Google API Services User Data Policy

1. Scopes we request

1.1 Google Business Profile

When you connect Google on Toolbench to manage your listing, we request this scope through our Google Business Profile connector:

• https://www.googleapis.com/auth/business.manage— to read and update the Google Business Profile you authorize (profile fields, hours, posts, photos, Q&A, reviews, and related listing data), on your behalf and under your OAuth grant.

We connect as a manager on the profile you own. We do not use shared logins. You can disconnect at any time in Toolbench or in your Google account.

1.2 Google Calendar (optional)

When a shop owner connects a calendar on Phone settings, Toolbench requests only these Google scopes on the primary calendar:

• email — so we know which Google account connected and can show that address on Phone settings.
• https://www.googleapis.com/auth/calendar.freebusy — so the receptionist can check open times and speak real windows. We do not invent a slot.
• https://www.googleapis.com/auth/calendar.events — so we can create, move, or cancel the job appointment the caller confirmed.

We do not request full calendar read access. We do not dump unrelated event titles or descriptions into the product UI. Callers never see a calendar.

2. How the data is used

• Google Business Profile:to show your listing in Toolbench, ingest context for AI roles, and publish or propose updates you authorize (posts, photos, profile fields, Q&A, review replies), subject to your settings and Google policies.
• Calendar:free/busy results are clipped to shop hours and returned as open windows the receptionist can offer. After the caller confirms a time, we create a calendar event titled with the customer name and job (for example, “Marcus — no heat”). Reschedule and cancel update or delete that same event.
• Disconnect is available in Toolbench settings. Revoking access stops further reads and writes for that connection.

3. Limited Use

The use of raw or derived user data received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We use Google user data only to provide or improve user-facing features that are prominent in the Toolbench UI — Google Business Profile management, review and post workflows, and (when connected) checking availability and booking, moving, or canceling a job on Calendar.
• We do not sell Google user data. We do not use it for advertising. We do not use it to train generalized AI or machine-learning models. We do not allow independent parties to read it except as needed to operate those features, under confidentiality.
• Derived booking results and listing context may be sent to AI models only to perform the feature you use (for example, drafting a post or offering a time on a live call). That data is not used to train third-party models.
• Human access is limited to security, compliance, and support you request, and is logged.

4. Contact

Questions about this statement: help@toolbench.com. The full Privacy Policy is at toolbench.com/privacy.