Google API Services — Data Usage Disclosure

Overview

Sada HQ is an authorized application that uses Google OAuth 2.0. We request the minimum scope required to manage Business Profile locations and reviews on your behalf after you sign in with Google and grant consent.

OAuth scope requested

This scope allows Sada to:

• List and read Business Profile locations linked to your Google account.
• Read and reply to reviews on those locations.
• Read performance insights and update listing fields you edit in Sada (hours, description, attributes, posts, media where supported).

Google APIs used

We do not scrape Google Maps web pages. All reads and writes go through official Google APIs subject to Google quotas and policies.

• Google Business Profile Business Information API (location metadata, hours, categories).
• Google Business Profile APIs for reviews, replies, and media (v4 where available).
• Performance / insights endpoints for Maps metrics displayed in your dashboard.

What data is accessed

• Location IDs, business names, addresses, phone numbers, websites, categories, attributes, hours, photos.
• Reviews: rating, text, reviewer name, timestamps, reply status.
• Aggregated performance metrics (views, searches, actions) per location.
• OAuth tokens (access + refresh) to maintain the connection.

Why it is accessed

• Display branches and reviews in your Sada dashboard.
• Sync changes you make in Sada back to Google Business Profile.
• Generate analytics, comparisons, Keyword Pulse, and PDF reports.
• Draft AI-assisted replies that you review before publishing.
• Run scheduled review sync jobs (e.g. every 30 minutes) and manual refresh.

Where it is stored

• OAuth tokens: encrypted at rest in Sada production databases using field-level encryption.
• Synced GBP data: stored in Sada databases while your integration is active.
• Backups: encrypted backup snapshots retained for disaster recovery on a limited schedule.
• We do not store Google passwords. Authentication is handled entirely by Google OAuth.

Who can see it

• Users in your Sada workspace with permissions for branches, reviews, or dashboards.
• Sada engineering and support staff only on a need-to-know basis for troubleshooting or at your request.
• We do not publish your review or branch data to the public internet outside features you explicitly use (e.g. publishing a reply to Google).

Google API Services User Data Policy — Limited Use

Sada's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide or improve user-facing features that are prominent in Sada's interface.
• We do not transfer Google user data to third parties except service providers that process data on our behalf to provide the service, or as required by law.
• We do not use Google user data for serving advertisements.
• We do not use Google user data for creditworthiness or lending purposes.
• We do not sell Google user data to data brokers or information resellers.
• Human review of Google user data is limited to security, support, legal compliance, or with your explicit consent.

How to revoke access

After revocation, Sada deletes OAuth tokens and stops syncing new Google data. Previously synced data is deleted or anonymized per our Privacy Policy retention rules.

• Remove Sada from your Google Account: https://myaccount.google.com/permissions
• Disconnect Google in Sada: Settings → Google connection → Disconnect.
• Request workspace deletion: [email protected]

Contact

Google API data questions: [email protected] · Support: [email protected]