What Google Business Profile APIs actually allow

If a tool “scrapes” Google reviews or drives an unofficial browser session, you are taking on access risk you cannot see. reviewsGBP does not do that.

What you grant

You sign in with Google and grant the Business Profile scopes needed to list locations, read reviews, and post replies. Tokens are stored so sync and posting can run without you sitting in a tab. You can disconnect a location from the dashboard; that stops sync and posting for that listing until you reconnect.

Who owns the listing

You remain the Business Profile owner (or manager). Replies post as the business, the same as if you typed them in Google’s own UI. You are responsible for the text — including AI drafts you approve or auto-send.

APIs change

Google can change APIs, quotas, and policies. We keep the integration on official endpoints and will ask you to reconnect if a token expires or a grant is revoked. If Google rejects a reply, the product surfaces that as a failed post, not a silent success.

For the legal side of data and posting, see the Privacy Policy and Terms of Service. This post is how the connection works in the product, not a substitute for Google’s own terms.