This Privacy Policy applies specifically to GP Automations, a private client reporting and marketing automation platform operated by George Papatheodorou. It explains what information the platform may process, including information obtained through Google APIs when an authorised user connects a Google account.
1. Who operates GP Automations
GP Automations is operated by George Papatheodorou, an independent digital marketing consultant based in Leigh-on-Sea, Essex, United Kingdom.
For questions about privacy or the use of personal information, contact: gpapatheodorou@gmail.com.
2. Information GP Automations may process
The exact information processed depends on which services an authorised user chooses to connect and which platform features are enabled.
- Client and account information required to provide access to the platform.
- Marketing performance and reporting information from authorised connected services.
- Lead information received from connected lead-generation platforms where configured.
- Platform activity, connection status, error information and operational logs.
- Authentication credentials or OAuth tokens required to maintain authorised service connections.
3. Google user data
GP Automations can connect to selected Google services using OAuth. Access occurs only after the Google account holder grants the requested permissions.
Google Search Console
The platform may access read-only Search Console information such as verified properties, search queries, landing pages, clicks, impressions, click-through rates and average search position.
Google Analytics
The platform may access read-only Google Analytics reporting information including properties, sessions, users, traffic sources, events and selected conversion activity.
Google Business Profile
Where this feature is enabled and separately authorised, the platform may access Google Business Profile information needed to provide local SEO reporting or related account functions.
Google OAuth credentials
OAuth access and refresh tokens may be stored so GP Automations can continue retrieving authorised data without asking the user to sign in each time a scheduled report or synchronisation runs.
GP Automations does not sell Google user data, use Google user data for advertising, or use it to create advertising profiles. Information received from Google APIs is used only to provide and maintain the user-facing reporting and account functions described in this policy.
GP Automations' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
4. How information is used
Information processed by GP Automations may be used to:
- Provide SEO, analytics and local search performance reporting.
- Maintain historical client performance records and dashboards.
- Process authorised marketing leads and notifications.
- Display work completed, reporting information and connected-service status.
- Maintain authentication with services that the account holder has authorised.
- Detect errors, troubleshoot failed connections and maintain the reliability of the platform.
- Protect the platform against unauthorised access or misuse.
5. Storage and security
GP Automations is hosted using Cloudflare infrastructure. Platform data is stored in services used to operate the application, including databases and file storage required for reporting and account functions.
Connected-service credentials are handled separately from ordinary reporting content and are stored in encrypted form where the platform needs to retain them.
Reasonable technical and organisational measures are used to restrict access to authorised users and reduce the risk of unauthorised access, alteration, disclosure or loss.
No internet-based system can be guaranteed to be completely secure. Security measures are reviewed and updated as the platform develops.
6. Sharing and disclosure
Personal information and Google user data are not sold.
Information may be processed by service providers that are necessary to host, secure or operate GP Automations. These providers are used only for the functions required to provide the platform.
Information may also be disclosed where this is required by law, necessary to protect legal rights, or needed to investigate fraud, security incidents or misuse.
7. Data retention and account disconnection
Reporting data may be retained where it is needed to provide historical client reporting, maintain the client account or meet legitimate business, legal and security requirements.
An authorised user can revoke Google's access to GP Automations through their Google Account. Once access has been revoked, the relevant OAuth token can no longer be used to retrieve new Google account data.
Requests to remove account information or stored reporting data can be sent to gpapatheodorou@gmail.com. Deletion requests will be handled subject to any legal, security or legitimate record-keeping requirements that apply.
8. Your data protection rights
Depending on the circumstances and applicable UK data protection law, you may have rights relating to your personal information, including access, correction, deletion, restriction, objection and data portability.
You may also have the right to complain to the UK Information Commissioner's Office if you believe your personal information has not been handled appropriately.
9. Changes to this Privacy Policy
This policy may be updated when GP Automations changes, when new connected services are introduced, or when legal or platform requirements change.
The current version will always be published on this page together with the date it was last updated.
10. Contact
Questions about GP Automations, Google user data or this Privacy Policy can be sent directly to:
George Papatheodorou
Leigh-on-Sea, Essex, United Kingdom
gpapatheodorou@gmail.com