MakD.in’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This page is the detailed disclosure referred to in our privacy policy.
Permissions we request
| Scope | Feature | What we do with it |
|---|---|---|
openid, email, profile | Sign in with Google | Create or sign in to your MakD.in account. We store your Google account ID, name, email address and profile picture. |
https://www.googleapis.com/auth/business.manage | Google Business Profile publishing | List the business locations you manage, let you choose which to connect, and publish the posts you approve to them. We store the location ID and name and an encrypted access token. |
Each permission is requested only when you use the feature that needs it. Sign in with Google never asks for Business Profile access, and connecting a Business Profile does not change how you sign in.
Limited Use commitments
- Google user data is used only to provide the features above, which you see and control in the app.
- We do not sell Google user data and do not use it for advertising, credit-worthiness or lending.
- We do not transfer Google user data to anyone except as necessary to provide the feature (our hosting provider), to comply with the law, or as part of a merger with notice to you.
- No person at MakD.in reads Google user data unless you ask for support, we need to investigate abuse or a security issue, or the law requires it.
- Google user data is never used to train or improve AI models, ours or anyone else’s.
Storage and security
Google access and refresh tokens are encrypted at rest and used only by the publishing worker. Business Profile posts are sent through Google’s official API over HTTPS. Access is isolated per organisation and every connection, publish and disconnect is written to an audit log.
Retention
- Tokens are deleted the moment you disconnect the Business Profile or delete the organisation.
- Location name and ID are kept while the connection exists, then soft-deleted and purged after 30 days.
- Your Google sign-in link is removed when you delete your account.
How to revoke access
- In MakD.in: open Social accounts, choose the Google Business Profile and click Disconnect. Tokens are deleted immediately.
- In Google: open myaccount.google.com/permissions, select MakD.in and choose Remove access. Our stored token stops working and the account shows as disconnected on its next check.
Questions: privacy@makd.in. See also our terms of service and data deletion page.