What we take from GoogleLast changed 7 October 2026
Google user data
Google requires a service that uses Google sign-in or Google's APIs to state exactly what it takes, what it does with it, how long it is kept and who it is shared with. The short version is in the privacy policy. This is the long one.
DraftThis text has not been reviewed by a lawyer.
We wrote it ourselves, as plainly as we could, and it describes how Plauso works today. But no lawyer has read it, and we are not going to pretend otherwise. If you see something that does not match how the service actually works, we want to know: write to support@plauso.app.
Where Google is involved
Plauso uses Google in three ways that give us data from Google. The sign-in, where you can choose to continue with your Google account instead of waiting for a code by email. The place search, where you find your own business profile and the competitors you want to compare with. And the connection to your Business Profile, which you choose to make yourself in your account. Without that connection we do not read or write in your business profile. More on that below.
None of them reads your Gmail, your calendar, your Drive or your contacts. We never ask for access to them, so we cannot receive them even by accident.
Two things look like Google use but are not. Ratings and the map ranking are fetched by DataForSEO from Google's public search results. That is no data about you or your Google account. And if you connect a published Google sheet, we read it as an ordinary web address, with no sign-in at Google and no permission at all.
What the sign-in asks for
When you choose Google you are sent to Google's own sign-in, and we ask for two permissions: openid and email. Nothing else. The first is what makes it a sign-in at all, the second is what tells us which address you are signing in with.
Google's own screen describes it as Plauso wanting to see your primary email address and associate you with your personal info at Google. That is the whole permission, and it is as small as a sign-in can be.
For the sign-in we do not ask for the right to reach anything at Google once you have left. There is no standing permission sitting between your sign-ins. The connection to your Business Profile is something else, and it is set out further down.
| Item | What it is | What we do with it | Stored by us? |
|---|---|---|---|
| Your email address at Google. | Looks up whether that address already has a Plauso account. If it has none, it becomes the account's address when you create one. | Yes, as the account's email address and nowhere else. | |
| email_verified | Google's word that the address has been proven. | If Google does not say it is proven, the sign-in stops. An unproven address proves nothing. | No. |
| sub | Google's own stable identifier for the account. | Holds the sign-in together for the minutes it takes to confirm which address you want to use. | No. It sits in a cookie for at most 15 minutes and is never written to our storage. |
| Everything else | Name, profile picture, contacts, Gmail, Calendar, Drive. | The sign-in does not ask for it. It asks for openid and email, nothing more. | No, we never have it. |
What we do with the address
The address is the account key in Plauso. If it already has an account you sign in to it; if it has none you create one. That is the whole use.
We require Google to say the address has been proven. If Google does not, the sign-in stops. Google also issues tokens for accounts where the address was never proven, and since the address is our account key, an unproven one could open somebody else's account.
If the same address owns several Plauso accounts we do not choose for you. Then the route goes through a code by email, where you see the accounts and point out the right one.
Limited use
Google's User Data Policy sets four requirements on what an app may do with data from Google. We follow them, and here is what they mean here:
- The data is used only for features you see and use yourself: the sign-in to sign you in, and a connected Business Profile for the reviews and replies, the profile check, posts, numbers and the booking button in your account. What we fetch from the Business Profile is stored encrypted for at most 30 days, and if you disconnect the profile it is deleted at once.
- We do not pass it on, with one exception you agree to when you connect the profile: the reviews go to Anthropic, which writes the reply suggestions. Nothing goes to ad networks, data brokers or analytics suppliers, and nothing is sold. Your email address leaves us only when we email you at it.
- No human sits and reads it. Your address appears in your own account, and reviews and other data from the profile are seen only by you and the people you invited. We look only if you explicitly ask us to in a specific case, if it is needed for security, such as investigating a fault or abuse, or if the law requires it. Never as a list someone browses.
- We do not sell it, and do not use it for advertising, retargeting or credit scoring. No AI model is trained on data from Google, neither by us nor by Anthropic, whose terms for business customers do not allow what we send to be used for training.
Text suggestions and AI
If you want help writing the description for your Google profile, the material goes to a language model. What is sent is only what you typed into the form yourself: the business name, what you do, the town, the services, and what you want a post to be about. The same goes for the draft of your website and the check of whether AI search mentions your business: only what you entered yourself.
The reply assistant works the same way. A review you paste in to get reply suggestions goes to the language model together with the tone you chose, who is replying, what you wrote about the business under AI replies and the signature you want to end with. We store neither that review nor the suggestions; the only thing counted is how many suggestions you have had this month.
Without a connection, nothing we fetched from Google goes to the language model. If you connected your Business Profile, the Google review's text, rating and the reviewer's display name are sent to draft reply suggestions: when you ask for them, by themselves for every new review from Start, and for auto-replies if you switched them on. Never an email address from your customer list. And nothing is published until you or someone in your team has approved it, except the auto-replies you switched on yourself.
The place search
The search text you type goes to Google Places, and the hits are shown to you. Of everything Google answers with, we store a single field: place_id. The name and address in the list are shown and thrown away: Google's terms exempt only place_id from the ban on storing.
While the list of hits is showing, Google Maps is written under it, as Google's terms require, and when you use the search the Google Maps End User Additional Terms of Service and the Google Privacy Policy apply as well. The same search is used when you choose competitors to compare with, and there too, only place_id is stored.
The rating and the number of reviews are not fetched from Google Places. They come through DataForSEO. A fetched rating sits in a cache for at most 12 hours and is never shown once older, and we build no history from them. The morning backup can pick up a rating that sat in the cache at that moment, and it goes when the backup is pruned. If a fetch does not go through we show nothing at all rather than an old number.
The link to the review box is built from place_id on click. Storing it would be against the terms, and it would also be foolish: a stored link would be dead the day Google changes it, and the sign stays on the wall for years.
Google Business Profile
Without a connection, Plauso does not read or write in your business profile at Google. You then write the profile's text yourself there, with our suggestions to lean on if you like, and you paste in replies to reviews yourself.
If you connect it in your account, under Google profile, we ask Google for the business.manage permission. It gives both read and write access, and Google's Business Profile APIs offer none narrower. Only the account owner can connect, choose the location, switch on auto-replies, change the profile and set the booking button. Replies and posts can also be published by the people you invited.
We write only what you or someone in your team approved with a press, plus auto-replies you switched on separately. Name, address and main category you always change yourself at Google. Google's own changes and suggestions we show you to accept or reject, and we never revert them by ourselves. You get word of our changes within 48 hours, separate from Google's own emails.
What we fetch from the profile is stored encrypted for at most 30 days and never in the backups, and we build no history of ratings or numbers. The numbers from Google we show on their own, apart from other platforms and from our own figures, and we never compare them with other customers'.
Business Profile is free from Google. What you pay Plauso for is our service, not the profile. What you can expect from whoever helps you with the profile is described by Google in its notice on working with a third party: support.google.com/business/answer/7163406. The profile stays yours, and Plauso never becomes its owner or manager.
Taking the access back
If you connected your Business Profile, you can disconnect it whenever you like under Google profile in your account. We then revoke the access at Google and delete what we stored from the profile at once, and the same happens when the account is deleted. If we added a booking button or a website link to the profile, we ask first whether to remove it or change it.
If the same Google account is connected to another Plauso account, we do not revoke at Google when you disconnect here, because the other account would then lose its connection. We only remove the key and the data in this account.
You can also remove Plauso's access from inside your Google account, at myaccount.google.com/permissions. That removes Plauso's permissions for that Google account at once, and can also cover signing in with the Google button, which you then approve again next time. The account with us remains and the code by email works as usual.
If you want the account itself deleted, request it under Settings or write to support@plauso.app. We then remove the account and the customers you added; our backups keep them until the backup is pruned, at most 3 months later. Invoice records we must keep for seven years under Swedish accounting law, even then.
If we change anything
If we ever ask for one more permission, or start using something we get from Google for anything other than what is written here, this page and the privacy policy are rewritten before it happens. If you connected your Business Profile, we also ask you to approve the new use before we start. We never add a use quietly.
- Company
- Nordkod Media AB
- Company registration number
- 559591-6759
- VAT number
- SE559591675901
- Address
- Bultgatan 38, 442 40 Kungälv, Sweden
- Service
- plauso.app
- Contact
- support@plauso.app