How Avision Handles Your Google Data

You're Always in Control

Each client explicitly authorizes Avision via Google OAuth 2.0 to access only their own Google Business Profile. We never access GBP data without explicit per-user authorization.

1. You connect your Google account
2. You grant access to your specific GBP listing
3. Avision reads and manages only what you authorized

Flow: Connect Google account -> Grant listing scope -> Activate monitoring/actions.

What Avision Accesses

Security Standards

• OAuth 2.0 (RFC 6749) as authentication standard
• TLS 1.3 encryption in transit
• Encrypted token storage at rest
• Access revocable at any time via myaccount.google.com
• GDPR Article 28 (Data Processor) aligned operations
• Regular security audits and access logs

Why Avision Doesn't Have Its Own GBP

Avision is an online-only SaaS and, under Google Business Profile eligibility guidelines, online-only businesses are not eligible for GBP listings. Our API usage is strictly on behalf of clients who do have eligible physical-location businesses. This is the standard authorized model for GBP management platforms using OAuth 2.0.