Permissions & account control

When you connect your Google Business Profile, Google asks you to grant YupUp:

• Manage your business listings (business.manage) — this is Google's single permission for Business Profile access; Google does not offer a read-only version.
• Your email address and basic profile — so we know which Google account is connected.

What we actually do with that access today: read your business locations, profile information, and reviews so your dashboard can show them and our team can prepare recommendations.

• Nothing is published to your Google Business Profile automatically. Today, YupUp does not post to Google on your behalf at all — review replies are drafted for you to review and use.
• Campaigns, content and advertising changes are recommended to you first; nothing goes live without your approval.
• We never change your account credentials, billing, or ownership settings.
• We don't currently request access to your Meta (Facebook/Instagram) accounts. If that changes, this page will say so before you're asked to connect anything.

• Google issues YupUp a token — we never see or store your Google password.
• Tokens are stored server-side, are never shared with third parties, and are used only to sync your business data.
• Your customers' information is used to run your programs (rewards, booking) and is never sold.

• Instantly revoke YupUp's access yourself at myaccount.google.com/connections — this works immediately and doesn't require contacting us.
• Email support@yupup.ai and we'll also delete the stored connection on our side.
• Disconnecting never deletes anything on your Google Business Profile — it only removes YupUp's access.

To delete your account and associated data, email privacy@yupup.ai. Details on what we retain and for how long are in our Data Retention Policy and Privacy Policy.

Found a vulnerability or something that looks wrong? Email security@yupup.ai — it goes straight to the team. See our Security Policy for how we handle reports.