Skip to content
Legal

Privacy Policy

Last updated: 18 July 2026

Legal pages are provided in English.

Overview

This Privacy Policy explains how ProfileDesk (“we”, “us”, “our”) collects, uses, stores and protects information when you use ProfileDesk — our web portal and Android application for managing a Google Business Profile (the “Service”).

ProfileDesk is operated by TechToHighTech, an independent software studio based in India. ProfileDesk is not affiliated with, sponsored by, or endorsed by Google. We access your business information only through Google’s official Google Business Profile APIs, and only after you grant consent through Google’s OAuth screen. By using the Service, you agree to this policy.

Data we collect

We collect only what is needed to operate the Service:

Account information

  • Your Google account email address and basic profile (name and profile picture) provided during Google sign-in, used to identify your account.
  • An OAuth access token and refresh token issued by Google, used to make API calls on your behalf.

Business Profile data (via Google APIs)

  • Your business locations, names, addresses, categories, hours, attributes and descriptions.
  • Reviews and ratings on your locations, and the replies you create.
  • Google Posts you create, edit or schedule.
  • Performance and search-keyword metrics (for example profile views, calls, direction requests and the search terms customers use).

Technical data

  • Basic app and device information (such as app version and, for the Android app, a push-notification token) and minimal server logs used for security and reliability.

We do not collect your Google password, and we do not use cookies for advertising or cross-site tracking.

Google user data

The Service requests access to your Google Business Profile through Google OAuth scopes limited to managing your business information — including reviews, posts, business details and performance data. You see and approve the exact permissions on Google’s consent screen before any access is granted.

We request the minimum scopes required to provide the features you use, and we never ask for access we don’t need.

Google API Services User Data Policy — Limited Use

ProfileDesk’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained through Google APIs is used only as follows:

  • We use Google user data only to provide and improve the user-facing features of ProfileDesk that are visible in the app.
  • We do not transfer or sell Google user data to third parties for advertising, marketing, resale, or any purpose unrelated to the Service.
  • We do not use Google user data to serve advertisements.
  • We do not allow humans to read Google user data unless we have your explicit consent for a specific request (for example, to resolve a support issue you raised), it is necessary for security or to comply with the law, or the data has been aggregated and anonymised.

How we use your data

  • To authenticate you and connect to your Google Business Profile.
  • To display your reviews, posts, business info and performance data inside ProfileDesk.
  • To carry out the actions you take — such as posting a reply, publishing a post, or editing business details — back to Google through the API.
  • To send you notifications you have enabled, such as real-time review alerts on your Android device.
  • To maintain the security, reliability and support of the Service.

AI processing

ProfileDesk includes optional AI features (“ProfileDesk AI”) such as review sentiment analysis, drafted replies, keyword suggestions and post generation. Where you enable these features, the following applies:

  • Google user data — including your reviews and business profile information — is processed by AI solely to provide the user-facing features you have enabled, and only while those features are turned on.
  • We do not use, transfer, or sell Google user data to train, fine-tune, or improve generalized AI or machine-learning models.
  • AI personalization (your “brand voice”) is derived only from your own account’s content and is scoped to your individual business account. It is never blended with, or shared across, other businesses.
  • Every automated AI action is recorded in an activity log and is reversible, and you can drop to draft-only or turn AI features off at any time.

ProfileDesk’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This applies to all AI processing described above.

Sharing & disclosure

We do not sell your data. We share it only in these limited cases:

  • Google: to read and write your Business Profile data through the official APIs, at your direction.
  • Service providers: trusted infrastructure vendors (such as hosting and database providers) who process data solely to run the Service, under confidentiality obligations.
  • Legal: where required by applicable law, regulation, or valid legal process.

Storage & security

  • OAuth tokens are encrypted at rest and transmitted over encrypted connections (TLS/HTTPS).
  • Access to production systems is restricted and logged.
  • We retain only the data necessary to operate the features you use.

No method of transmission or storage is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

Revoking access

You can disconnect ProfileDesk from your Google account at any time:

  • In the app: use the Disconnect option in ProfileDesk settings to revoke our tokens immediately.
  • From Google: visit your Google Account permissions page at myaccount.google.com/permissions and remove ProfileDesk.

Revoking access immediately stops ProfileDesk from making any further calls to your Google Business Profile.

Data deletion

You can request deletion of your ProfileDesk account and all associated data at any time. When you disconnect and request deletion, we remove your stored tokens and personal data from our active systems, and from backups within a reasonable period.

To request deletion, email admin@profiledesk.in from the Google account associated with your ProfileDesk profile. We will confirm once your data has been deleted.

Retention

We keep your data only while your account is active or as needed to provide the Service. If you disconnect or request deletion, we delete your personal data and tokens as described above. We may retain minimal records where required for legal or security purposes.

Indian users

ProfileDesk, operated by TechToHighTech, is based in India, and we process personal data in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act). We process your data on the basis of the consent you give when you connect your Google Business Profile and use the Service, for the purposes described in this policy. You may withdraw consent by disconnecting and requesting deletion at any time.

If you have a grievance or a request relating to your personal data, you can reach our grievance contact at admin@profiledesk.in. We will acknowledge and address requests within a reasonable time.

Children’s privacy

ProfileDesk is a tool for businesses and is not directed to individuals under 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide notice within the Service. Continued use after changes means you accept the updated policy.

Contact

Questions about this policy or your data? Contact us at admin@profiledesk.in.

ProfileDesk · operated by TechToHighTech · India