Merchant authorization
Vamana accesses Google Business Profile only after an authorized merchant signs in with Google and grants permission through Google’s OAuth consent screen. Authorization applies only to profiles available to that Google account and can be revoked at any time.
Permission requested
Vamana requests the business.manage permission to perform merchant-requested Business Profile operations.
Data accessed
- Business accounts the authorized user can manage.
- Business locations and basic location identity needed to map a Google location to a Vamana workspace.
- Customer reviews, ratings, public reviewer names, review text, timestamps, and existing owner replies.
- Results of reply operations, including success or failure information.
How the data is used
- Display authorized reviews in the merchant’s private Vamana workspace.
- Classify sentiment and issues and generate suggested responses.
- Let authorized merchant users edit, approve, and publish a reply.
- Prevent duplicate processing, maintain an audit history, and diagnose integration failures.
Vamana does not sell Google user data, use it for advertising, create public reviewer profiles, or access a Business Profile without authorization.
Storage and protection
OAuth credentials are encrypted at rest. Workspace access is role-controlled, and merchant data is isolated by workspace. Google-derived review records are retained only as needed to provide review management, history, security, and merchant-requested functionality.
Human control
Suggested replies are AI-assisted drafts. Merchant approval is the default before publication. If optional automation is offered, it is explicitly enabled and configured by the merchant; sensitive categories may remain subject to human review.
Disconnect and revoke access
A workspace owner or administrator can disconnect Google Business Profile from Vamana’s settings. A merchant can also revoke Vamana directly from their Google Account’s third-party access controls. Revocation prevents future API access.
Request deletion
To request deletion of stored Google-derived data and credentials, disconnect the integration and submit a deletion request through our contact page or email sundar@vamana-labs.com from an address associated with the Vamana workspace. We verify authority, delete active credentials and eligible stored Google data, and confirm completion. Limited security or legal records may be retained where required.
Google policy
Vamana’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.