Privacy Policy

Effective Date: February 17, 2026

1. Introduction

GMBMantra ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Google Business Profile management platform and related services (the "Service") at gmbmantra.ai.

By using our Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you sign in with Google, we receive:

  • Your name and email address
  • Google account identifier
  • Profile picture (if available)

2.2 Google Business Profile Data

Through Google APIs, with your authorization, we access and process:

  • Business location information (name, address, phone, hours, categories)
  • Customer reviews and ratings
  • Business posts and updates
  • Performance metrics and analytics
  • Photos and media associated with your business profile
  • Q&A content

2.3 Payment Information

Payment processing is handled entirely by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. Stripe may share with us your card type, last four digits, and billing address for record-keeping purposes.

2.4 Usage Data

We automatically collect:

  • IP address and approximate geolocation
  • Browser type, version, and device information
  • Pages visited, features used, and time spent
  • Referring website information
  • Error logs and performance data

3. How We Use Your Information

We use the collected information to:

  • Provide, operate, and maintain the Service
  • Manage your Google Business Profiles on your behalf
  • Generate AI-powered content, responses, and recommendations
  • Process payments and manage subscriptions
  • Send transactional emails (account notifications, billing receipts)
  • Analyze usage patterns to improve and develop the Service
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party providers who assist in operating the Service:

  • Stripe — payment processing
  • Google APIs — Business Profile data access
  • OpenAI / Anthropic — AI content generation (anonymized business data only)
  • MongoDB Atlas — database hosting
  • Vercel — application hosting
  • PostHog — product analytics
  • Brevo / SendGrid — transactional email delivery

4.2 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect the rights, property, or safety of GMBMantra, our users, or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • SSL/TLS encryption for all data in transit
  • Encryption of sensitive credentials at rest
  • Secure OAuth 2.0 authentication (no passwords stored)
  • Access controls and least-privilege principles
  • Regular security reviews

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. Essential cookies are required for the Service to function. Analytics cookies (PostHog) help us understand usage patterns to improve the Service.

You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account termination, we retain data for up to 90 days before permanent deletion, unless longer retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Object to or restrict processing of your data
  • Request data portability
  • Withdraw consent at any time

To exercise these rights, please contact us at info [at] gmbmantra.ai. We will respond within 30 days.

9. Google API Services

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only access the Google data necessary to provide the Service features you have authorized, and we do not use Google user data for advertising purposes.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Effective Date" at the top indicates when this policy was last revised. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

13. Contact Information

If you have any questions about this Privacy Policy, please contact us:

Email: info [at] gmbmantra.ai

Website: gmbmantra.ai