Google Business Profile API Compliance
Our commitment to maintaining full compliance with Google Business Profile API policies and standards
Content
Our Commitment to Google's Standards
TrueStars is fully committed to maintaining compliance with Google Business Profile API policies. We've built our platform to work with Google's systems, not against them, ensuring authentic customer experiences and protecting business integrity.
How We Ensure Compliance
1. User Consent First
Google Requirement:
All automated actions require prior, specific, and express user consent.
Our Implementation:
- 🔒No automatic redirects — customers must actively consent before accessing Google Reviews
- 📱Clear consent interface — customers see exactly what they're agreeing to
- ⏰Timestamped consent — we log when consent was given (without storing personal data)
- 🚫Withdrawal option — customers can change their mind at any time
2. Authentic Reviews Only
Google Requirement:
Prohibit fake content creation and manipulation.
Our Implementation:
- 👥Real customers only — NFC cards are given only to genuine visitors
- 🚫No automated posting — we never write reviews for customers
- 🔍Staff verification — restaurant staff confirm customer authenticity
- 📊No rating incentives — we don't encourage specific star ratings
3. Independent Business Authentication
Google Requirement:
Each business must use their own Google credentials.
Our Implementation:
- 🔑Individual Google accounts — each restaurant connects their own Google Business Profile
- 🚫No shared API keys — we don't use our credentials for client businesses
- 🔐Secure OAuth integration — proper authentication through Google's official channels
- 📋Account verification — we verify ownership before service activation
4. Transparent Data Handling
Google Requirement:
No interference with Google's monitoring and maintain cache limits.
Our Implementation:
- 📤Direct redirects — customers go straight to Google's platform
- 🚫No content caching — we don't store or cache review content
- 👀Full transparency — Google can monitor all our API interactions
- 📊Audit trail — complete logs available for compliance verification
What We DON'T Do
Prohibited Activities We Actively Prevent:
- ❌Create fake reviews or automated content
- ❌Cache review data beyond Google's 30-day limit
- ❌Share API credentials between different businesses
- ❌Modify or hide Google branding and attribution
- ❌Interfere with Google's monitoring systems
- ❌Automatically revert changes made by Google
- ❌Encourage specific ratings or incentivize reviews
Transparency Report
Monthly Compliance Metrics:
- Consent Rate: 94.2% of NFC interactions include explicit user consent
- Authentication: 100% of partner restaurants use independent Google accounts
- Response Time: Average 2.3 seconds from consent to Google Reviews page
- Audit Compliance: Zero violations in last 12 months
Our Process:
- 1. Customer visits restaurant → genuine service experience
- 2. Staff offers NFC card → only to satisfied customers
- 3. Customer taps card → redirected to consent page
- 4. Customer gives consent → directed to Google Reviews
- 5. Customer writes review → authentic feedback on Google's platform
Third-Party Responsibilities
For Restaurant Partners:
- ✅Verify customer authenticity before offering NFC cards
- ✅Maintain Google Business Profile ownership
- ✅Inform customers about the review process
- ✅Report any suspicious activity to TrueStars immediately
For Customers:
- ✅Provide honest feedback based on genuine experience
- ✅Understand consent before proceeding to Google Reviews
- ✅Report inappropriate usage if you encounter it
Technical Compliance
API Integration Standards:
- OAuth 2.0 Authentication: Each business maintains independent access
- Rate Limiting: We respect Google's API quotas and limitations
- Error Handling: Proper handling of API responses and failures
- Security: Encrypted communications and secure credential storage
Data Minimization:
- No personal data storage beyond necessary service delivery
- Consent timestamps only — no customer personal information
- Automatic data purging after service completion
- GDPR compliance for EU customers
Compliance Support
Report Compliance Issues:
For Businesses:
- • Pre-integration compliance review
- • Ongoing monitoring and reporting
- • Staff training on Google policies
- • Regular compliance updates
For Customers:
- • Easy consent withdrawal process
- • Direct contact for concerns
- • Transparent complaint resolution
- • Integration with Google's own support
Regular Updates
Policy Review Schedule:
- Monthly: Technical compliance verification
- Quarterly: Policy alignment with Google updates
- Annually: Comprehensive audit and documentation update
Change Notification:
- Partners receive 48-hour advance notice of policy changes
- Material changes require re-consent from affected users
- All updates logged and documented for audit purposes
Compliance Statement
TrueStars.ai operates in full compliance with Google Business Profile API policies as of June 2025. We are committed to maintaining these standards and continuously improving our compliance measures. Any concerns about our compliance can be reported directly to our compliance team or to Google through their official channels.
This page demonstrates our commitment to working within Google's ecosystem responsibly and ethically. For technical questions about our implementation, please contact our development team atsa@truestars.ai