Privacy policy

Who we are

A2 Listings is operated by A2 Analytics. It helps multi-location businesses keep their Google Business Profiles accurate, respond to reviews, publish posts and track local search rankings. Access is by invitation only, for A2 staff and the clients we work with.

Google data we access

When a client connects Google, we request the Business Profile scope (business.manage). With it we read and update, on the client’s behalf:

• Business details: name, address, phone, website, hours, holiday hours, categories and description.
• Reviews, and the replies the client approves.
• Posts the client creates or approves.
• Profile performance numbers, such as calls, website clicks and direction requests.

We do not access Gmail, Drive, Calendar, contacts or any other Google data.

How we use it

Google data is used only to show it to the client and their A2 team, and to make the changes they ask for. We never sell it, use it for advertising, or share it with anyone outside the client’s workspace except the service providers below, and only as needed to run the features the client uses.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Other information

• Account details for invited users: name, email and a hashed password.
• Customer names, phone numbers and emails that a client uploads to send review requests. Customers can opt out at any time.
• Public search results and public listing data, gathered to measure rankings and listing accuracy.

Service providers

• Railway, which hosts the application and database.
• Anthropic (Claude), which drafts review replies and posts. Drafts are reviewed by a person before anything is published.
• DataForSEO, which provides public search and listing data.
• Twilio and Resend, which deliver review request texts and emails.

Security and retention

Google access tokens are encrypted at rest, and all traffic uses HTTPS. A client can disconnect Google at any time from the app’s settings or from their Google Account permissions page, and we stop accessing their data immediately. When a client leaves, we delete their workspace data within 30 days of their request.

Contact

Questions or deletion requests: listings@a2analytics.ai.