletion

• The text of a comment is stored in data centers in Ireland and deleted by a daily cleanup once it has been stored for 30 days; afterwards only technical identifiers and times, the title and address of the post, and the first word of the commenter's display name, unless the cleanup removes the name, remain
• The text of a comment sent to our AI providers for a suggested reply is kept by them only for a limited time, as a rule for up to 30 days, and is not used to train AI models
• OAuth tokens are stored encrypted and used solely to maintain your blog connection.
• When you disconnect a blog, StarPresence deletes the stored token and asks Google to revoke the permission, unless another blog connected to StarPresence, in your organisation or another one, uses the same Google sign-in. If Google refuses or cannot be reached, the permission can remain; you can remove it in your Google account settings. After you delete your account, it can be restored for 30 days; then your user data is erased, except the invoice, payment and acceptance records described in section 4 of our Privacy Policy; the backups and the limited-time copies of our providers described in its sections 4 and 6 are deleted within the periods stated there

Your consent and control

• You authorise access through the standard Google OAuth consent flow, and only for a blog you administer
• Every post is published only after your approval, unless you have switched on automatic publishing in your settings
• You can revoke access at any time through your Google account permissions, or by disconnecting the blog in StarPresence

Limited Use

StarPresence's use and transfer of information received from Google about your blog adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to provide the features described above, do not transfer it to third parties except as necessary to provide them, do not use it for serving advertisements, and let people read it only in the cases that policy allows: with your agreement, for security purposes such as investigating a bug or abuse, to comply with the law, or aggregated and anonymised for internal operations.

7. YouTube

When you connect a YouTube channel to StarPresence, we request the OAuth scopes below through YouTube API Services. StarPresence's use of YouTube API Services is also subject to the YouTube Terms of Service and the YouTube API Services Terms of Service. The Google Privacy Policy applies to data that Google handles.

The permissions:

• Managing your channel (required): https://www.googleapis.com/auth/youtube.force-ssl
• Your channel's figures (optional): https://www.googleapis.com/auth/yt-analytics.readonly
• Viewing your channel (optional): https://www.googleapis.com/auth/youtube.readonly

What we access

• Your channel: its identifier, name and handle
• Videos: the identifiers and titles of your newest videos, and a video you upload through StarPresence, read back to confirm that YouTube has processed it
• Comments: the comments on your newest videos, including those YouTube holds for your review: the text, the display name and channel identifier of the commenter, the identifier and time of the comment, and the video it belongs to
• Channel figures: the daily totals of views, engaged views, minutes watched, likes, comments, shares, and subscribers gained and lost, for the last 90 days

How we use it

• Showing you the comments on your videos in StarPresence so that you can answer them
• Publishing a reply you wrote, after your approval
• Deleting a comment on your videos when you click Delete and confirm (YouTube removes the comment for everyone and this cannot be undone)
• Uploading a video you chose, with the title, description and settings you chose (who can watch it, whether it is made for kids, whether it contains altered or synthetic content), after your approval
• Showing you your channel's daily figures

We do not use YouTube API data for advertising, for selling to third parties, or for any purpose unrelated to these features. StarPresence uses no artificial intelligence on comments, commenters' names or your channel's figures. If you ask for thumbnail suggestions for a video, its title and description, and its captions if you choose, go to our AI provider to propose short texts for the thumbnail. If you authorise your own AI agent to use StarPresence for you, that agent can read your channel's videos and figures and its list of comments, but not the comments' text or the commenters' names and identifiers.

Storage, retention and deletion

• YouTube data is stored in data centers in Ireland
• Once a comment by someone else has been stored for 29 days, a daily job removes its text, the commenter's name and the commenter's channel identifier; technical identifiers, the time of the comment and the title and web address of the video remain
• Daily figures are refreshed every day and each stored day is deleted 25 days after it was last refreshed
• OAuth tokens are stored encrypted and used solely to maintain your YouTube connection
• When you disconnect a channel, StarPresence deletes the stored comment texts, names and channel identifiers, the video titles stored with comments, the stored daily figures and the stored tokens at once; it keeps the channel's identifiers and your posting history until your account is deleted. Deleting this data does not affect data stored by YouTube; to delete data on YouTube, use YouTube Studio or another YouTube application

Your consent and control

• You authorise access through the standard Google OAuth consent flow, and only for a channel you manage
• Every reply, deletion and upload happens only after your approval
• You can disconnect the channel in StarPresence at any time. StarPresence then asks Google to end the permission, unless another YouTube channel is still connected to StarPresence; in that case, or when Google cannot be reached, Google keeps listing the permission until you remove it on the Google security settings page, where you can also revoke access at any time

Limited Use

StarPresence's use and transfer of information received from YouTube API Services adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to provide the features described above, do not transfer it to third parties except as necessary to provide them, do not use it for serving advertisements, and let people read it only in the cases that policy allows: with your agreement, for security purposes such as investigating a bug or abuse, to comply with the law, or aggregated and anonymised for internal operations.

8. Files from your Google cloud storage

When you choose to import from Google in StarPresence, Google's file picker opens, you sign in to Google, and you pick the files to bring in. We ask Google for one permission, the narrowest it offers for this; it reaches only the files you pick, now or in an earlier import:

Access to the files you pick, and to no others.

What we access

• The files you pick: a photo or a video, or a document (a Google document, a PDF or a text file), that you select in Google's picker, with its type and size and, for a document, its name. We cannot browse, list or search the rest of your Google cloud storage, and we cannot see a file you did not pick.

How we use it

• Copying a photo or a video you picked into your StarPresence media library, as if you had uploaded it from your device, so that you can use it in your posts
• Reading a document you picked so that StarPresence can propose facts for your business, for you to review and then save or discard, as described in our Privacy Policy
• Each import happens once, when you start it. StarPresence does not synchronise with your Google cloud storage or read it in the background, and a later change to the file there does not update the media you imported or the facts you saved

We do not use data from your Google cloud storage for advertising, for selling to third parties, or for any purpose unrelated to these features.

Storage, retention and deletion

• We use Google's short-lived permission only for the import you start, to read the file you picked. We do not store it, we do not write it to logs, and we receive no lasting access
• A photo or video you import is stored in your media library like any file you upload yourself, until you delete it or close your account; after you delete your account, it can be restored for 30 days, then your user data is erased, except the invoice, payment and acceptance records described in section 4 of our Privacy Policy; the backups and the limited-time copies of our providers described in its sections 4 and 6 are deleted within the periods stated there
• A document you pick for a fact import is sent to our AI provider so that it can read it and propose facts; StarPresence does not keep the document or the text inside it (the Privacy Policy lists what is kept)
• When you open the screen that offers the import from Google, your browser contacts Google, and again when you open Google's picker; Google receives your IP address and browser details when that happens, under Google's own privacy policy

Your consent and control

• You authorise access through Google's standard OAuth consent flow, and StarPresence can read only the files you pick in Google's picker
• Nothing is imported unless you start it and pick a file
• You can revoke access at any time through your Google account permissions

Limited Use

StarPresence's use and transfer of information received from your Google cloud storage adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to provide the features described above, do not transfer it to third parties except as necessary to provide them, do not use it for serving advertisements, and let people read it only in the cases that policy allows: with your agreement, for security purposes such as investigating a bug or abuse, to comply with the law, or aggregated and anonymised for internal operations.

9. Data Protection

StarPresence processes data in compliance with the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR). For full details, see our Privacy Policy and Terms of Service.

10. Contact

For questions about how StarPresence uses Google API data, please contact us at:

[email protected]