Privacy Policy — Expert AI Auto Blogger & Google Business Profile Pro

Oct 30, 2026 · @Aftab

This Privacy Policy explains how Digital Knockers (“we”, “us”) handles information in connection with the Expert AI Auto Blogger WordPress plugin and its add-on Expert AI Auto Blogger — Google Business Profile Pro (together, the “Products”), including the Google account connection services we operate for them.

Effective date: 30 October 2026 · Last updated: 30 October 2026

1. Who we are and how the Products work

The Products are WordPress plugins published by Digital Knockers, Islamabad, Pakistan (website: https://digitalknockers.com). You can contact us at info@digitalknockers.com.

The Products are installed and run on your own WordPress website. Almost all data the Products work with — including data received from Google — is processed and stored on your website’s server and database, which you or your hosting provider control. We do not operate a central database of our customers’ Google data.

We receive a small amount of information directly only through three services described in this policy: license verification, plugin update checks, and the Google connection service that relays Google sign-in.

In this policy, “you” means the website owner or administrator who installs and uses the Products. If you use the Products on behalf of an organization or a client, you are responsible for having the right to connect their Google accounts and data.

2. Summary

• Your data stays on your website. Google Search Console and Google Business Profile data is stored only in your WordPress database.
• Google access is optional and under your control. It starts only after you read an in-product disclosure and click Connect, and you can disconnect at any time.
• Read-only for Search Console. Expert AI Auto Blogger can only read Search Console data; it cannot change anything in your Search Console account.
• Business Profile changes only on your action. The add-on creates posts, review replies or a description update only when you click Publish, Send or Apply, or when you explicitly turn on scheduled publishing.
• No selling, no advertising, no AI training. We never sell Google user data, use it for advertising, or use it to train AI models.
• AI processing only with your separate consent. Business information is sent to the AI provider you choose only after you agree, and only to generate content you request.

3. Information we process

3.1 Information we receive on our servers

Our web servers may also keep standard technical logs (IP address, time, requested URL) for security and abuse prevention.

3.2 Information stored on your own website

The Products store the following in your WordPress database. We cannot access it unless you give it to us, for example in a support request.

• Plugin settings, including API keys for the AI and other services you configure (encrypted at rest).
• Keywords, generated articles and images, publishing schedules, logs and usage statistics.
• Google connection data and synchronized Google data, as described in section 4.
• Google Business Profile posts, drafts, audit results, optimization tasks and publishing history created by the add-on.

The Products do not collect information about visitors to your website.

4. Google user data

This section describes exactly how the Products access, use, store and share data received from Google APIs.

4.1 Permissions (OAuth scopes) we request

The two connections are separate. You can connect one without the other, and each has its own disclosure and consent.

4.2 Google Search Console data (Expert AI Auto Blogger)

• Accessed: the list of your Search Console properties; for the property you select, search queries, clicks, impressions, click-through rate, average position and ranking pages.
• Used for: showing your search performance, keyword and content opportunities, and SEO recommendations inside your WordPress dashboard. The plugin cannot modify your Search Console account.
• Stored: an encrypted refresh token in your WordPress database; Search Console data is cached on your website for up to 24 hours.
• Shared: sent to your AI provider only if you separately agree, and only when you ask for an AI SEO plan (see section 6).

4.3 Google Business Profile data (Google Business Profile Pro add-on)

• Accessed: the Business Profile accounts and locations your Google user manages; for locations you select, business name, categories, address, service areas, phone number, website, description, opening hours, attributes, services, booking links, verification status, photo metadata (counts and categories, not the images), posts, and customer reviews and their replies.
• Used for: showing your profile information and audit results; recommending categories, services and content; creating Google Business posts; and drafting review replies — all inside your WordPress dashboard.
• Written to Google only on your action: a post is published only after you approve it and click Publish or schedule it; a review reply only after you click Send; the business description only after you click Apply and confirm. Automatic posting happens only if an administrator explicitly enables it for a location. The add-on never changes your business name, address or categories.
• Stored: an encrypted refresh token; normalized profile snapshots (by default the 10 most recent per location); audit results, tasks, drafts and the posts you create with their publishing history. Review text is cached temporarily for up to 6 hours and not stored permanently.
• Shared: sent to your AI provider only if you separately agree, and only when you ask for AI content (see section 6).

4.4 Our Google connection service

To let you connect without your own Google Cloud credentials, Google redirects you to our connection service during sign-in. It exchanges Google’s sign-in code for tokens and passes them to your website once, using a one-time code that expires after 5 minutes and works only for the website that started the connection. Tokens never appear in web addresses.

The service does not store your Search Console or Business Profile data. When your website needs a new short-lived access token, it asks the service, which obtains it from Google and returns it without keeping it. Advanced users can instead use their own Google OAuth client, in which case the service is not involved.

4.5 Limited Use

Expert AI Auto Blogger’s and Google Business Profile Pro’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

1. We use Google user data only to provide and improve the user-facing features described in this section, which are visible in the Products’ interface.
2. We transfer Google user data to others only as needed to provide those features (such as your chosen AI provider, with your consent), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
3. We do not use or transfer Google user data for serving advertisements, including retargeting, personalized or interest-based advertising.
4. We do not sell Google user data, and we do not use it to determine credit-worthiness or for lending purposes.
5. No human reads Google user data unless you give us explicit permission (for example, in a support request), it is necessary for security purposes such as investigating abuse, or it is required by law.
6. We do not use Google user data to develop, improve or train generalized or non-personalized AI or machine learning models.

5. How we use information

We use the information we receive only to:

• verify licenses and prevent license misuse;
• deliver updates and keep the Products compatible and secure;
• operate the Google connection service;
• respond to support requests;
• detect and prevent abuse, fraud and security incidents;
• meet legal and accounting obligations.

We do not use any information from the Products, including Google user data, for advertising, profiling or marketing to your customers. We may send you service messages about your license or important security updates.

6. AI providers and other services you configure

The Products generate content using an AI provider that you choose and configure with your own API key, such as Google Gemini, Anthropic Claude, OpenAI, Groq, OpenRouter or a custom endpoint. Requests go directly from your website to that provider under your account with them, and that provider’s own terms and privacy policy apply. We do not receive these requests or their results.

What is sent to the AI provider:

• Always (when you generate content): the keywords, topics and instructions you enter.
• Google Search Console data: only after you tick a separate consent box, and only when you ask for an AI SEO plan — a summary of queries and page performance.
• Google Business Profile data: only after you agree to a separate consent prompt, and only when you ask for AI content — your business name, categories, services, service areas, description, the facts you enter, and, for review replies or review analysis, the text of the relevant reviews.

The Products send this data only to obtain the content you requested; nothing is sent in the background. Please choose a provider whose terms do not allow your data to be used for training their models, or turn that option off in your provider account where available.

You may also optionally configure other services in Expert AI Auto Blogger, such as search results data, keyword data, plagiarism checking, image generation or image hosting providers. Requests to them are sent directly from your website with your API keys and are governed by their policies. Google user data is not sent to these services.

7. Sharing and disclosure

We do not sell, rent or trade personal information or Google user data. We share information only:

• with service providers that host and secure our license, update and connection servers, under confidentiality obligations and only to run those services;
• with the AI provider you choose, from your own website and only with your consent, as described in section 6;
• when required by law, such as a valid court order, or to protect the rights, safety and security of our users, us or others;
• in a business transfer, such as a merger or acquisition, in which case this policy and the Limited Use requirements continue to apply and we will notify you.

Google user data is never shared with data brokers, advertising platforms or information resellers.

8. Storage, security and retention

Security measures. Google refresh tokens and API keys are encrypted (AES-256) in your WordPress database. Short-lived access tokens are kept encrypted for at most about one hour and are never sent to the browser. Only WordPress users with the plugin’s management capability (administrators by default) can see Google data or connect accounts. All connections to Google and to our services use HTTPS. Logs are scrubbed of tokens and secrets before they are written. Our connection service keeps one-time codes only in access-restricted storage and deletes them on first use or after 5 minutes.

Retention.

Your website’s data is kept wherever your hosting provider stores it; their security and backup practices also apply.

9. Your choices and rights

Disconnect and revoke Google access

• Search Console: Expert Auto Blogger → Settings → SEO → Disconnect. This revokes access at Google and deletes the stored token and cached data.
• Business Profile: Expert Auto Blogger → Google Business → Connect Google → Disconnect. This revokes access at Google and deletes the token; tick “also delete synced data” to remove all synchronized Business Profile data for those locations.
• You can also remove access at any time at myaccount.google.com/permissions.

Export and delete

• Export your Search Console data, Google Business posts, tasks and audit results as CSV from the Products.
• Use WordPress’s built-in privacy tools (Tools → Export / Erase Personal Data) for data linked to an email address.
• Uninstall the Products with “delete data on uninstall” enabled to remove all their data from your website.
• To delete license or support records we hold, email info@digitalknockers.com.

Withdraw AI consent. Stop using AI features, or disconnect the Google account, at any time. No Google data is sent to an AI provider without a request from you.

Legal rights. Depending on where you live (for example under the GDPR, UK GDPR or California privacy laws), you may have the right to access, correct, delete, restrict or object to processing of your personal information, to data portability, and to complain to your data protection authority. For data stored on your website, you control it directly. For data we hold, contact us and we will respond within 30 days. We do not sell or “share” personal information as those terms are defined in California law.

10. Children

The Products are business software for website owners and are not directed to children under 16. We do not knowingly collect information from children.

11. International transfers

Our license, update and connection servers are located in the United States. If you use the Products from another country, the limited information described in section 3.1 is transferred there. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses. Data stored on your website stays wherever your hosting provider is located.

12. Changes to this policy

We will post any changes on this page and update the “Last updated” date. If we change how the Products use Google user data, the Products will show you an updated disclosure and ask for your consent again before that data is used in the new way.

13. Contact

Digital Knockers Islamabad, Pakistan Email: info@digitalknockers.com Website: https://digitalknockers.com