Google Business Profile API Integration
How Plug and Play mAIrketer integrates with the Google Business Profile API
—
Plug and Play mAIrketer integrates directly with the Google Business Profile API to provide automated local presence management for businesses. This integration enables our platform to manage profile information, publish content, monitor reviews, and track performance on behalf of authorized users.
This page outlines the specific permissions we request, how we use the Google Business Profile API, our data handling practices, and the authorization process.
—
API Access & Permissions
Our application requests the following OAuth 2.0 scope from the Google Business Profile API:
Scope: https://www.googleapis.com/auth/business.manage
This scope grants comprehensive access to manage Google Business Profile data and enables the following capabilities:
Business Information Management
– Read and update business hours
– Modify business descriptions and attributes
– Update contact information
– Manage business categories
– Maintain NAP (Name, Address, Phone) consistency
Content Publishing
– Create and publish posts
– Manage post lifecycle
– Delete or modify existing posts
Review Management
– Read customer reviews
– Monitor review activity
– Access review ratings and content
– Track review trends over time
Media Management
– Upload photos and videos
– Organize media library
– Remove outdated media
– Maintain visual content quality
Performance Analytics
– Access profile insights and metrics
– Track search queries and impressions
– Monitor user actions (calls, website visits, direction requests)
– Generate performance reports
Multi-Location Management
– Access and manage multiple business locations
– Synchronize data across locations
– Apply bulk updates
– Maintain brand consistency
—
Why We Need These Permissions
Our platform operates on an automated scheduling system that executes tasks in the background without requiring active user sessions. To maintain business profile accuracy and publish content according to predetermined schedules, the application requires persistent access to the Google Business Profile API.
Continuous Automation Requirements
Our platform operates on an automated scheduling system that executes tasks in the background without requiring active user sessions. To maintain business profile accuracy and publish content according to predetermined schedules, the application requires persistent access to the Google Business Profile API.
Comprehensive Management Scope
Effective local presence management extends beyond isolated actions. Our system maintains profile accuracy by ensuring business hours remain current, maintaining visual content quality through regular media updates, and tracking performance metrics to optimize visibility strategies.
Real-Time Data Synchronization
The platform monitors Google Business Profile data in real-time to detect discrepancies and adapt content strategies based on performance analytics. This requires continuous API access rather than intermittent user-initiated requests.
—
Authorization Process
User authorization follows the OAuth 2.0 protocol as specified by Google’s API requirements:
1. Authorization Initiation
Users initiate the connection by selecting “Connect Google Business Profile” within the plugin dashboard interface.
2. Google OAuth Consent
Users are redirected to Google’s authorization server where they:
– Authenticate with their Google account credentials
– Review the specific permissions being requested
– View the application name, developer information, and privacy policy
– Grant or deny authorization
3. Token Exchange
Upon authorization approval, Google’s OAuth server returns an authorization code. Our application exchanges this code for access and refresh tokens, which are stored securely on the user’s WordPress installation.
4. Connection Confirmation
The user is redirected back to the WordPress dashboard with confirmation of successful authorization. Automated features activate immediately upon connection.
—
Data Handling & Security
Data Collection & Storage
Our application stores the following data types:
– OAuth Tokens: Access and refresh tokens are stored locally on the user’s WordPress server using WordPress’s secure storage mechanisms
– Business Profile Data: Basic business information (name, address, phone, hours, categories) is cached for synchronization purposes
– Review Data: Review content, ratings, and metadata are stored for analysis and reporting
– Performance Metrics: Insights data including views, searches, and user actions are stored for trend analysis
– Content History: Records of published posts and media uploads are maintained for tracking and optimization
Security Measures
– All API communications use TLS 1.2 or higher encryption
– OAuth tokens are stored on the user’s server, not transmitted to external databases
– Token storage utilizes WordPress’s built-in encryption capabilities
– No Google Business Profile data is shared with third-party services
– All data handling complies with Google’s API Terms of Service
User Data Ownership
Users retain complete ownership of their Google Business Profile and all associated data. Our access is limited strictly to the permissions explicitly granted during the OAuth authorization process. Users maintain the ability to revoke authorization at any time through either the plugin interface or their Google Account permissions settings.
—
Connection Management
Subscription & Access Requirements
Automated API operations continue to function while an active paid subscription is maintained.
Disconnection Process
Users may disconnect their Google Business Profile through multiple methods:
1. Navigate to the plugin dashboard and select “Disconnect Google Business Profile”
2. Revoke access through Google Account settings at https://myaccount.google.com/permissions
Upon disconnection or subscription termination, all content and data added by the plugin to the Google Business Profile is automatically removed. User-created modifications to their Google Business Profile remain intact. All automated features cease immediately.
Account Switching Policy:
To prevent abuse and maintain system stability, users who disconnect their Google Business Profile cannot authorize a different Google Business Profile for 30 days. Users may reconnect the same Google Business Profile at any time without restriction.
—
Multi-Location & Enterprise Use Cases
Multiple Location Management
For businesses operating multiple locations, our platform provides centralized management capabilities. A single WordPress installation can manage all locations associated with an authorized Google account, with the ability to customize content per location while maintaining brand consistency across all profiles. Only one Google Business Profile account can be connected at a time.
—
Compliance & Policy Adherence
Google Business Profile API Compliance
Our application strictly adheres to all Google Business Profile API policies and terms of service:
– Access is granted only to profiles explicitly authorized by their owners
– Data usage is limited to the purposes disclosed during authorization
– All API rate limits and usage quotas are respected
– Security requirements specified by Google are implemented and maintained
– User privacy is protected in accordance with Google’s privacy standards
User Obligations
By authorizing our application, users agree to:
– Provide accurate and truthful business information
– Comply with Google’s Business Profile content policies
– Maintain an active, legitimate business entity
– Refrain from using the platform for spam, misleading content, or policy violations
– Accept responsibility for content published through the automation system
