TapView AI

Google access

How TapView uses Google Business Profile data

An eligible Pro business connects Google only after an authorised owner or manager signs in and grants access. Lite does not connect to the Google Business Profile API. This page explains the exact permission, product purpose, controls, retention and deletion process for connected features.

Last updated: 22 September 2026

1. Permission requested

TapView requests one Google OAuth scope: https://www.googleapis.com/auth/business.manage

This permission is used only for the Google Business Profile selected by an eligible Pro or Ultimate user. TapView does not request access to Gmail, Google Drive, Google Calendar, contacts or unrelated Google services. Lite does not request this permission.

2. What TapView reads

  • Google Business Profile account and location identifiers needed to match the exact business saved in TapView.
  • Customer reviews, public reviewer names, ratings, comments, timestamps and existing business replies for the review inbox.
  • Google Business Profile performance data, where the business's plan includes that view.

TapView does not use Google Business Profile data for advertising, lead generation, resale or unrelated customer profiling.

3. What TapView may write

Eligible Pro users can review and approve an AI-assisted draft before publication. If an eligible owner separately enables automatic reply publishing, TapView publishes only under that prior specific and express setting; the owner can disable it at any time.

TapView checks Google again immediately before publishing and does not overwrite an existing reply. TapView does not create customer reviews or post a customer review on anyone's behalf.

Lite uses a separate manual Reply Generator. The owner copies a review from Google into TapView, reviews and edits the generated response, then copies it back to Google manually. TapView does not import or publish Google content through the API in that workflow.

4. Review integrity

  • TapView does not hide, suppress, redirect or filter access to Google based on star rating or sentiment.
  • The private-feedback and Google-review choices appear before TapView collects a rating or AI input.
  • All direct 1–5 star selections receive the same Google handoff.
  • Businesses must follow Google's review and prohibited-content policies when publishing replies.

5. Security, processing and retention

  • Google OAuth refresh tokens are encrypted with AES-256-GCM before database storage.
  • Google connection, review and reply records are server-only and unavailable directly to public browser database roles.
  • Data is transmitted over encrypted HTTPS connections.
  • Google Business Profile API content is cached only for operating the connected feature and is automatically removed no later than 30 calendar days after the source content's latest Google update or capture.
  • On Pro, review text may be sent to OpenAI only to prepare the reply draft requested by the business. TapView disables provider-side response storage for that request.
  • In the Lite Reply Generator, the pasted review is sent to OpenAI only for the requested generation, provider-side response storage is disabled, and TapView does not save the pasted review or generated reply.

TapView's handling of information received from Google APIs is intended to follow the Google API Services User Data Policy, including its Limited Use requirements, and the Google Business Profile API policies.

6. Disconnecting and deleting Google data

A business can use the Disconnect control in its TapView Google Business workspace at any time. Disconnecting requests Google-side revocation, permanently deletes TapView's encrypted credential, stops synchronization and publishing, cancels pending reply work and deletes TapView's cached Google Business Profile API content for that connection.

The business can also revoke TapView from its Google Account permissions. A verified deletion or disassociation request can be sent to admin@tapviewai.in.

7. Independent service

TapView is not affiliated with, sponsored by or endorsed by Google. Google controls Business Profile eligibility, verification, API approval and the availability of Google services.