← Прочетете тази страница на български
Last updated: 18 September 2026. This policy explains what personal data Performix GBP Manager ("Performix", "we") collects through gbp.performix.bg and the Google Business Profile API, why, and how you can control it.
Lyubomir Yanchev Yankov, registered in Bulgaria (Company ID / EIK: 181555637 (БУЛСТАТ)), registered address: 4 Asenovgradsko Shose Str., 4000 Plovdiv, Bulgaria. Contact for privacy matters: privacy@performix.bg.
a) Account data you give us directly — email address, business name, business category, and any information you enter in the dashboard.
business.manage): your business account and location list; business profile information (name, category, address, hours); customer reviews (text, rating, reviewer name — only what Google already shows publicly); Business Profile Posts and Q&A entries; performance metrics Google exposes for the profile.We process your data to perform our contract with you (running the service you signed up for), based on your explicit consent given through the Google OAuth screen (for Google Business Profile data specifically), and based on our legitimate interest in keeping the service secure and improving it.
We do not sell your data and do not share it with third parties for their own marketing purposes. The sub-processors above (Anthropic, Google Cloud Vision/Gemini, DataForSEO, Local Falcon, Stripe, Resend, SMSAPI.bg) receive only the specific data needed to perform their function for us, under their own data protection terms. None of them receive your Google OAuth refresh token or direct access to your Google account.
Our database is hosted in the EU (Supabase/AWS, eu-west-1). Some sub-processors (e.g. Anthropic, Stripe) are based outside the EU/EEA; where that applies, transfers rely on their Standard Contractual Clauses or equivalent safeguards.
We keep your data for as long as your account is active. If you close your account or ask us to delete it, we permanently delete your account data, including the encrypted Google refresh token, within 30 days, except where we must keep records longer for accounting/tax law.
Your Google refresh token is encrypted at rest (AES-256-GCM) and never logged in plaintext. We never see or store your Google account password. All traffic is encrypted in transit (TLS).
You have the right to access, correct, delete, restrict, or port your data, and to object to processing based on legitimate interest. See the full GDPR rights page for how to exercise them. You can revoke Performix's access to your Google account at any time at myaccount.google.com/permissions.
We use exactly one strictly-necessary session cookie to keep you logged in, plus a matching CSRF-protection token. We do not use analytics, advertising, or tracking cookies of any kind.
Performix is a business tool and is not directed at, or intended for use by, anyone under 16.
If we make material changes, we will update the date above and, where required, notify active clients by email.
Questions about this policy or your data: privacy@performix.bg.
See also: Privacy Policy · Terms of Service · GDPR Rights