1. Controller and scope of the test version
Linqowo is currently a project in the testing phase. For privacy and data matters, contact: linqowo.analizy@gmail.com.
Until the controller's identification details have been completed, the service is not intended for public commercial use. Access is limited to invited testers and agreed pilot businesses. Before the production launch, this document will be supplemented with the controller's full details and the legal bases relevant to the service provided.
2. Data we process
After a Google account is connected voluntarily, the application may access and store:
- identifiers and names of Google Business Profile accounts and locations;
- the location name and abbreviated address required to select it;
- the review identifier, rating, review content, public author name, and creation and update dates;
- the scope of access granted and an encrypted OAuth refresh token;
- technical process data, such as request identifiers, statuses, operation times and safe error codes.
The IP address is not stored in the database in plain text. A rotating HMAC hash is used to limit abuse. Infrastructure providers may process network data separately in their security logs.
3. How we use Google data
Google data is used only for features visible to the user: displaying available accounts and locations, selecting the correct Business Profile, synchronising reviews, and preparing analyses and reports related to that profile.
Linqowo does not use access to edit the Business Profile, publish replies to reviews, or change opening hours, addresses, photos or administrators. Data is not sold or used for advertising, credit assessment or advertising profiling.
Linqowo's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
4. Sharing and infrastructure providers
Data may be processed only to the extent required to operate the service by:
- Google — the OAuth and Google Business Profile API provider;
- Supabase — the database, Edge Functions and encrypted Vault token storage provider;
- Netlify — the provider hosting the public website and the limited proxy for OAuth screens;
- authorised people supporting testing or security, only when necessary.
Data is not shared with other Linqowo customers. Exceptions may apply where required by law or necessary for security purposes.
5. Security and retention
The refresh token is stored in Supabase Vault. The access token and Google authorisation code are used only during the current operation and are not stored as application data. One-time links, OAuth state and selection sessions are time-limited and stored in hashed form.
When an account is disconnected locally, the refresh token is deleted. Imported reviews and reports may remain in the system for service history purposes until the test ends or a deletion request is received, unless further retention is required by law.
6. User control
Users can disconnect the integration in Linqowo or revoke access in their Google Account settings. They may also request information, a copy, correction or deletion of their data by emailing linqowo.analizy@gmail.com. Before fulfilling a request, we may ask for confirmation that the requester is authorised for the relevant Business Profile.
8. Changes to this document and contact
This policy may be updated as testing develops. Material changes to how Google data is used will be presented to the user before the data is used again for a new purpose.
Questions can be sent to linqowo.analizy@gmail.com.