Google API Services Disclosure

1. What Google Data We Access

When you connect your Google Business Profile to StarReview, we request access to the following data through the Google Business Profile API:

• Reviews: Review text, reviewer display name, star rating, and timestamp
• Location information: Business name, address, and location identifiers
• Reply publishing: The ability to post replies to reviews on your behalf

2. How We Use This Data

StarReview uses the data accessed through Google APIs exclusively for the following purposes:

• Reading new reviews to generate reply suggestions
• Publishing replies to reviews after you have granted permission during onboarding
• Displaying your business locations within the StarReview dashboard
• Sending you weekly email summaries of new reviews

We do not use Google API data for advertising, selling to third parties, or any purpose unrelated to the core functionality of review management.

3. Data Storage & Retention

• Review data is stored in EU data centers
• Review texts sent to our AI provider for reply generation are processed in real-time and not permanently stored by the AI provider
• OAuth tokens are stored encrypted and used solely to maintain your Google Business Profile connection
• All user data is deleted within 30 days after account closure

4. User Consent & Control

• You explicitly authorise Google API access through the standard Google OAuth consent flow
• During onboarding, you confirm via a consent checkbox that you authorise StarReview to publish AI-generated replies to your reviews. The date and time of your consent is recorded.
• By default, every reply requires your manual approval, regardless of star rating. You explicitly enable automatic publishing per star rating in Settings (e.g. only for 5-star reviews). Negative reviews (1-2 stars) almost always remain in manual-approval mode in practice, since tone matters most there.
• Replies are published with randomised delays (between 30 minutes and 11 hours, varying by star rating) that match natural human response patterns. Swiss public holidays and quiet hours are respected.
• You can withdraw your consent, pause, or change automation settings at any time in your account settings
• You can revoke StarReview's access to your Google Business Profile at any time through your Google account permissions

5. Limited Use Compliance

StarReview complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google API data to provide and improve the review management features described on this page
• We do not transfer Google API data to third parties, except as necessary to provide the service (e.g., review text sent to our AI provider for reply generation, with no permanent storage)
• We do not use Google API data for serving advertisements
• Human access to Google API data is limited to debugging, security investigations, or responding to user support requests, and only with appropriate access controls

6. Data Protection

StarReview processes data in compliance with the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR). For full details, see our Privacy Policy and Terms of Service.

7. Contact

For questions about how StarReview uses Google API data, please contact us at:

hello@starreview.ch