Privacy Policy
Effective October 23, 2026. How GBPNinja collects, uses and protects your information on this website, in the GBPNinja app and when we provide our services.
- The short version
- 1. Who we are and what this covers
- 2. Information we collect
- 3. How we use information
- 4. Google user data and Limited Use
- 5. When we share information
- 6. Storage and security
- 7. Keeping and deleting your data
- 8. Your choices and rights
- 9. Children
- 10. Changes to this policy
- 11. Contact us
The short version
- We use your information only to run the website, the GBPNinja app and the services you ask for.
- We never sell your data, and we never use Google user data for advertising.
- We don’t read your Gmail inbox. With Gmail connected we can only send the emails you ask us to send.
- You can disconnect Google at any time, and ask us to delete your account and data.
1. Who we are and what this covers
GBPNinja provides a Google Business Profile management app at app.gbpninja.com, this website at gbpninja.com, and done-for-you Local SEO services. This policy covers all three. Questions? Email support@gbpninja.com.
2. Information we collect
Booking and contact forms on this website. When you book a consultation we collect what you enter: your name, email, phone number, business name, website, the service you’re interested in, your preferred date and time, your time zone, any guests’ email addresses and your message. We email it to our team and keep a copy in our website’s database so we can schedule and follow up on your call.
App account information. When you sign up or sign in to the app (with Google, or with an email and password through Google Firebase Authentication), we receive your name, email address and profile photo. We never see your Google password.
Google Business Profile data (only if you connect it, with the business.manage permission): the business accounts and locations you choose, and for those locations their profile details, reviews and replies, posts and performance insights such as views, calls and direction requests.
Gmail (only if you connect it, with the gmail.send permission): the address of the connected account. It lets GBPNinja send email from your account; it does not let us read, search or delete your email.
Google Search Console data (only if you connect it, read-only): search queries, clicks, impressions and positions for the website properties you choose.
Facebook, Instagram and LinkedIn (only if you connect them): the Pages and accounts you choose, so you can publish and delete posts from the app.
Information you enter in the app, such as templates, review requests, tasks, notes, draft posts and competitors you add.
Services clients. If you hire us for Local SEO, you may give us manager access to your Business Profile, website or listings. We use that access only to deliver the work you hired us for.
Technical information. A sign-in cookie in the app, and basic server logs (IP address, browser type, time of request) for security and troubleshooting. We don’t use advertising or cross-site tracking cookies.
3. How we use information
- To schedule and hold the consultations you book, and to reply to your messages.
- To provide the app’s features you turn on, and the services you hire us for.
- To keep the website and app secure and working.
- To tell you about important changes to the app or this policy.
4. Google user data and Limited Use
We access Google user data only to provide the features you turn on: showing your profiles’ performance, reviews and posts; posting replies and updates you write or approve; publishing posts you schedule; running the profile audit; sending emails you create from your own Gmail address; and showing your Search Console rankings.
Limited Use. GBPNinja’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing features described above.
- We do not transfer Google user data to others, except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you.
- We do not use or transfer Google user data for advertising, including retargeting or personalized ads.
- We do not sell Google user data, and we do not use it to build user profiles or for credit or lending decisions.
- No person at GBPNinja reads Google user data unless you ask us to (for example for support), it is needed for security, it is required by law, or it has been aggregated and anonymized.
- We do not use Google user data to develop, improve or train generalized artificial intelligence or machine-learning models.
5. When we share information
We don’t sell personal information. We share it only:
- With service providers that run the website, app and email for us under confidentiality obligations, such as our hosting provider, Google Cloud and Firebase.
- With your team: people you invite to your app workspace see the profiles and data you give them access to. Guests you add to a booking receive the meeting invite.
- For legal reasons: when required by law, or to protect the rights, safety and security of our users and GBPNinja.
6. Storage and security
- Data is sent over encrypted connections (HTTPS).
- Google access tokens are encrypted at rest (AES-256) and used only by our servers; they are never sent to your browser.
- Access to personal data is limited to staff who need it to provide the service.
No system is perfectly secure. If a breach affects your data, we will notify you as required by law.
7. Keeping and deleting your data
- Booking requests are kept while we schedule and follow up on your consultation, and for as long as you’re a client. Ask us any time and we’ll delete them.
- Disconnect Google any time in the app’s Settings. We revoke our access and delete the stored tokens immediately. You can also remove access at myaccount.google.com/permissions.
- Google data cached for the app’s features is deleted within 30 days after you disconnect or delete your account.
- Delete your account by emailing us from the account’s address. We delete your account and workspace data within 30 days, except what we must keep by law.
8. Your choices and rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict some processing. To make a request, email support@gbpninja.com. We will not discriminate against you for using these rights.
9. Children
GBPNinja is a business tool and is not meant for anyone under 16. We don’t knowingly collect information from children.
10. Changes to this policy
If we change this policy, we will update the date at the top of this page. For significant changes, especially to how we use Google user data, we will tell you in the app or by email before they take effect.
11. Contact us
GBPNinja
Email: support@gbpninja.com
Website: gbpninja.com · App: app.gbpninja.com