Page One Insights
PAGE ONEINSIGHTS
Let’s talk growth ↗
Home / Google API Services Disclosure

Google API Services Disclosure

Google API Services

Some features of the Page One client portal and our services connect to Google through official Google APIs. This page lists exactly which APIs and permissions we request, why, and the rules we hold ourselves to — in more detail than the summary in our Privacy Policy.

Last updated: August 20, 2026

Related policies

info@pageoneinsights.com

1. What this page covers

Page One Insights LLC (“Page One”, “we”, “us”) builds and runs the Page One client portal at portal.pageone.cloud, our Android app (and iOS app when available), and the internal systems our staff use to deliver Google Business Profile management, local SEO, websites and reporting. Where those tools talk to Google, they do so through Google’s published APIs, using OAuth 2.0 consent that the owner or manager of the Google account grants on Google’s own screen. We never ask for, see or store a Google password.

Limited Use disclosure

Page One Insights’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This disclosure supplements our Privacy Policy, Terms & Conditions and Data Processing Agreement. If anything here conflicts with the Privacy Policy, the stricter statement applies.

2. Google APIs we use

  • Business Profile Performance API
  • My Business Business Information API
  • My Business Account Management API
  • My Business Notifications API
  • Google Search Console API (Webmasters)
  • Site Verification API
  • Google Analytics Admin API and Data API (GA4)

Separately, and only for Page One staff accounts, our CRM connects to Gmail and Google Calendar through a different Google Cloud project so staff can send client correspondence from the CRM and book appointments at times they are free. Clients are never asked for Gmail or Calendar access. Those staff connections are described in section 4 of the Privacy Policy.

3. Permissions (OAuth scopes) we request

Google’s consent screen shows each permission in plain language. These are the underlying scopes, what product they unlock and the only things we use them for:

We request the full set at once so that a single connection covers listing management, Search Console reporting and Analytics setup for a website we build. If you only want us to manage your Business Profile, tell us and we will work with the subset you grant — Google lets you untick individual permissions on the consent screen.

4. Who connects a Google account

  • Clients connect the Google account that owns or manages their Business Profile, using a secure link our team sends. The connection is tied to that client’s record and only that client’s locations are accessed.
  • Page One agency accounts — Google accounts our staff operate — are connected in the same way so we can manage listings that clients have added us to as a manager, and Search Console properties for websites we host.

We ask for access only from someone with authority over the account, and we record who connected it, when, and which permissions were granted.

5. How we use Google user data

We use Google user data only to provide and improve the user-facing features you can see in the portal, our reports and the services you purchased:

  • Showing your Business Profile performance — views, searches, calls, direction requests and website clicks — in the portal and monthly reports.
  • Showing new reviews as they arrive and publishing the replies you approve (or that you have asked us to write on your behalf).
  • Keeping your listing information, posts and photos accurate and current, and alerting you when something on the listing changes unexpectedly.
  • Showing Search Console queries, impressions, clicks and positions for your website, and submitting sitemaps and new URLs when we publish pages for you.
  • Creating and reading the Google Analytics property for a website we build, so traffic reporting works from launch.
  • Identifying which Google account is connected to your client record.

6. What we never do with it

  • We do not use Google user data to serve or target advertising of any kind.
  • We do not sell, rent, license or otherwise transfer Google user data to third parties, including data brokers, advertising platforms or information resellers.
  • We do not use Google user data to develop, improve or train generalised artificial-intelligence or machine-learning models, and we do not transfer it to anyone for that purpose. Where an AI feature drafts a reply to a review, the review text is processed only to produce that draft for you.
  • We do not use it to assess credit-worthiness or for lending.
  • We do not build databases of Google user data beyond what the features above need, and we do not keep cached data longer than the feature requires.
  • Humans do not read Google user data except: with your explicit consent for a specific support request; when necessary for security or to investigate abuse; when required by law; or after it has been aggregated and anonymised so that it no longer identifies anyone.

We transfer Google user data to others only (a) as necessary to provide or improve those features — for example to our hosting provider under contract, (b) to comply with applicable law or a valid legal process, (c) as part of a merger, acquisition or sale of assets after giving you notice, or (d) with your explicit consent.

7. Storage and protection

  • All traffic to and from Google and to the portal is encrypted in transit with TLS 1.2 or higher.
  • OAuth refresh tokens are stored encrypted, in a database where row-level security isolates each client’s records.
  • Servers are reachable only over SSH keys (password login disabled) behind a host firewall and intrusion prevention, and the database is backed up automatically every day.
  • Only the staff who work on your account can see your Google data inside our CRM, and their actions are logged.

More detail on our security measures is in the Data Processing Agreement.

8. Revoking access

You can withdraw the permission at any time, without asking us:

  1. Go to your Google Account → Security → Third-party apps & services, find Page One and remove access.
  2. Or email info@pageoneinsights.com from the email address on your account, or message us in the portal, and we will disconnect it for you.

Once access is revoked our connection stops working immediately. We delete the stored tokens and cached Google data within 30 days. Features that depend on the connection — performance charts, review alerts, listing updates — stop updating until it is reconnected.

9. Deleting Google data

To have all Google data we hold about you deleted, with or without closing your account, email info@pageoneinsights.com from the address on your account with the subject “Data deletion request”, or ask us in the portal. We acknowledge within 2 business days and complete deletion within 30 days. Full account deletion is described on the Account & data deletion page.

10. Questions

Questions about our use of Google APIs or Google user data can be sent to: