Privacy Policy

Effective Date: October 24, 2026

1. Introduction

GMBMantra ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Google Business Profile management platform and related services (the "Service") at gmbmantra.ai.

By using our Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we receive:

  • Your name and email address
  • Google account identifier
  • Profile picture (if available)

2.2 Google Business Profile Data

Through Google APIs, with your authorization, we access and process:

  • Business location information (name, address, phone, hours, categories)
  • Customer reviews and ratings
  • Business posts and updates
  • Performance metrics and analytics
  • Photos and media associated with your business profile
  • Q&A content

2.3 Payment Information

Payment processing is handled entirely by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. Stripe may share with us your card type, last four digits, and billing address for record-keeping purposes.

2.4 Usage Data

We automatically collect:

  • IP address and approximate geolocation
  • Browser type, version, and device information
  • Pages visited, features used, and time spent
  • Referring website information
  • Error logs and performance data

3. How We Use Your Information

We use the collected information to:

  • Provide, operate, and maintain the Service
  • Manage your Google Business Profiles on your behalf
  • Generate AI-powered content, responses, and recommendations
  • Process payments and manage subscriptions
  • Send transactional emails (account notifications, billing receipts)
  • Analyze usage patterns to improve and develop the Service
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party providers who assist in operating the Service:

  • Stripe — payment processing
  • Google APIs — Business Profile data access
  • OpenAI / Anthropic — AI content generation (anonymized business data only)
  • MongoDB Atlas — database hosting
  • Vercel — application hosting
  • PostHog — product analytics
  • Brevo / SendGrid — transactional email delivery

4.2 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect the rights, property, or safety of GMBMantra, our users, or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • SSL/TLS encryption for all data in transit
  • Encryption of sensitive credentials at rest
  • Secure OAuth 2.0 authentication (no passwords stored)
  • Access controls and least-privilege principles
  • Regular security reviews

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. Essential cookies are required for the Service to function. Analytics cookies (PostHog) help us understand usage patterns to improve the Service.

You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.

7. Data Retention

We keep your information for as long as your account exists. We do not delete inactive accounts automatically.

When you delete your account (in the GMBMantra app, at gmbmantra.ai/delete-account, or by emailing us), we delete your account and its data from our database straight away, revoke our access to your Google account, and remove your contact from our email provider. Requests made by email are completed within 30 days. Copies in our server logs and backups expire automatically within 90 days.

After deletion we keep only: a deletion record (your email address, user ID, the date and the number of items deleted) to show the request was carried out; support requests you sent us, with your name and email address removed; and business locations that another GMBMantra user also manages, which stay for that user. Payment records are held by Stripe, our payment processor, under its own legal retention rules. Replies, posts and photos already published to Google stay on your Google Business Profile until you remove them there.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Object to or restrict processing of your data
  • Request data portability
  • Withdraw consent at any time

To exercise these rights, please contact us at info [at] gmbmantra.ai. We will respond within 30 days. You can also delete your account yourself in the GMBMantra app or at gmbmantra.ai/delete-account.

9. Google API Services

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only access the Google data necessary to provide the Service features you have authorized, and we do not use Google user data for advertising purposes.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Effective Date" at the top indicates when this policy was last revised. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

13. Contact Information

If you have any questions about this Privacy Policy, please contact us:

Email: info [at] gmbmantra.ai

Website: gmbmantra.ai