GoReviewsPro

Data Security — GoReviewsPro

Effective Date: 08-09-2026

GoReviewsPro is designed to protect Google Business Profile data, business customer feedback data and the accounts of the people who use it.

OAuth 2.0 Security

GoReviewsPro uses Google OAuth 2.0 (and Sign in with Apple on iOS) for secure authorization. Users grant permission directly through Google or Apple. GoReviewsPro never asks for or stores Google or Apple passwords.

OAuth Token Handling

Google Business Profile access and refresh tokens are held only on our servers, in a database encrypted at rest, and access is restricted to the systems that sync reviews. Tokens are never sent to the browser or the mobile app. Tokens are revoked with Google and deleted when a user disconnects a Google Business Profile, when an organization is purged, or on request.

How We Protect Data

  • TLS 1.2+ (HTTPS) for all data in transit, including between our own services
  • Encryption at rest for the database, file storage and backups
  • Data minimisation: we request only the single Google Business Profile API scope needed to manage reviews, and only basic identity scopes for sign-in
  • Role-based access inside organizations, enforced on the server
  • Restricted, logged administrative access to production systems
  • Idempotent, audited account-deletion processing

Mobile App Security

The GoReviewsPro apps keep your session in the iOS keychain or Android keystore, communicate only over HTTPS, and never store Google or Apple credentials. Crash reports are stripped of personal identifiers before they leave the device.

AI Processing

Review text may be processed by our AI providers (OpenAI, Together AI, Groq) to generate summaries, sentiment insights and reply drafts. GoReviewsPro minimises the information sent — reviewer names are never included — and does not allow Google API data to be used to train AI models.

User Control

Users can disconnect a Google Business Profile at any time from the dashboard or at myaccount.google.com/permissions. Disconnection revokes access and triggers immediate deletion of the associated Google Business Profile data from GoReviewsPro's active production systems. Users can delete their account from Settings in the app or the dashboard; see our account deletion page for exactly what is deleted. Backup copies, if any, are cleared within 30 days and cannot be recovered after backup clearance.

Compliance

GoReviewsPro is designed to comply with the Google API Services User Data Policy and Limited Use requirements, and with India's Digital Personal Data Protection Act, 2023.

Reporting a Vulnerability

If you believe you have found a security issue, email hello@restopro.tech with the subject "Security". We acknowledge reports within 72 hours.