How GBPCentral Connects to Google

The Connection

GBPCentral connects to your Google Business Profile using Google's official OAuth 2.0 authorization system. This is the same standard used by thousands of apps that integrate with Google. Your Google password is never stored or transmitted to GBPCentral. Instead, Google issues secure tokens that grant limited access to your business profile data.

What Data Is Accessed

GBPCentral uses a single Google permission scope: "business.manage." This allows the platform to:

• Read your business profile details (name, address, phone number, hours, category).
• Create and manage posts on your business profile.
• Read performance analytics (views, clicks, calls, direction requests).
• Read and respond to customer reviews.
• Check verification status.

GBPCentral does not modify your core business information such as your business name, address, or hours. It only works with posts, analytics, and reviews.

Token Security

The tokens Google provides are encrypted before being stored in the database. They are decrypted only when needed to make an API call. The tokens are never included in logs, API responses, or any visible output.

Access tokens expire after about one hour. GBPCentral automatically refreshes them before they expire using a long-lived refresh token. This process runs in the background and requires no action from you.

Automatic Data Sync

Once connected, GBPCentral syncs your data on a regular schedule:

• Business details — Synced when you connect and periodically thereafter.
• Analytics — Collected every few hours from Google's Performance API.
• Token refresh — Runs every 6 hours to keep access active.

If a sync fails, the system retries automatically. After 3 consecutive failures, the account is flagged so you can investigate and reconnect if needed.

Revoking Access

You can disconnect GBPCentral from your Google account at any time, either from the Accounts page in GBPCentral or from your Google Account's third-party app permissions page. After disconnection, GBPCentral can no longer access your Google data.