Trust & transparency
How we access your Google account
Last updated August 6, 2026
To do the work for you, GBPmonster needs permission to look at and update parts of your Google account. We believe you should know exactly what that means before you tap “Continue with Google” — so here it is, in plain English.
We use Google's own secure sign-in
You connect through Google's official sign-in screen (“Sign in with Google”). That means you type your Google password on Google's site, never on ours. We never see or store your Google password. Google shows you the exact list of permissions and asks you to approve them — you are always in control of what you grant.
The permissions we request — and why
We ask for the smallest set of permissions that lets us do the job. Here's each one:
See and manage your Google Business Profile
This is the main one. It lets GBPmonster read your business listing and make the improvements you signed up for on your behalf: fixing your name, address, hours, and categories, publishing posts and photos, and replying to reviews.
https://www.googleapis.com/auth/business.manage
See your Search Console performance
Read-only. It lets GBPmonster see which searches already bring you visitors and clicks, so we know what to improve. We can only look, we can't change anything here.
https://www.googleapis.com/auth/webmasters.readonly
Verify that you own your website
Search Console will only show us your data once Google has confirmed you own the domain. This lets Radveo complete that one ownership check with Google directly, instead of asking you to copy a verification code out of Google's dashboard by hand. It is the verify-only version of the permission: it cannot list the other sites you own, and it cannot add or remove owners.
https://www.googleapis.com/auth/siteverification.verify_only
Know who you are (your name and email)
Standard sign-in information so we can create your account and email you your reports. This is what makes the secure 'Continue with Google' button work.
openid, email, profile
We may add or drop a permission as our features change. We'll keep this page updated, and Google will always ask you to approve anything new before it takes effect.
What we do — and don't do — with this access
- We use the access only to improve your rankings and manage the listing you hired us for — auditing your presence, fixing your listing details, posting updates, and replying to reviews.
- We do not read your Gmail, your Drive files, your contacts, or your calendar. We don't request those permissions at all.
- We do not sell your Google data or share it for advertising.
- We do not use your Google data to train AI models.
- The tokens that let us act on your behalf are stored encrypted, and our use of Google data follows Google's API Services User Data Policy, including its Limited Use requirements.
How to disconnect
You can revoke our access at any time, two ways:
- From GBPmonster: open your setup page and choose “Disconnect Google.” We revoke the access token and stop using your account right away.
- From Google directly: visit your Google account's “Third-party apps with account access” page, find GBPmonster, and click “Remove access.”
When you disconnect, we stop accessing your Google account right away. If you'd also like us to delete the data we've already stored, email support@gbpmonster.ai and we'll take care of it.
Questions?
We're happy to explain anything here. Email support@gbpmonster.ai. For more, see our Privacy Policy and Terms of Service.