Google API Compliance

Limited Use Disclosure

FigureOut's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, FigureOut:

• Only uses Google user data to provide or improve user-facing features in the FigureOut application.
• Does not transfer data to third parties except as necessary to provide or improve user-facing features.
• Does not use or transfer data for advertising purposes.
• Does not sell data received from Google APIs.
• Does not use data for training AI/ML models without explicit user opt-in.

1. Google APIs Used

API	Purpose
Google My Business API business.manage	Read business profile information, sync customer reviews, publish Google Business Posts, and access location analytics
Google OAuth 2.0 openid, email, profile	Authenticate users securely via their Google account. Retrieve name and email to create the FigureOut account record.

2. Scope-by-Scope Data Disclosure

Scope	Data Accessed	How Used	Stored?
openid	Google user ID	Create and identify your FigureOut account	Yes — users table
email	Primary email address	Account identification, notifications	Yes — users table
profile	Display name, photo URL	Personalize dashboard	Name yes; photo at session load only
business.manage — Reviews Read	Review text, rating, date, reviewer name	Display in Reviews dashboard; trigger AI reply	Yes — reviews table
business.manage — Reviews Write	Reply text posted to a review	Post AI-generated or user-edited reply to Google	Yes — reviews table
business.manage — Posts Write	Post content, photos, call-to-action	Publish scheduled or AI-generated posts to GBP	Yes — posts table
business.manage — Location Read	Business name, address, phone, categories	Display business info, generate landing pages	Yes — locations table
business.manage — Analytics Read	Search impressions, map views, call clicks	Analytics dashboard and monthly reports	Aggregated metrics in analytics table

3. How Google API Data Is Protected

• Transit encryption: All API calls are made over HTTPS/TLS.
• Token isolation: OAuth tokens are stored per-user. No cross-user token access is possible architecturally.
• No third-party sharing: Data from Google APIs is not shared with advertising networks, analytics platforms, or data brokers.
• No AI training: Customer review text is used only to generate replies within your session. It is not used to train any AI model.
• Log hygiene: Google API responses containing user data are not written to application logs in plaintext.

4. User Controls & Revocation

Revoke Access Immediately

Request Full Data Deletion

See our Data Deletion page to have all synced data deleted from FigureOut's servers.

Disable Specific Features

Within FigureOut, you can disable auto-reply or auto-post independently without revoking Google access.

5. Contact for API Data Questions

• Email: hello@figureout.in
• Privacy Policy: figureout.in/privacy
• Security Policy: figureout.in/security

We respond to all data-related inquiries within 48 hours.