What we take from GoogleLast changed 17 September 2026
Google user data
Google requires a service that uses Google sign-in to state exactly what it takes, what it does with it, how long it is kept and who it is shared with. The short version is in the privacy policy. This is the long one.
DraftThis text will be reviewed by a lawyer before launch.
We wrote it ourselves, as plainly as we could, and it describes how Plauso actually works today. But it has not been read by a lawyer, and we are not going to pretend otherwise. The review happens before the service launches for real.
Three places where Google is involved
Plauso touches Google in three ways and no more. The sign-in, where you can choose to continue with your Google account instead of waiting for a code by email. The place search, where you find your own business profile when you connect it. And the Business Profile API, which is built but not switched on — more on that below.
None of them reads your Gmail, your calendar, your Drive or your contacts. We never ask for access to them, so we cannot receive them even by accident.
What the sign-in asks for
When you choose Google you are sent to Google's own sign-in, and we ask for two permissions: openid and email. Nothing else. The first is what makes it a sign-in at all, the second is what tells us which address you are signing in with.
Google's own screen describes it as Plauso wanting to see your primary email address and associate you with your personal info at Google. That is the whole permission, and it is as small as a sign-in can be.
We do not ask for the right to reach anything at Google once you have left. There is no standing permission sitting between your sign-ins.
| Item | What it is | What we do with it | Stored by us? |
|---|---|---|---|
| Your email address at Google. | Looks up whether that address already has a Plauso account. If it has none, it becomes the account's address when you create one. | Yes — as the account's email address, nowhere else. | |
| email_verified | Google's word that the address has been proven. | If Google does not say it is proven, the sign-in stops. An unproven address proves nothing. | No. |
| sub | Google's own stable identifier for the account. | Holds the sign-in together for the minutes it takes to confirm which address you want to use. | No — it sits in a cookie for at most 15 minutes and is never written to our storage. |
| Everything else | Name, profile picture, contacts, Gmail, Calendar, Drive. | We do not ask for it. The permission we request is openid and email, nothing more. | No — we never have it. |
What we do with the address
The address is the account key in Plauso. If it already has an account you sign in to it; if it has none you create one. That is the whole use.
We require Google to say the address has been proven. If Google does not, the sign-in stops — Google also issues tokens for accounts where the address was never proven, and since the address is our account key, an unproven one could open somebody else's account.
If the same address owns several Plauso accounts we do not choose for you. Then the route goes through a code by email, where you see the accounts and point out the right one.
Limited use
Google's User Data Policy sets four requirements on what an app may do with data from Google. We follow them, and here is what they mean here:
- The data is used only to sign you in — the feature you pressed yourself. We use it for nothing else.
- We do not pass it on. Not to ad networks, not to data brokers, not to any analytics supplier. Your address leaves us only when we email you at it.
- No human sits and reads it. The address appears in your own account, and to us when we debug a fault you told us about or when the law requires it — never as a list someone browses.
- We do not sell it, do not use it for advertising, retargeting or credit scoring, and train no AI model on it.
Text suggestions and AI
If you want help writing the description for your Google profile, the material goes to a language model. What is sent is only what you typed into the form yourself: the business name, what you do, the town, the services, and what you want a post to be about.
Never an email address, never a customer detail, never anything that came from Google. And nothing is published anywhere until you have read the text and pressed approve.
The place search
The search text you type goes to Google Places, and the hits are shown to you. Of everything Google answers with, we store a single field: place_id. The name and address in the list are shown and thrown away — Google's terms exempt only place_id from the ban on storing.
The rating and the number of reviews are fetched fresh every time they are shown and never written to our storage. So no rating history can be built here, and that is why we show nothing at all when a fetch does not go through — there is no old value to fall back on.
The link to the review box is built from place_id on click. Storing it would be against the terms, and it would also be foolish: a stored link would be dead the day Google changes it, and the sign stays on the wall for years.
Google Business Profile
Reading and writing in a business profile requires Google to approve an application, and we do not have that approval. The feature is built but dormant: without approval not one call goes through, and the service says so plainly instead of pretending.
If it is ever switched on it will be with its own, larger permission, only for the profiles you point out yourself, and nothing is published without you approving the text. This page is rewritten before that happens — not afterwards.
Taking the access back
You can remove Plauso's access at any time from inside your Google account, under Security and the list of apps with access to the account. The Google button then stops working for you, but the account remains and the code by email works as usual.
If you want the account itself deleted, write to support@plauso.app. We then remove the account and the customers you added. Invoice records we must keep for seven years under Swedish accounting law, even then.
If we change anything
If we ever ask for one more permission, or start using something we get from Google for anything other than signing you in, this page and the privacy policy are rewritten before it happens. We never add a use quietly.
- Company
- Nordkod Media AB
- Company registration number
- 559591-6759
- VAT number
- SE559591675901
- Address
- Bultgatan 38, 442 40 Kungälv, Sweden
- Service
- plauso.app
- Contact
- support@plauso.app