Last updated: June 2026 · Effective: June 2026 · Sidekick LLC, Melrose, MA
Profile Sidekick is a notify-only Google Business Profile monitoring service — we read your profile to watch for changes and alert you, and we never write to it. This policy describes how we collect, use, store, and protect data — including Google user data accessed via OAuth 2.0 and the Google Business Profile API. We take your privacy seriously. We do not sell your data. We do not share your data with third parties except as required to provide the service.
Profile Sidekick is operated by Sidekick LLC, a Massachusetts single-member LLC. Our principal place of business is Melrose, Massachusetts. You can contact us at anthony@profilesidekick.com or through our website at profilesidekick.com.
We collect the minimum data necessary to provide the service.
Account data: Your name and email address, provided when you create an account.
Google user data (via OAuth 2.0): With your explicit authorization, we read the following data from the Google Business Profile API for the single location you choose to monitor:
getGoogleUpdated endpoint, used as a supplemental signal about whether a change originated with GoogleWe only read this data — we do not write to your profile. Profile Sidekick makes no posts, sends no review responses, answers no customer questions, and edits no fields on your Google Business Profile.
We do not access: Your Gmail, Google Drive, Google Photos, Google Calendar, personal Google account information, or any Google service other than Google Business Profile.
Payment data: Billing is handled entirely by Stripe. We do not store credit card numbers or payment credentials. We receive confirmation of successful payments from Stripe.
Usage data: We log monitoring activity — when checks run, what changes we detect, and what alerts we send you — for your activity history and our internal operations.
We use Google Business Profile data for the following specific, read-only purposes only:
locations.get) to read the monitored fields for the location you selectedlocations.getGoogleUpdated as a supplemental signal about whether Google itself made the change, but it is not how we detect changesWe do not use Google user data to write to your profile, for advertising, profiling, training machine learning models, or any purpose other than providing the Profile Sidekick monitoring service to you.
Limited Use. Profile Sidekick's use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Concretely, this means: we use Google Business Profile data only to provide and improve the user-facing monitoring features described above; we do not sell it; we do not transfer it to third parties except to provide those features, for security, to comply with applicable law, or as part of a merger or acquisition with your consent; we do not use it for advertising — including retargeting, personalized, or interest-based advertising — or to determine credit-worthiness or for lending; and we do not allow humans to read it except with your affirmative consent, where required for security or to comply with law, or when the data has been aggregated and anonymized for internal operations.
OAuth tokens: Your Google OAuth 2.0 access and refresh tokens are stored encrypted in Google Cloud Secret Manager. They are never stored in plaintext, never in environment variables, and never in application code.
Monitoring data: Your trusted baseline and monitoring history (the values we watch and the changes we detect) are stored in Google Cloud Firestore, a managed database service operated by Google Cloud. Data is stored in the United States (us-central1 region). Access is restricted to authenticated Profile Sidekick systems.
Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256, managed by Google Cloud).
Access controls: Only Profile Sidekick's automated systems and, where necessary for support, the company operator (Anthony, Sidekick LLC) can access your data. We do not employ third-party contractors who have access to your Google data.
We do not sell your data. We do not share your Google user data with third parties except:
Revoking Google access: You can revoke Profile Sidekick's access to your Google account at any time by visiting myaccount.google.com/permissions and removing Profile Sidekick. Revoking access immediately stops all monitoring of your profile.
Cancelling your account: You can cancel your Profile Sidekick account at any time from your dashboard or by emailing anthony@profilesidekick.com. There are no cancellation fees.
Data deletion: Upon cancellation, we will delete your stored Google data within 30 days. To request immediate deletion, email anthony@profilesidekick.com with the subject line "Data deletion request."
Data access: You may request a copy of the data Profile Sidekick holds about you by emailing anthony@profilesidekick.com. We will respond within 10 business days.
We retain your account data and monitoring history for as long as your account is active, to provide your activity history and monthly reports. Upon account cancellation, all Google user data — including your OAuth tokens and stored baseline — is deleted within 30 days. Anonymized, aggregated usage statistics may be retained indefinitely.
Our marketing website (profilesidekick.com) uses Google Analytics to understand aggregate traffic and improve the site, which sets Google Analytics cookies. Our application uses session cookies strictly necessary to maintain your login state. We do not use advertising cookies or cross-site tracking, and we do not sell or share this analytics data.
Profile Sidekick is a business tool intended for adults operating registered businesses. We do not knowingly collect data from individuals under 18 years of age.
We will notify you of material changes to this Privacy Policy by email at the address associated with your account, at least 14 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.
For any privacy questions, data requests, or concerns, contact:
Anthony
Sidekick LLC
Melrose, Massachusetts
anthony@profilesidekick.com