Connect Google Business Profiles securely through Google’s official APIs.
GBPPromote uses Google OAuth 2.0 and the official Google Business Profile APIs to connect authorized locations. You sign in with Google, review the permissions, choose the profiles you want to connect, and stay in control of that access.
API integration, with authorization controlled by Google.
GBPPromote does not ask customers to hand over Google credentials. The business owner or authorized manager signs in with Google and explicitly grants the permissions required for the connected workflow.
Google’s Business Profile documentation requires applications using the Business Profile APIs to authorize requests with OAuth 2.0. Google also states that OAuth establishes that a partner platform can access or modify location data only with the business owner’s explicit consent, and that the owner can later revoke that access.
See exactly what happens when you connect Google.
These are real screens from the GBPPromote connection flow. Start by adding a business profile in GBPPromote, connect Google, authenticate directly with Google, and then review and approve the permissions Google displays.
Add Business Profile
Start inside GBPPromote by choosing to add a Google Business Profile.
Connect Google
Choose the Google connection option to begin the secure authorization flow.
Authenticate with Google
Sign in directly with Google using the account that is authorized to manage the profiles.
Review permissions
Google displays the requested permissions and you decide whether to grant access.

Add Business Profile
Start inside GBPPromote by choosing to add a Google Business Profile.

Connect Google Business Profile
Choose the Google connection option to start Google’s secure authorization flow.

Authenticate directly with Google
Sign in through Google’s own authentication and OAuth flow. Your Google password is not entered into GBPPromote.

Review and approve permissions
Google shows the permissions requested by GBPPromote and you choose whether to authorize access.
Your Google account stays under your control.
Connecting GBPPromote authorizes the platform to perform supported Google Business Profile workflows on behalf of an authorized owner or manager. It does not transfer ownership of the Google account or the business profiles to GBPPromote.
Explicit consent
You decide whether to authorize the connection after Google displays the requested access.
Authorized profiles only
GBPPromote can work with profiles available to the Google account and selected for the platform workflow.
No password collection
Your Google password is entered with Google, not shared with GBPPromote.
Revocable connection
You can disconnect the integration and revoke third-party authorization through your Google Account.
Secure token handling
OAuth tokens and integration credentials are treated as sensitive secrets and are protected using platform security controls.
Policy-governed data use
Google API data is handled under GBPPromote’s Privacy Policy and Google’s API Services User Data Policy requirements.
Access is used for the functionality you request.
Depending on the features you use and the permissions granted by Google, GBPPromote may access or manage the business data needed to provide connected Google Business Profile workflows.
What we do not ask you to do
We do not ask you to send your Google password to our team or enter it into a GBPPromote form.
We do not require you to transfer ownership of your Google Business Profiles to GBPPromote.
Don’t just take our word for it.
Google publishes the technical rules for Business Profile API access and OAuth authorization. Enterprise IT or security teams can review Google’s documentation directly.
Google states that the Business Profile APIs are not open to all users and that access must be requested for a valid business use case and a Google Cloud project. API access is granted at the Cloud project level.
Source: Google Business Profile API FAQ and Business Profile API overview.
Need to review GBPPromote before connecting multiple locations?
We can provide documentation to support an enterprise security or vendor review, including information about Google authorization, privacy practices, data processing and platform security controls.
You can disconnect access.
If your organization stops using GBPPromote, you can disconnect the Google integration from the platform and revoke third-party access from your Google Account.
Revoke from Google
Google lets account holders review and remove third-party account access from their Google Account.
How Google API data is handled
GBPPromote’s Privacy Policy contains a dedicated Google API data and Limited Use section covering how information received through Google APIs is used, transferred and retained.
Google integration questions.
Is GBPPromote connected through Google’s official Business Profile APIs?
GBPPromote’s connected Google Business Profile functionality uses the Google Business Profile API ecosystem and Google OAuth authorization. Google’s own documentation for these APIs is linked above so customers and IT teams can review how the integration model works.
Does GBPPromote need my Google password?
No. Google authentication takes place through Google’s OAuth flow. Your Google password is not entered into GBPPromote.
Can GBPPromote access every Google Business Profile?
No. Access depends on the Google account used for authorization and the profiles or locations that account is permitted to manage. The customer remains responsible for ensuring the connecting user is an authorized owner or manager.
Can I remove GBPPromote’s access later?
Yes. You can disconnect the integration and revoke third-party account access through your Google Account permissions.
Does using Google’s APIs mean Google endorses GBPPromote?
No. API access and OAuth integration should not be interpreted as an endorsement, sponsorship or certification by Google. Google and Google Business Profile are trademarks of Google LLC.
Can our IT or procurement team review the integration before rollout?
Yes. Multi-location and enterprise customers can contact GBPPromote for integration, privacy, DPA and security-review information before connecting locations.
Want your IT team to review the connection before rollout?
We can walk through the Google authorization flow, permissions, location connection process and relevant security or privacy documentation with your team.
