Privacy policy

Last updated: 3 August 2026

Access to GMB Manager is currently reserved for clients of the Makemerank agency. Accounts are created as part of the commercial relationship with the agency.

This page is an English translation provided for convenience. The French version is the reference version and prevails in the event of any discrepancy.

1. Who we are

GMB Manager (gmbmanager.ai) is an online reputation and Google Business Profile management service, published by MAKEMERANK LIMITED, a company incorporated in Ireland (registration number 686482), C/O Pod 2, The Old Station House, 15a Main Street, Blackrock, Dublin, A94T8P8, Ireland.

Contact for any question about personal data: equipe@gmbmanager.ai.

2. Data we collect

Account data: first name, last name, email address, password (hashed), or Google identifier when signing in through Google Sign-In.

Customer data imported by our users: the name, email address and phone number of end customers, imported by our users in order to send invitations to leave a review. This data is encrypted (AES-256-GCM) in the database and is used for that purpose only. Sending invitations is conditional on the consent obtained by the user from their customer.

Public data: public reviews of Google profiles (both our users' and competing profiles) and public local search results, collected through our provider DataForSEO, independently of the Google Business Profile APIs.

Billing data: handled by our payment provider Stripe; we do not store any bank card number.

3. Google data (Google Business Profile APIs)

When you connect your Google account to GMB Manager, access happens through the OAuth 2.0 protocol, with the https://www.googleapis.com/auth/business.manage scope.

Scope of the access: GMB Manager only accesses the business profiles that the authenticated user owns or manages in Google Business Profile. No data about third-party profiles is collected through these APIs.

Read access: on the user's behalf, GMB Manager reads the data of their profiles: profile information (hours, contact details, description, attributes, photos), performance metrics, search keywords and reviews. This data is used solely to present it to them in their dashboard and reports.

Write access: on an explicit action by the user in the interface, GMB Manager can edit the information of their profiles and publish replies to their reviews. Every write corresponds to an action triggered by the user; no automatic or unsolicited action is carried out on the profiles.

Data received from the Google APIs is never sold, never transferred and never used for advertising purposes, nor passed to third parties beyond the technical sub-processors strictly necessary for the service to run (see section 5).

GMB Manager's use and transfer of information received from the Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Security and retention: Google access tokens are encrypted (AES-256-GCM) and stored on our servers hosted by OVH in France (European Union). Google data is kept for the duration of the contractual relationship and deleted at the latest 12 months after the account is closed. Disconnecting the Google account from GMB Manager immediately deletes the access tokens.

Revocation and deletion: you can revoke GMB Manager's access at any time from your Google account settings (myaccount.google.com/permissions) or by disconnecting your Google account from GMB Manager. You can also request the deletion of all Google data associated with your account by writing to equipe@gmbmanager.ai.

4. Purposes and legal bases

• Providing the service (dashboard, profile management, reports, widgets): performance of the contract.

• Sending invitations to leave a review: consent of the end customer, obtained by our user.

• Billing and account management: performance of the contract and legal obligations.

• Transactional emails (service notifications): legitimate interest.

5. Sub-processors and recipients

Data is hosted and processed by the following providers:

• OVH (France): server and database hosting.

• Brevo (France): sending invitation and notification emails.

• Stripe: payments and billing.

• DataForSEO: collection of public local search data (no personal data of our users is passed to it, and no data coming from the Google APIs is passed to it).

• Google: Google Business Profile APIs, Google Sign-In, Google Maps.

No data is sold or passed to third parties for advertising purposes.

6. Retention periods

Account data, imported data and Google data are kept for the duration of the contractual relationship, then deleted within a maximum of 12 months after the account is closed. Billing data is kept in line with the legal obligations in force. You can request the early deletion of your data at any time (see section 7).

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your personal data. To exercise these rights, write to equipe@gmbmanager.ai. You may also lodge a complaint with the competent supervisory authority (in France, the CNIL).

8. Cookies

GMB Manager only uses cookies and storage that are strictly necessary for the service to run (login session). No advertising cookie or third-party tracker is used.

9. Changes

This policy may be updated; the date at the top of the page is authoritative. In the event of a substantial change, users will be informed by email or through the service.