Review Monitor - GBP API

Privacy policy

Effective October 13, 2026. This policy covers the Review Monitor application for authorized teams working with 1-800-PACK-RAT and Zippy Shell, not either brand's general website.

Information accessed and collected

When an administrator connects Google, the application obtains the account's email address and display name, OAuth authorization credentials, and accessible Business Profile account and location information. Location data can include names, addresses, identifiers, store codes and website links. Reviews can include Google review identifiers, reviewer display names, ratings, text, publication and update dates, and business replies.

Reviews from other supported platforms are collected separately. Technical request and operational logs may include request times, IP addresses, browser information and errors. A sign-in cookie protects application access.

How information is used

Account and location data identify authorized profiles and associate reviews with the correct business. Reviews support ratings, trends, search, sentiment and topic reports, edit and availability checks, and retained evidence. Credentials maintain the connection for scheduled retrieval without repeated sign-in.

The current Google integration does not change listing ownership, edit listings or post replies. Google's requested permission is Business Profile management access, not a Google-defined read-only permission. The application does not collect your Google password.

Processing and sharing

Cloudflare hosts the application and databases and processes information to operate the service. Review data is transferred between application collection, processing and reporting services; reports are available to authorized application users.

Review ratings, titles, text and business replies are sent to OpenAI's API for sentiment and topic classification. Google OAuth tokens and account passwords are not included in those requests. This is inference for application reports, not training a general-purpose AI model. The application requests that the API response not be stored; provider processing and retention rules still apply.

The application does not sell Google user data or use it for advertising. Google data is used and shared to provide user-facing monitoring and reporting. Review Monitor's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage, security and retention

Stored Google refresh tokens and OAuth client secrets are encrypted. Access controls protect reporting, connection controls and administration. Public information pages do not display credentials or review records. No security measure guarantees absolute security.

Review records, historical versions, capture evidence and availability history are retained for ongoing reporting and audit purposes; no automatic deletion period is currently configured. Revoking access stops future authorized retrieval but does not automatically delete previously collected history. Operational and provider logs may have separate retention periods.

Your choices and requests

You may revoke access in your Google Account connections. Contact the administrator to request disconnection, access, correction or deletion of application-held data. Requests are reviewed against authorized access, reporting requirements and applicable obligations. Deleting an application copy does not delete the original review from Google or another service.

Contact and updates

Email marketing@1800packrat.com with “Review Monitor privacy” in the subject. Do not send passwords or tokens. Material policy changes will be published here with an updated effective date.