Privacy Policy
BitByte Labs (“BitByte Labs”, “we”, “us”, or “our”) operates the Google Reviews & Photos for WordPress plugin and the website available at https://api.bitbytelabs.in/ (the “Service”).
This Privacy Policy explains how we collect, access, use, store, and protect information when you use our WordPress plugin or connect your Google Business Profile through our Service.
By using the Service, you agree to the practices described in this Privacy Policy.
1. Information We Access
When you connect your Google Business Profile to the plugin using Google OAuth, we may access information that you explicitly authorize through Google’s consent screen.
Depending on the permissions granted and the features you use, this may include:
- Google Business Profile account and business information.
- Business locations associated with your authorized account.
- Business profile information required to identify and synchronize the selected location.
- Customer reviews associated with your authorized business location, including review text, reviewer display name, reviewer profile image or URL, rating, and review-related dates where provided by Google.
- Business photos associated with your authorized business location.
- Customer-contributed photos associated with the authorized business location where supported by the Google API features used by the Service.
- Information required to maintain the connection between the plugin and Google APIs.
- OAuth authorization credentials or tokens required to securely access the authorized Google APIs.
We only request and use Google permissions that are necessary to provide the functionality selected by you.
2. How We Use Google Data
Google data accessed through the Service is used solely to provide the functionality of the plugin, including:
- Connecting your WordPress website to your Google Business Profile.
- Retrieving authorized business reviews.
- Retrieving authorized business photos and, where supported by the enabled Google API functionality, customer-contributed photos.
- Synchronizing reviews and photos with your WordPress website.
- Maintaining the authorized connection so that automatic synchronization can continue.
- Providing technical support and troubleshooting when requested.
- Maintaining the security, reliability, and functionality of the Service.
We do not use Google user data for advertising or unrelated purposes.
We do not sell Google user data.
We do not use Google user data to determine creditworthiness, lending eligibility, or similar financial decisions.
We do not use Google user data to build, train, or improve generalized artificial intelligence or machine-learning models.
Our handling of Google user data is limited to the functionality described in this Privacy Policy and is intended to comply with the Google API Services User Data Policy and its Limited Use requirements.
3. Google API Services
The Service uses Google APIs to provide Google Business Profile integration.
Your use of Google services remains subject to Google’s applicable terms and policies. You can review Google’s privacy and API policies through Google’s official documentation.
We do not request your Google password. Authentication and authorization are performed through Google’s OAuth authorization process.
You may revoke the application’s access to your Google account at any time through your Google Account security settings.
4. Storage of Information
To provide the Service, certain information may be stored by the plugin on your WordPress website and by our backend infrastructure.
This may include:
- Authorized Google Business Profile information.
- Selected business location information, including location identifiers and business information retrieved from Google.
- Reviews and review-related information retrieved through authorized Google APIs, including reviewer information, ratings, review text, and relevant dates where provided by Google.
- Business photos, customer-contributed photos, and references or URLs to photos retrieved through authorized Google APIs.
- OAuth authorization tokens or other technical credentials required to maintain API access.
- WordPress website configuration, plugin settings, synchronization information, and cached content.
- Customer, license, subscription, and transaction-related information necessary to provide and manage the Service.
- Technical logs and diagnostic information necessary for security, troubleshooting, monitoring, and service operation.
OAuth access and refresh tokens are protected using security measures appropriate to the nature of the information and the Service’s infrastructure.
We retain information only for as long as reasonably necessary to provide the Service, maintain authorized connections, perform synchronization, comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements.
5. Data Security
We take reasonable technical and organizational measures to protect information processed through the Service against unauthorized access, alteration, disclosure, or destruction.
OAuth credentials and other sensitive authentication information are handled using appropriate security practices and are not intentionally exposed to other users.
However, no internet-based service can guarantee absolute security.
6. Data Sharing
We do not sell or rent your personal information or Google user data.
We may use trusted service providers, including hosting providers, payment processors, and technical service providers, where necessary to operate, maintain, secure, troubleshoot, or provide the Service.
Payment processing may involve third-party payment providers such as Razorpay or Paddle. Payment providers may receive information necessary to process transactions, such as customer and transaction information, in accordance with their own terms and privacy policies.
Such providers may process information only as necessary to provide their services to us and are expected to maintain appropriate security and confidentiality.
We do not share Google user data with third parties for advertising, data brokerage, or unrelated commercial purposes.
We may disclose information where required by applicable law, legal process, court order, or governmental authority, or where reasonably necessary to protect our rights, users, or the security of the Service.
7. WordPress Website Data
The plugin operates within your WordPress website and may store configuration information, cached content, reviews, photos, synchronization information, and related settings within your WordPress installation.
You, or the administrator of the WordPress website, are responsible for controlling access to the WordPress installation and for maintaining appropriate website security.
8. Data Retention and Deletion
You may disconnect your Google Business Profile integration from the plugin at any time using the available disconnect functionality.
Disconnecting the integration prevents the plugin from continuing to use the disconnected authorization for Google Business Profile synchronization through the Service. Disconnecting the integration does not necessarily mean that previously synchronized information is immediately deleted from all systems.
You may also revoke the application’s authorization directly through your Google Account security settings.
You may remove plugin data from your WordPress installation according to the plugin’s available settings, uninstall functionality, and your website’s administrative controls.
If you request deletion of information held by our Service, you may contact us using the contact details provided below. We will evaluate and process the request subject to applicable legal, contractual, security, fraud-prevention, backup, and operational requirements.
Where information is no longer required for the operation of the Service or for applicable legal or legitimate operational purposes, we may delete or anonymize it in accordance with our retention practices.
9. Your Choices
You may:
- Choose whether to connect your Google Business Profile.
- Grant or deny requested Google permissions.
- Disconnect your Google account from the plugin.
- Revoke the application’s access through your Google Account.
- Remove the plugin and its stored configuration from your WordPress website.
- Contact us regarding questions or requests concerning information processed through the Service.
10. Third-Party Services
The Service may interact with third-party platforms and infrastructure providers, including:
- Google services and Google Business Profile APIs for authentication and business-profile functionality.
- Payment providers such as Razorpay and Paddle for subscription and payment processing.
- Hosting, infrastructure, security, logging, and other technical service providers required to operate the Service.
These third-party services operate under their own privacy policies and terms. We encourage you to review their applicable policies when using their services.
11. Children's Privacy
The Service is intended for businesses, website administrators, developers, and other users capable of entering into legally binding agreements.
We do not knowingly collect personal information from children.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the Service, applicable laws, Google API requirements, or our data-handling practices.
When material changes are made, we will update the “Last Updated” date and, where appropriate, provide additional notice.
13. Contact Us
BitByte Labs
Address: 5th Floor, GR Tower Sector 75, Mohali, Punjab, India
Email: bitbytelabs25@gmail.com
Website: https://api.bitbytelabs.in
Google API Services User Data Policy
Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.