Privacy policy
Cordyna Local helps agencies manage the Google Business Profiles of their clients. This page explains what data we access, why, how we protect it, and how you can remove it.
Who we are
Cordyna Local is operated by Cordyna ("we", "us"). You can reach us at vingarg3110@gmail.com.
Data we access from Google
When an administrator connects a Google account, they grant us the Google Business Profile permission https://www.googleapis.com/auth/business.manage. Using it, we access:
- The email address of the connected Google account, to show which account is connected.
- The business accounts and locations that account can manage: names, categories, addresses, phone numbers, websites and opening hours.
- Reviews on those locations: the star rating, the review text, the reviewer's public display name and photo, and any reply already posted.
- Performance metrics for those locations: search and map views, calls, direction requests and website clicks.
How we use it
- To show an agency's reviews, locations and performance numbers to the staff members who are allowed to see them.
- To post a reply to a review, only after a person on the agency's team has reviewed and approved the text.
- To create monthly performance reports for the agency's clients.
- To keep our copy of listing details in step with Google, so staff can spot mistakes.
We do not use this data for advertising, we do not sell it, and we do not give it to data brokers or use it to decide credit or lending.
AI-assisted replies
To suggest a reply, we send the text and star rating of one review, and the business name and category, to Google's Gemini API. The suggestion is shown to a person, who may edit or discard it. We do not use Google user data to train or improve AI models, ours or anyone else's.
Who can see it
Only signed-in members of the agency that connected the account. Administrators see all locations of their agency, and other staff see only the locations assigned to them. Our staff do not read your data, except when you ask us for support, or when the law requires it.
How we protect it
- Google refresh tokens are encrypted before they are stored.
- All traffic uses HTTPS.
- Each agency's data is kept apart from every other agency's, and each request is checked against the signed-in person's agency.
- Every reply published and every connection added or removed is recorded with who did it and when.
How long we keep it, and how to remove it
- Disconnect: an administrator can disconnect a Google account in Settings. We then revoke the token with Google and stop all syncing.
- From Google: you can also remove access at any time at myaccount.google.com/permissions.
- Deletion: on request, or when an agency stops using Cordyna Local, we delete the data we copied from Google within 30 days. Email us at the address above.
Changes
If we change this policy, we will update this page and its effective date. If a change affects how we use Google data, we will ask for consent again where required.