Effective date: November 4, 2026.

This notice provides general information about our privacy practices and is not legal advice. Google Business Profile and Google Search Console account connections are planned, not active. Their descriptions below explain intended features and safeguards, not processing that has already begun.

1. Who we are and what this policy covers

The James Group, LLC, a United States company, operates GEO Authority at geo.jamesgrp.com. In this policy, “we,” “us,” and “our” mean The James Group, LLC. This policy covers our website, inquiries, business and website assessments, AI-assisted features, account portals, and related services. It also describes planned Google connections separately from services currently available.

For privacy questions or requests, contact info@jamesgrp.com or call (855) 852-6374. Information collected independently by Google, payment providers, or other third parties is also subject to their own privacy policies.

2. Information we collect and how we use it

• Inquiries and business information: names, email addresses, phone numbers, company names, website URLs, industry or location details, and messages you submit. We use this information to respond, prepare assessments, arrange consultations, and provide requested services.
• Accounts and service records: account identifiers, contact details, authentication information, roles, service requests, assigned work, correspondence, and related business records. We use these to authenticate users, administer access, manage customer relationships, and deliver services.
• Assessment and AI inputs: submitted website addresses, relevant website content, business details, prompts, and conversation context. We use these to analyze websites and generate requested assessments, content, or responses.
• Payments and subscriptions: payment and customer identifiers, amounts, transaction status, purchased services, and subscription information needed for billing, support, and accounting. Stripe processes payments under its own terms and privacy policy.
• Technical information: hosting and service providers may process IP addresses, request paths, browser or device information, timestamps, errors, and other operational data to deliver, maintain, and protect the website.

Business assessment pages and published content can be publicly accessible and may include business information and generated findings. Do not submit confidential information for material intended for publication. Information from business sources or connected business systems may also be used to administer leads and services, subject to applicable permissions and law.

3. Google Business Profile information — planned feature

We do not currently offer a Google Business Profile account connection or collect Business Profile OAuth tokens through this application. Our planned feature would let a business owner or authorized manager connect a Google account through Google OAuth, select an available business account and location, and display that location’s rating, review count, and reviews.

The intended data includes business account and location identifiers and names, rating information, and review information such as the reviewer’s display name, profile-photo URL, star rating, review text, and review date. If enabled, publicly displayed reviews would include appropriate Google attribution and links, and visitors could see this reviewer information. Google-hosted photos or links may contact Google services when loaded or opened.

The planned purpose is to read and display authorized business and review information, not to edit profiles or post responses. Google’s business.manage permission may be required for these APIs even though our intended feature is read-only. Before activation, the actual permission request and in-product disclosures must identify the data and actions being authorized. A broader permission capability does not itself mean we will perform profile changes.

4. Google Search Console information — planned feature

We do not currently connect users’ Google Search Console accounts or retrieve their private Search Console reports. Our planned connection would allow a verified owner or authorized user to select an accessible website property and request search-performance reporting for that property.

Intended information includes property URLs and access information, reporting dates, search queries, pages or URLs, clicks, impressions, click-through rates, average search positions, and available country, device, or search-type dimensions. This information would be used to present authorized website-performance reports and support requested SEO, AEO, and GEO analysis, not for advertising profiles.

The intended access is read-only, using webmasters.readonly where sufficient. Ownership or property verification in Google Search Console is separate from giving this application OAuth permission. We will not describe property management, sitemap changes, indexing requests, or broader access as part of this read-only feature unless those capabilities are separately introduced, disclosed, and authorized.

5. Google authorization, storage, and deletion — planned controls

Viewing this website does not connect your Google account. No Business Profile or Search Console OAuth authorization, refresh token, or selected-account settings are currently stored by these planned features.

Before enabling either connection, we will implement an explicit Google consent flow and disclose the final scopes, stored fields, retention periods, and deletion process. The intended safeguards include encrypted-at-rest refresh-token storage, restricted server-side access, temporary handling of short-lived access tokens, and controls that do not expose tokens to visitors. These are launch requirements, not claims that an OAuth storage system is already operating.

Our intended connection lifecycle is to keep authorization and selected account or property settings only while the connection is active and needed for the requested service. The planned disconnect process must revoke authorization where supported, remove saved tokens and connection settings, and address retained copies of connected Google data. Any necessary legal retention or backup limitations must be disclosed before collection begins. We do not currently promise a fixed deletion deadline for a connection that has not launched.

A Google account owner can manage or revoke third-party access through Google Account connections. Revoking permission prevents further authorized access but does not, by itself, erase copies a service has already retained. For assistance or deletion requests concerning information held by The James Group, LLC, email info@jamesgrp.com.

6. Google API Services User Data Policy and Limited Use

For any Google account connections we enable, GEO Authority’s use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. These commitments cover raw Google data and information aggregated, anonymized, or derived from it.

• We will request only the access needed for disclosed, prominent, user-facing features and use connected Google data only for those authorized features.
• We will not sell connected Google data, use it for personalized or interest-based advertising, build advertising profiles, transfer it to data brokers, or use it for credit or lending decisions.
• We will not use connected Google data to train generalized AI or machine-learning models. Our existing AI features do not currently receive data from the planned Google account connections.
• Transfers will be limited to providing or improving the authorized user-facing feature with the user’s consent, security purposes, applicable legal obligations, or a business transfer after obtaining explicit prior user consent where required by Google’s policy.
• Human access will be limited to the user’s affirmative agreement to view specific information, necessary security or legal purposes, or permitted aggregated internal operations consistent with Google’s policy and applicable law.

Employees, contractors, and service providers handling connected Google data must follow these limits. A new data category or materially different use must be disclosed, and any required new consent obtained, before that access or use begins. Google processes information under Google’s Privacy Policy.

7. Other Google review sources — planned feature

This application does not currently retrieve Google Places reviews as an alternative to an owner-authorized connection. If that feature is introduced, it may request public business ratings and a limited, relevance-selected set of reviews through Google Places using application API credentials. Such results are not necessarily a complete set of a business’s Google reviews.

The intended purpose would be to display business and review information with required attribution and Google listing links. Visitors would not need to sign in to Google simply to view those public reviews. Any caching, database storage, refresh schedule, or deletion practice must be established and disclosed before launch; we do not claim that an unimplemented feature never stores review content.

8. Website analytics

The application does not currently implement a dedicated first-party page-and-click analytics database or Google Analytics tracking integration. Hosting providers may nevertheless process traffic, request, and operational information to run the service and provide operational reporting.

We do not currently apply a universal 90-day automatic deletion schedule to website or service data. We also do not represent that raw IP addresses are excluded from all hosting logs or provider records. If we introduce additional analytics, advertising pixels, or session recording, we will disclose the provider, data, purpose, retention, and any applicable consent or opt-out controls before use.

9. Third-party services, cookies, and technical data

• Hosting, database, and file storage: Replit and supporting infrastructure providers process website requests, stored business and account records, uploaded files, operational logs, and related technical information needed to operate and secure the platform.
• AI services: Google Gemini and, for applicable configured features, OpenAI may receive prompts, relevant conversation context, business or website details, and content needed to generate requested responses, assessments, text, or images. Provider terms and settings govern their processing. Do not include passwords, payment-card details, or unnecessary sensitive personal information in AI inputs.
• Payments: Stripe processes payment information and returns billing, customer, subscription, and transaction identifiers or status used to administer purchased services. See Stripe’s Privacy Policy.
• Connected business systems: Authorized business or account-management services, including configured PanelX synchronization, may receive account identifiers, contact information, authentication credentials needed for account synchronization, or business records needed to provide connected services. This is separate from the planned Google OAuth features.
• External content and communications: Opening third-party links, loading external media or images, or using an external contact, email, or scheduling service may send that provider technical information and information you choose to provide. Google, video or social services, and other linked providers apply their own policies.

Account sign-in uses session cookies for authentication and security. Browser session storage is also used to hold requested assessment results or report links during a browsing session. We do not currently use this storage to assign an analytics visitor identifier. Blocking or deleting essential cookies or storage may sign you out or affect these features.

Application and infrastructure logs may include request information and limited API response details for operations and troubleshooting. We do not treat all operational logs as anonymous analytics. Other than the authorized purposes described here, we may disclose information when required by law, to protect rights and security, or in connection with a business reorganization subject to applicable safeguards. The stricter Google Limited Use rules above apply to any future connected Google data.

10. Storage, retention, and security

Inquiry, account, assessment, service, billing, and support records are retained as needed for the purpose for which they were collected, account or service administration, security, resolving disputes, and applicable legal or accounting obligations. Retention is not governed by a blanket 90-day limit. Contact us to request deletion or information about records associated with you; required records, limited security information, or backup copies may need to be retained for legitimate or legal purposes.

Our public site uses HTTPS, account passwords in the application database are stored as hashes, and protected administrative functions require authorized access. We use access restrictions and other reasonable safeguards appropriate to the service, but no transmission or storage method is completely secure. This policy does not claim that every system or record has an independently verified encryption-at-rest configuration.

Service providers may process information in the United States or other countries where they operate. Applicable law and provider arrangements govern any required international-transfer safeguards.

11. Contact and choices

You can choose not to submit an inquiry, use an AI feature, or authorize a future Google connection. Ordinary public pages do not require a Google account connection. You can manage cookies and browser storage through your browser and manage Google authorizations through your Google Account.

This application does not currently implement an automatic analytics opt-out based on Do Not Track or Global Privacy Control signals. We do not claim that these browser signals automatically stop infrastructure logging or delete existing records. You can contact us directly about applicable privacy rights or requests instead.

Depending on your location and applicable law, you may have rights to request access, correction, deletion, or a copy of personal information, object to or restrict certain processing, or withdraw consent where processing depends on it. Withdrawal does not undo prior lawful processing. We may need to verify your identity or authority, and certain requests are subject to legal exceptions. We will respond in accordance with applicable law; this policy does not limit mandatory privacy rights.

Send requests to info@jamesgrp.com with enough information to identify the account or request, but do not email passwords, payment-card details, or OAuth tokens. Google and other providers offer their own controls for information they hold independently.

12. Children’s information

GEO Authority is intended for business use, not for children under 13. If you believe a child has provided personal information through our services, contact us so we can investigate and address the information as required by applicable law.

13. Policy changes and Google feature activation

We will update this page when our practices change and show the current update date. Material changes and new uses requiring consent will receive the notice or consent required by applicable law and Google policy. Before activating Google Business Profile or Search Console connections, we must align this notice, the actual implementation, in-product disclosures, and the Google OAuth consent-screen configuration. Publishing this notice does not mean Google has verified or approved the application.

14. Contact The James Group, LLC

Legal operator: The James Group, LLC, United States.
Platform: GEO Authority.
Website: https://geo.jamesgrp.com.
Privacy email: info@jamesgrp.com.
Phone: (855) 852-6374.