Privacy Policy
Last updated: September 26, 2026
This policy explains what information BzadPro ("we", "us") collects, how we use it, and the choices you have. It covers our website, our merchant services work, and the software we use to manage Google Business Profile listings on behalf of clients.
Who we are
BzadPro is a merchant services agency. We place businesses with payment processing through CardConnect and manage Google Business Profile listings for client businesses. Our clients are businesses, not consumers.
Information we collect
- Client business information — business name, address, phone, hours, categories, services, photos and similar listing content, provided by the client or already present on their Google Business Profile.
- Client contact information — names, email addresses and phone numbers of the people we work with at each client.
- Merchant account information — information required to open and service a payment processing account, handled under CardConnect's own terms.
- Google account data — described in the section below.
We do not collect personal information from visitors to this website beyond what a standard web server records, and we do not use advertising or tracking cookies here.
Google user data
Our internal tooling requests the Google OAuth scope
https://www.googleapis.com/auth/business.manage
and uses the Google Business Profile APIs.
What this access allows. With a client's authorization, we read and update the Google Business Profile listings that client has given us permission to manage: business information and hours, photos and media, posts, services, and replies to customer reviews.
How we use it. Solely to perform the listing management work the client has engaged us to do. Specifically:
- Read listing data so we know the current state before proposing a change.
- Apply changes the client has approved.
- Draft and, once approved, publish posts and review replies.
- Keep local working records of what was changed, when, and who approved it.
What we do not do. We do not sell Google user data. We do not transfer it to third parties except as described under "Sharing" below. We do not use it for advertising, profiling, or training machine learning models. We do not access listings a client has not authorized us to manage.
Where it is stored. Access credentials and working records are held on systems we control, restricted to the staff who do this work. Data from one client is kept separate from every other client's.
Retention and deletion. We keep client listing records for as long as we are engaged by that client, and for a reasonable period afterwards for our own business records. A client can revoke our access at any time from their Google Business Profile settings or at myaccount.google.com/permissions. On request we will delete the working records we hold for that client.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Sharing
We share information only where it is necessary to deliver the service:
- With Google, when applying changes a client has approved to that client's own listing.
- With CardConnect / Fiserv, for merchant account setup and servicing.
- Where required by law.
We do not sell information to anyone, and we do not share one client's information with another client.
Security
Access to client data and to Google credentials is limited to the people who need it for the work. Credentials are stored separately from working files and are never shared with clients or third parties.
Your choices
- Revoke our access to your Google Business Profile at any time — see the link above.
- Ask us what information we hold about your business.
- Ask us to correct or delete it.
Changes to this policy
If we change this policy we will update the date at the top of this page.
Contact
Questions about this policy, or about data we hold: privacy@bzadpro.com