Privacy policy

Draft: this document is under legal review and may change.

This policy explains how Wiser Page (the "Service"), operated by Elad Mahlev trading as Wise Rank, an Israeli sole proprietor ("Wise Rank", "we", "us"), accesses, uses, stores, shares and deletes information, and in particular data received from Google APIs when you connect your Google Business Profile.

Wiser Page is a website and CRM platform for small businesses; this is its Google sign-in and connection service. Wise Rank builds and hosts websites and a CRM for small businesses, and each client business has its own separate instance of that platform (the "Business's CRM"). Wiser Page lets the owner or manager of a business securely link that business's Google Business Profile to the Business's CRM.

1. Who this policy covers

• Business owners and managers who sign in with Google and connect a Google Business Profile ("you").
• People whose information appears in Business Profile data, such as reviewers whose public name, photo and review text are shown on a business's profile.

2. Google user data we access

When you click "Connect Google Business Profile", you are sent to Google's own sign-in and consent page. We request these permissions only:

Using that permission, and only for the location(s) you choose to connect, we access:

• Account and location list: the Business Profile accounts and locations your Google account can manage, so you can pick which one to connect.
• Business information: business name, categories, phone number, address, regular and special hours, description, service areas and website URL.
• Reviews: reviews of your business (including the reviewer's public display name and profile photo, rating, review text and date) and your replies.
• Media: photos and videos on your Business Profile.
• Posts: Google posts you create through the Service, and their status.
• Performance metrics: aggregated daily figures such as calls, direction requests, website clicks and profile views.

We do not access your Gmail, Drive, Contacts, Calendar or any other Google service, and we never see your Google password.

3. How we use Google user data

We use Google user data only to provide user-facing features to the business you connected:

1. Website sync: to pre-fill and keep the business's own website and structured data (e.g. LocalBusiness schema) consistent with its Business Profile.
2. Reviews: to display reviews on the business's own website, notify you of new reviews, and post replies that you write or approve. If you ask for an AI-suggested reply, the text of that review is sent to our AI service provider only to generate a draft for you (see section 5). No reply is ever published without your explicit approval.
3. Photos: to let you reuse your own Business Profile photos on your own website.
4. Posts: to publish Google posts that you write or approve.
5. Business details updates: to write changes to your Business Profile (e.g. special holiday hours) only when you make them in the dashboard.
6. Dashboard: to show performance metrics to you and to users you authorize in the Business's CRM.
7. Operation and security: to keep the connection working, prevent abuse, and fix errors.

We do not:

• sell Google user data, or transfer it to advertising platforms, data brokers or information resellers;
• use Google user data to serve advertising, including retargeting, personalized or interest-based ads;
• use Google user data to determine credit-worthiness or for lending purposes;
• use Google user data to develop, improve or train generalized artificial-intelligence or machine-learning models;
• use data from one business's profile for any other business.

4. Human access

Wise Rank staff do not read your Google user data unless (a) you give us permission for a specific support request, (b) it is necessary for security purposes such as investigating abuse or a bug, (c) it is required to comply with applicable law, or (d) the data is aggregated and used for internal operations in line with applicable privacy and legal requirements.

5. How we share data

We transfer Google user data only as follows:

• To the Business's CRM: the connected business's own CRM instance (hosted by Wise Rank) receives the encrypted access credentials and the data needed for the features above. It is not shared with any other client.
• Service providers (processors) that host or run the Service on our behalf under confidentiality and data-protection obligations: our web hosting provider (Hostinger), and, only when you request an AI-suggested reply, our AI model provider, which receives the review text under terms that prohibit using it to train its models.
• Public display you choose: reviews, photos and business details that you choose to show on your own public website become publicly visible there, just as they already are on Google.
• Legal and corporate: where required by law or legal process, to protect users' safety or security, or as part of a merger, acquisition or sale of assets, with notice to users.

6. Storage and security

• OAuth refresh tokens are encrypted at rest (AES-256) and are never shown in the browser. Encryption keys are kept in server configuration, separate from the database and the source code.
• All traffic uses HTTPS/TLS. Tokens are passed from Wiser Page to the Business's CRM over an encrypted, signed channel.
• Access to production systems is limited to authorized Wise Rank personnel.
• Data is hosted on servers of our hosting provider, which may be located outside Israel (e.g. in the EU or the USA).

7. Retention

• Access tokens are short-lived. Refresh tokens are kept only while your connection is active.
• Cached Business Profile data (business info, reviews, photos, metrics) is kept only as long as needed to provide the features and is refreshed regularly. Data removed from Google is removed from our cache at the next sync.
• When you disconnect, or when the Business's CRM account ends, we revoke the token with Google and delete stored Google user data within 30 days, except for what the law requires us to keep, and except for content you chose to publish on your own website (e.g. a review you displayed), which you can remove yourself.
• Encrypted backups are overwritten on a rolling cycle of up to [30] days.

8. Your choices: disconnect, revoke and delete

• Disconnect in the dashboard: in the Business's CRM go to Settings, Integrations, Google, then "Disconnect". This revokes our access with Google and starts deletion.
• Revoke from Google: at any time at myaccount.google.com/permissions, remove "Wiser Page".
• Request deletion or a copy: email info@wiserpage.com. We will respond within 30 days.

9. Israeli privacy law

We aim to handle personal data in line with the Israeli Protection of Privacy Law, 5741-1981, as amended (including Amendment 13, in force since August 2025), and the Protection of Privacy (Data Security) Regulations, 5777-2017. In practice this means: we collect only what the features need, use it only for the purposes stated here, keep it secure, limit who can access it, and honour your rights to review the information held about you and to ask for it to be corrected or deleted. For each client's own website and CRM, the client business is usually the party that decides why and how data is used, and Wise Rank processes the data on its behalf. Requests about a business's own customers should go to that business first. We will help them respond.

This policy is not a legal certification of compliance with any law.

10. Children

The Service is meant for business owners and managers and is not directed to children under 18.

11. Changes

If we change how we use Google user data, we will update this page and, where the change is material, notify connected users and ask for consent again before using the data in the new way.

12. Contact

Wise Rank (Elad Mahlev, sole proprietor), Israel
Email: info@wiserpage.com
Phone: +972-53-420-6774
Website: wise-rank.co.il · Service: wiserpage.com