Transparency & Compliance

How Mapifyer Uses the Google Business Profile API

Last updated: April 2, 2026

Contact: support@mapifyer.com

1. Overview

Mapifyer is a Local Growth Infrastructure platform built specifically for marketing agencies that manage Google Business Profiles on behalf of multiple clients. It provides a single command center for overseeing every location an agency manages.

Agencies use Mapifyer to:

  • Manage multiple business locations from one dashboard
  • Monitor and respond to customer reviews at scale
  • Automate AI-assisted review responses with tone controls
  • Visualize local search ranking performance using geo-grid heatmaps
  • Track competitor visibility and keyword rankings
  • Generate white-label reports for business owners

To enable these capabilities, Mapifyer integrates with the Google Business Profile API. This page documents exactly how that integration works, what data is accessed, and how it is handled.

2. How Agencies Connect Their Google Account

Mapifyer connects to Google Business Profile data exclusively through Google’s official OAuth 2.0 authorization flow. No credentials are ever shared directly with Mapifyer.

The connection process works as follows:

  1. The user clicks “Connect Google Account” inside the Mapifyer dashboard.
  2. The user is redirected to Google’s secure OAuth consent screen, hosted entirely by Google.
  3. The user reviews the exact permissions being requested and explicitly grants or denies consent.
  4. Google issues an access token scoped only to what the user approved. Mapifyer never sees the user’s Google password.
  5. Mapifyer uses this token to access only the Google Business Profiles the user already owns or manages.

Users can disconnect their Google account at any time from the Mapifyer settings page or directly from their Google Account security settings.

3. What Data Mapifyer Accesses

Mapifyer requests only the minimum data necessary to deliver its core features. The following Google Business Profile data is accessed via the API:

Business Location Data

  • Business name, address, and phone number
  • Business categories and attributes
  • Opening hours and special hours
  • Website URL
  • Map pin coordinates

Reviews

  • Customer review text and star ratings
  • Review timestamps and reviewer display names
  • Existing review reply text

Account Information

  • Account name and account ID (to identify which locations belong to which account)

Mapifyer does not access Gmail, Google Drive, Google Calendar, Google Ads, Search Console, or any other Google product. Access is strictly limited to the Google Business Profile API scopes the user approves.

4. How Mapifyer Uses the Data

All Google Business Profile data accessed through the API is used exclusively to power Mapifyer’s features. Specifically:

Location Management

Business location data is displayed inside the Mapifyer dashboard so agency staff can view and manage all client locations in one place.

Review Management

Reviews are displayed in a unified inbox. Agency staff can read reviews, draft responses (including AI-assisted suggestions), and post replies back to Google Business Profile on the client’s behalf — with explicit user action required before any reply is published.

Ranking Visualization (Heatmaps)

Location coordinates and category data are used to run geo-grid ranking scans. These scans show how visible each business location is across a geographic grid for target keywords — helping agencies identify where rankings need improvement.

Reporting

Aggregated Business Profile data is used to generate white-label performance reports that agencies can share with their clients.

Mapifyer does NOT:

  • Sell or license Google Business Profile data to any third party
  • Use Google data to target advertising
  • Share data with any party other than the authorized account holder
  • Use data for any purpose beyond the features described above
  • Scrape or harvest data beyond what the API provides
  • Train AI or machine learning models on Google user data

5. Data Storage and Security

Mapifyer takes the security of Google Business Profile data seriously.

Storage

  • All data is stored in encrypted, access-controlled cloud databases
  • OAuth tokens are encrypted at rest and in transit
  • Data is logically isolated per account — one agency cannot access another’s data

Access Controls

  • Internal access to production data is restricted to authorized personnel only
  • Role-based access control limits what each team member can see within an agency account
  • All API communication uses HTTPS/TLS

Token Management

  • OAuth refresh tokens are stored encrypted and used only to maintain API access on behalf of the user
  • Tokens are immediately invalidated when a user disconnects their Google account

6. User Control and Revoking Access

Users retain full control over their Google Business Profile connection at all times.

Disconnecting from Mapifyer

Users can disconnect their Google account from Settings → Integrations → Google Business Profile inside the Mapifyer dashboard. Disconnecting immediately revokes Mapifyer’s access token and stops all API syncing.

Revoking via Google Account

Users can also revoke access directly from Google at myaccount.google.com/permissions. Revoking there will cause Mapifyer’s API requests to fail, and the platform will surface a prompt to the user to reconnect or remove the integration.

Data Deletion

Users can request full deletion of their Mapifyer account and all associated data, including any cached Google Business Profile data. See our Data Deletion Policy for details.

7. Compliance with Google Policies

Mapifyer is committed to full compliance with all applicable Google API policies and developer guidelines.

Google API Services User Data Policy

Mapifyer’s use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide and improve the features the user explicitly connects their account to use.

Google Business Profile API Terms

Mapifyer uses the Google Business Profile API in accordance with the Google Business Profile API guidelines and Google’s general Terms of Service for Google APIs.

Minimum Scope Usage

Mapifyer requests only the OAuth scopes required for its core product features. We do not request broad account access or permissions beyond what the product actively uses.

No Unauthorized Use

Mapifyer does not use the Google Business Profile API for web scraping, data aggregation for resale, competitive intelligence products sold to parties other than the connected account holder, or any other use prohibited by Google’s terms.

8. Contact Information

If you have questions about how Mapifyer integrates with the Google Business Profile API, please contact us:

Mapifyer Support

Email: support@mapifyer.com

Website: https://mapifyer.com

For privacy-related requests, including data access or deletion, see our Privacy Policy and Data Deletion Policy.