Security

We take the security of your business and Google account data seriously. This page summarizes how we protect it. For full detail on what we collect and how it’s used, see our Privacy Policy.

Data protection

• Data is encrypted in transit (TLS) and at rest.
• We request the minimum Google permission needed — the Business Profile scope required to read reviews and post the replies you approve.
• Access tokens are stored securely and used only to perform actions you authorize.
• Access to production systems follows least-privilege principles.

Your Google account

We never ask for or store your Google password. You connect Taarvo using Google’s official OAuth flow, and you can revoke our access at any time from your Google Account permissions. We do not sell your data, use it for advertising, or use Google user data to train generalized AI models.

Responsible disclosure

If you believe you’ve found a security vulnerability, please email security@taarvo.com. We appreciate responsible disclosure and will work with you to resolve valid issues promptly.