Built to earn your trust

You connect ProfileDesk to your Google Business Profile through Google’s official OAuth consent screen. You review and approve the exact access on Google’s own page, and Google issues us a scoped, revocable token.

• We never see or store your Google password.
• Sign-in and consent happen on Google, not on our site.
• We only ever hold a scoped OAuth token — not your credentials.

ProfileDesk requests only the scopes needed to manage your Business Profile — reviews, posts, business information and performance data. We ask for the minimum required for the features you actually use.

• Access is limited to what you grant on the consent screen.
• No access to unrelated Google services or personal data.
• We don’t scrape or work around the API — everything is official.

Data is transmitted over encrypted connections (TLS/HTTPS) and OAuth tokens are encrypted at rest. Access to production systems is restricted and logged, and we retain only what’s needed to run the features you use.

• OAuth tokens encrypted at rest.
• All traffic over TLS/HTTPS.
• Least-data retention — we keep only what the Service needs.

Where you enable AI features, your data is processed only to provide those features. It is never used to train generalized AI models, and brand-voice personalization is scoped to your business account alone.

• Never used to train, fine-tune or improve generalized AI/ML models.
• AI runs only to power features you turn on.
• Every automated AI action is logged and reversible.

Read the AI data policy

You stay in control of the connection at all times. Disconnect whenever you like, and request full deletion of your account and data whenever you want.

• Disconnect in-app, or from your Google Account permissions page.
• Revoking access immediately stops any further API calls.
• Request full deletion by emailing admin@profiledesk.in.