How the connection works
- Merchants sign in with Google and authorize Zyloe to access Google Business Profile data.
- Zyloe identifies the Business Profile accounts and locations that the authorized Google account can access.
- Within the current implementation scope, Zyloe syncs accessible reviews and existing reply history for those accounts and locations.
- Zyloe can classify reviews and generate reply text using contracted AI service providers.
- Zyloe does not use Google APIs or Google-sourced data to create, train, facilitate, or distribute AI-generated non-consensual intimate imagery (AI NCII).
- Zyloe publishes a reply when the merchant submits it or, when the merchant enables AI auto-management, automatically replies to eligible positive reviews according to the merchant's settings.
- Merchants can disconnect Google Business Profile from Zyloe at any time.
Google Business Profile privacy disclosure
Google Business Profile Disclosure
This disclosure applies when a merchant connects a Google Business Profile account to Zyloe.
Information We Access and Collect
- Basic Google identity information made available through OAuth, including the Google account identifier, email address, display name, and profile image.
- Account and location identifiers for connected Google Business Profile listings.
- Business names, addresses, and profile information.
- Reviewer display names, ratings, review text, and review timestamps.
- Existing merchant replies associated with reviews.
- OAuth access tokens, refresh tokens, and granted scopes.
How We Use
- Authenticate the connecting merchant and associate the Google authorization with Zyloe.
- Connect Google accounts and identify merchant locations.
- Sync and display ratings and reviews inside Zyloe tools.
- Generate suggested merchant replies for review and editing.
- Publish a reply when a merchant submits it or, when the merchant enables AI auto-management, automatically publish replies to eligible positive reviews according to the merchant's settings.
- Support maintenance, troubleshooting, abuse prevention, and account security.
AI-Assisted Processing
Zyloe may send the minimum review content required to contracted AI providers solely for classification and reply generation. These providers process the data only on Zyloe's instructions to deliver the requested service. Zyloe does not sell this data or use it for advertising or profiling.
Zyloe does not use Google APIs or Google-sourced data to create, train, facilitate, or distribute AI-generated non-consensual intimate imagery (AI NCII).
Service Provider Sharing
- Zyloe shares only the minimum data required with contracted hosting, infrastructure, security, and AI service providers.
- Those providers may process Google-sourced data only on Zyloe's instructions.
- Zyloe does not permit providers to use Google-sourced data for advertising or profiling.
Limited Use Notice
Zyloe’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data Storage and Security
- OAuth tokens are encrypted at rest.
- Data is transmitted over HTTPS.
- Access is restricted to authorized personnel with a business need.
- Google-sourced data is not sold and is not used for advertising.
Disconnecting and Deletion
- Merchants can disconnect Google Business Profile from Zyloe at any time.
- On disconnect, Zyloe clears the stored OAuth tokens and stops Google API access for that connection.
- Merchants may also revoke Zyloe access from their Google account settings.
- Previously synced reviews may remain in the merchant's Zyloe account history after disconnect.
- Merchants can request deletion of Google-sourced data by contacting [email protected]. Zyloe verifies the requester's authority and completes applicable deletion or de-identification requests within 30 days.
- Zyloe deletes or de-identifies Google-sourced data when it is no longer needed to provide the service.
- Limited retention may apply when required for legal obligations, security, fraud prevention, or dispute handling.