1. What this page covers
Page One Insights LLC (“Page One”, “we”, “us”) builds and runs the Page One client portal at portal.pageone.cloud, our Android app (and iOS app when available), and the internal systems our staff use to deliver Google Business Profile management, local SEO, websites and reporting. Where those tools talk to Google, they do so through Google’s published APIs, using OAuth 2.0 consent that the owner or manager of the Google account grants on Google’s own screen. We never ask for, see or store a Google password.
Limited Use disclosure
Page One Insights’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
This disclosure supplements our Privacy Policy, Terms & Conditions and Data Processing Agreement. If anything here conflicts with the Privacy Policy, the stricter statement applies.
2. Google APIs we use
- Business Profile Performance API
- My Business Business Information API
- My Business Account Management API
- My Business Notifications API
- Google Search Console API (Webmasters)
- Site Verification API
- Google Analytics Admin API and Data API (GA4)
Separately, and only for Page One staff accounts, our CRM connects to Gmail and Google Calendar through a different Google Cloud project so staff can send client correspondence from the CRM and book appointments at times they are free. Clients are never asked for Gmail or Calendar access. Those staff connections are described in section 4 of the Privacy Policy.
3. Permissions (OAuth scopes) we request
Google’s consent screen shows each permission in plain language. These are the underlying scopes, what product they unlock and the only things we use them for:
| Scope | Product | What we use it for |
|---|---|---|
https://www.googleapis.com/auth/business.manage | Google Business Profile | Read and manage the Business Profile locations you choose: listing information, posts, photos, reviews and review replies, and performance insights. |
https://www.googleapis.com/auth/webmasters | Google Search Console | Read search performance (queries, impressions, clicks, position) for verified website properties, and submit sitemaps and URL updates when we publish pages on a website we build and host for you. |
https://www.googleapis.com/auth/siteverification | Google Site Verification | Verify ownership of a website we host for you in Search Console so its data can be reported, instead of asking you to add DNS records by hand. |
https://www.googleapis.com/auth/analytics.readonly | Google Analytics | Read website traffic reports (sessions, page views, traffic sources, top pages) for reporting. |
https://www.googleapis.com/auth/analytics.edit | Google Analytics | Create or configure the Google Analytics property and data stream for a website we build and host for you, so tracking works from launch. |
openid, email | Basic account identity | Your Google account email address, so we can show which Google account is connected and link the connection to your client record. |
We request the full set at once so that a single connection covers listing management, Search Console reporting and Analytics setup for a website we build. If you only want us to manage your Business Profile, tell us and we will work with the subset you grant — Google lets you untick individual permissions on the consent screen.
4. Who connects a Google account
- Clients connect the Google account that owns or manages their Business Profile, using a secure link our team sends. The connection is tied to that client’s record and only that client’s locations are accessed.
- Page One agency accounts — Google accounts our staff operate — are connected in the same way so we can manage listings that clients have added us to as a manager, and Search Console properties for websites we host.
We ask for access only from someone with authority over the account, and we record who connected it, when, and which permissions were granted.
5. How we use Google user data
We use Google user data only to provide and improve the user-facing features you can see in the portal, our reports and the services you purchased:
- Showing your Business Profile performance — views, searches, calls, direction requests and website clicks — in the portal and monthly reports.
- Showing new reviews as they arrive and publishing the replies you approve (or that you have asked us to write on your behalf).
- Keeping your listing information, posts and photos accurate and current, and alerting you when something on the listing changes unexpectedly.
- Showing Search Console queries, impressions, clicks and positions for your website, and submitting sitemaps and new URLs when we publish pages for you.
- Creating and reading the Google Analytics property for a website we build, so traffic reporting works from launch.
- Identifying which Google account is connected to your client record.
6. What we never do with it
- We do not use Google user data to serve or target advertising of any kind.
- We do not sell, rent, license or otherwise transfer Google user data to third parties, including data brokers, advertising platforms or information resellers.
- We do not use Google user data to develop, improve or train generalised artificial-intelligence or machine-learning models, and we do not transfer it to anyone for that purpose. Where an AI feature drafts a reply to a review, the review text is processed only to produce that draft for you.
- We do not use it to assess credit-worthiness or for lending.
- We do not build databases of Google user data beyond what the features above need, and we do not keep cached data longer than the feature requires.
- Humans do not read Google user data except: with your explicit consent for a specific support request; when necessary for security or to investigate abuse; when required by law; or after it has been aggregated and anonymised so that it no longer identifies anyone.
We transfer Google user data to others only (a) as necessary to provide or improve those features — for example to our hosting provider under contract, (b) to comply with applicable law or a valid legal process, (c) as part of a merger, acquisition or sale of assets after giving you notice, or (d) with your explicit consent.
7. Storage and protection
- All traffic to and from Google and to the portal is encrypted in transit with TLS 1.2 or higher.
- OAuth refresh tokens are stored encrypted, in a database where row-level security isolates each client’s records.
- Servers are reachable only over SSH keys (password login disabled) behind a host firewall and intrusion prevention, and the database is backed up automatically every day.
- Only the staff who work on your account can see your Google data inside our CRM, and their actions are logged.
More detail on our security measures is in the Data Processing Agreement.
8. Revoking access
You can withdraw the permission at any time, without asking us:
- Go to your Google Account → Security → Third-party apps & services, find Page One and remove access.
- Or email [email protected] from the email address on your account, or message us in the portal, and we will disconnect it for you.
Once access is revoked our connection stops working immediately. We delete the stored tokens and cached Google data within 30 days. Features that depend on the connection — performance charts, review alerts, listing updates — stop updating until it is reconnected.
9. Deleting Google data
To have all Google data we hold about you deleted, with or without closing your account, email [email protected] from the address on your account with the subject “Data deletion request”, or ask us in the portal. We acknowledge within 2 business days and complete deletion within 30 days. Full account deletion is described on the Account & data deletion page.
10. Questions
Questions about our use of Google APIs or Google user data can be sent to:
- Page One Insights LLC, 111 NE 1st St., Ste 8646, Miami, FL 33132, United States
- Email: [email protected]
- Phone: +1 (888) 272-1940 (Mon–Fri, 9:00am–6:00pm ET)