Call or Text: 321-246-9150
How the Catalyst Reviews integration connects to Google Business Profiles, uses available review information, and protects access to the connected account.
Catalyst Reviews accesses an authorized business's Google Business Profile information to display customer reviews on that business's website. The connection uses Google OAuth, not a Google password given to Catalyst. Administrators can disconnect it, and operational review data is kept only temporarily.
Catalyst Reviews is a website integration developed by Catalyst Web Co, based in Brevard County, Florida. This policy covers the Google Business Profile connection and review-display functionality of that integration.
It is not a general privacy policy for every Catalyst Web Co website or for Google itself. The business website displaying reviews may have its own privacy policy covering ordinary website visits, forms, analytics, cookies, hosting, and other services.
When a Business Profile owner or manager explicitly authorizes the connection, Catalyst Reviews may access the following information through Google's Business Profile APIs:
The integration does not ask users to disclose their Google password. Its requested business.manage permission covers Business Profile management capabilities, but the current review integration uses it to identify authorized locations and read reviews; it does not publish, modify, reply to, or delete Google reviews.
Google Business Profile information is used to verify the selected business, retrieve and update a limited selection of recent reviews, display associated information on the business's website, and show authorized administrators whether synchronization is working.
Selected review information, including reviewer names, comments, ratings, dates, and available image references, may be visible to any visitor of the business website where the carousel is enabled. This display is the core purpose of the integration.
The integration does not use connected Google data to read Gmail, access unrelated Google services, target advertisements, build independent marketing profiles, or train artificial intelligence models.
The current integration runs on the authorized business's WordPress website. Connection credentials and the temporary API review snapshot are stored in the site's WordPress environment. OAuth tokens and API review-cache content are protected using encryption tied to that installation, and administrative controls limit who can configure or disconnect the integration.
Data is transferred using HTTPS. Google account passwords are not collected or stored by the integration. Review photo references generally remain URLs provided through Google rather than copies of original image files.
No internet-connected system can guarantee absolute security. The business website and its hosting provider remain responsible for WordPress security, administrative access, appropriate backups, and related hosting practices.
The current integration maintains a rolling selection of up to 20 active review records for display. Its temporary Google API review snapshot is configured to expire within 29 days of retrieval; new successful synchronizations replace previous snapshots, and expired API content is withdrawn rather than displayed indefinitely.
Limited connection settings and operational timestamps may be retained while the integration is active. When an administrator disconnects Google, the plugin clears locally stored Google access tokens and its API review cache and attempts to revoke the authorization with Google. If remote revocation cannot be confirmed, the authorized account holder should remove the connection through Google Account security settings.
Website backups, including those managed by the site's hosting provider, may follow separate retention schedules. Website operators must configure backups so stored Google API content is not retained beyond applicable limits. Disconnecting this integration does not delete reviews from Google's own service or remove copies already lawfully published elsewhere.
The integration communicates with Google for authorization and authorized Business Profile data retrieval. Relevant data is processed within the connected website's WordPress and hosting environment, and review information chosen for the carousel is displayed publicly on that business's website.
Website hosting, caching, security, and content-delivery providers may process data as necessary to operate the website. Catalyst Web Co does not sell Google account or Business Profile API data and does not share it with unrelated third parties for advertising or AI-model training.
Use and transfer of information received from Google APIs is intended to comply with the Google API Services User Data Policy, including its Limited Use requirements, together with applicable Business Profile API policies.
Access begins only when an authorized account holder signs in with Google and grants the requested permission. The business's WordPress administrator can disconnect the integration through its settings. The Google account holder can also review and revoke the app's authorization through Google Account connections.
To request assistance with connection removal, personal information contained in a displayed review, or a question about this integration, contact ignite@catalystwebco.com. Requests concerning the original Google review itself may also need to be addressed through Google or the business listing where it was posted.
This policy may be updated when the integration's features, data practices, or legal requirements change. Material changes will be reflected on this page with a revised effective date. The application homepage and Google's OAuth consent configuration will continue to link to the current policy.
Catalyst Web Co
Brevard County, Florida, United States
Email: ignite@catalystwebco.com
Website: catalystwebco.com
Catalyst Reviews is an independent integration developed by Catalyst Web Co and is not affiliated with or endorsed by Google.