Privacy Policy
This policy explains how Assign Over, a sole proprietorship firm owned by Kamakshya Prasad Nayak, handles personal data across its automation tools. It applies to every tool published on this site. Section 5 covers the parts specific to GBP Automation.
1. Who we are
Assign Over (the "we", "us", "Data Fiduciary")
Sole proprietorship firm owned by Kamakshya Prasad Nayak
58/90, Gangotree Nagar, Sishupalgarh, Bhubaneswar, Odisha 751002, India
support@assignover.in
2. Whose data we handle
- Our clients — the businesses that connect an account or profile to one of our tools.
- Members of the public whose information already appears on a client's public profile — for example, someone who has left a public review. We read that information in order to draft responses and measure performance.
- Visitors to this site who contact us.
3. What we collect
3.1 From clients
- Business name, address, category, website and contact email
- The email address of the account used to authorise a connection
- Authorisation tokens that let a tool act on the account the client has connected
- Settings the client chooses, such as whether any automatic action is enabled
3.2 From site visitors
- Anything typed into a contact form or sent to us by email
- Standard web server logs — IP address, browser type, pages requested — kept for security and troubleshooting
3.3 What we never collect
We do not ask for, receive or store your account passwords. Authorisation happens on the provider's own sign-in screen. We do not collect payment card details through our tools.
4. Why we process it
We process personal data to deliver the tool a client has asked us to run: to read the account they connected, to produce reports and drafts, to publish what they approve, to email them results, and to keep the service secure and diagnosable. We act on the client's instruction and with their consent, given at the authorisation screen and withdrawable at any time (see section 8).
5. GBP Automation — Google user data
5.1 What we read from Google
Using the scope https://www.googleapis.com/auth/business.manage,
and only for profiles a client has connected, we read:
- Business information — name, categories, address, phone, website, hours, description, attributes, verification state
- Photos and media metadata
- Reviews, including reviewer display names, star ratings, review text, timestamps and any existing replies
- Local posts previously published to the profile
- Service items
- Profile performance metrics
We write back only two kinds of content, and only after a person has approved it: a reply to a review, and a local post.
5.2 Limited use disclosure
Assign Over's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In plain terms:
- We use Google data only to provide and improve the features described on the GBP Automation page.
- We do not sell Google data, and we do not use it for advertising.
- We do not transfer Google data to others except as needed to provide those features, to comply with law, or with the client's consent.
- No human at Assign Over reads a client's Google data except where the client asks us to, where it is necessary for security, or where the law requires it.
6. Who else processes the data
We use a small number of service providers. Each receives only what it needs.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Anthropic | Generates draft replies and draft post copy | Business name, category, city, website, review text and rating, service list, recent post summaries | United States |
| Neon | Hosts the database | All stored data described above | Singapore |
| Source of the profile data; also delivers our report emails | Approved replies and posts; report email contents | Global | |
| Cloudflare | Serves this website | Standard web request data | Global |
Some providers are located outside India, so data is transferred across borders. We rely on the contractual terms each provider offers. We do not transfer data to any country restricted by the Government of India under the Digital Personal Data Protection Act, 2023.
We do not sell personal data to anyone, in any circumstance.
7. How long we keep it
| Data | Retention |
|---|---|
| Content received from Google — review text, reviewer names, photo metadata, business information, performance metrics | No more than 30 calendar days, as required by the Google Business Profile API policies |
| Health scores, dimension breakdowns and recommendations we generate | For as long as the client uses the service, so trends can be shown |
| Draft and published replies and posts | For as long as the client uses the service, as a record of what was approved |
| Authorisation tokens | Until the client disconnects, then deleted |
| Contact form submissions | Up to 24 months |
| Server logs | Up to 90 days |
8. Your rights and choices
8.1 Disconnecting
A client can revoke our access at any time, without contacting us. For Google connections that is Google Account → Third-party apps & services. Access stops immediately.
8.2 Deletion
Email support@assignover.in and we will disconnect the account and delete the stored data within seven business days, then confirm in writing.
8.3 Rights under the Digital Personal Data Protection Act, 2023
If you are in India, you have the right to:
- Ask what personal data of yours we hold and how it is processed
- Ask us to correct or complete inaccurate data
- Ask us to erase your data, where we are not required to keep it
- Nominate another person to exercise these rights on your behalf
- Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied with our response
Write to support@assignover.in. We respond within 30 days.
8.4 If you left a review on a client's profile
Your review is public on Google, and Google is its controller. To edit or delete it, use Google directly. If you would like us to stop processing your review data in our tool, write to us and we will exclude it.
9. Security
- All connections to providers and to our database use encryption in transit (TLS).
- Authorisation tokens are stored encrypted and are never shown in the interface, in reports or in emails.
- Access to the production database is limited to the proprietor.
- Client credentials are never shared with other clients, and clients are never asked to share credentials with us.
No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as required under the Digital Personal Data Protection Act, 2023.
10. Grievance Officer
Kamakshya Prasad Nayak
Assign Over, 58/90, Gangotree Nagar, Sishupalgarh, Bhubaneswar, Odisha 751002, India
support@assignover.in
11. Children
Our tools are business tools and are not directed at children. We do not knowingly process the personal data of anyone under 18.
12. Changes to this policy
If we change this policy we will update the date above. Where a change materially affects how we handle client data, we will email connected clients before it takes effect.