Separate grants
Signing in does not grant Calendar, Drive, Ads, or Business Profile access. Asteri does not offer a Gmail mailbox integration.
Encrypted tokens
OAuth access and refresh tokens are encrypted at rest and transmitted over TLS.
Organization controls
Google data is isolated to the connected Asteri organization and its authorized users.
Google Sign-In
openidemailprofile- Data accessed
- Your Google account identifier, name, email address, and profile image when you choose Google Sign-In.
- How Asteri uses it
- Create or sign in to your Asteri account and display your account identity. Sign-In credentials are kept separate from service-integration credentials.
- Disconnection and retention
- Your Asteri account identity remains until the account is deleted. You can unlink Google Sign-In through your Google Account permissions.
Google Calendar
calendar.eventscalendar.calendarlist.readonlyuserinfo.email- Data accessed
- The connected account email, calendar list, and event data including titles, descriptions, locations, attendees, organizers, availability, and start/end times.
- How Asteri uses it
- Let an authorized user select calendars, create or update events for Asteri work, avoid scheduling conflicts, synchronize busy time, turn an upcoming event into an Asteri job when the user chooses, and remove Asteri-created events when the user chooses that behavior.
- Disconnection and retention
- Disconnecting removes the OAuth connection and Asteri calendar mappings and stops future synchronization. It does not delete unrelated events from Google Calendar.
Google Drive
drive.file- Data accessed
- Only files and folders that the user creates with Asteri or explicitly opens or selects for use with Asteri, together with their names, types, sizes, links, and modification times.
- How Asteri uses it
- Browse authorized files, create folders, upload and download files, obtain user-requested links, and delete a selected Drive item when the user directs Asteri to do so. If an owner or administrator turns on automatic backup, Asteri copies new job photos, videos, and documents into an “Asteri” folder, or a folder they choose, in Drive.
- Disconnection and retention
- Asteri stores the encrypted OAuth connection. File bytes may pass through Asteri only to complete the requested transfer. Disconnecting deletes the stored connection and stops automatic backup. It does not delete files from Google Drive, including backup copies Asteri already made.
Google Business Profile
business.manageuserinfo.email- Data accessed
- Business accounts and locations, public listing details, reviews and reviewer display information, owner responses, posts, verification state, and performance metrics.
- How Asteri uses it
- Manage connected business locations, display and respond to reviews, publish business content, and report location performance to the authorized organization. When a user asks for an AI-drafted reply, or turns on automatic AI replies, the review text, star rating, reviewer display name, and business name are sent to an AI model provider only to write that reply.
- Disconnection and retention
- Disconnecting immediately deletes the encrypted OAuth tokens and Asteri-cached Business Profile locations, reviews, posts, performance data, and related review-request history.
Google Ads and Data Manager
adwordsdatamanageruserinfo.email- Data accessed
- The connected account email; accessible Google Ads customer accounts; and campaign, ad-group, keyword, spend, performance, and conversion-action information.
- How Asteri uses it
- Import marketing performance, connect leads and revenue to campaigns, configure and verify conversion actions, and upload the conversion or event data an authorized user sets up. The datamanager permission is requested only when reconnecting an eligible Google Ads connection that already sends conversions through Data Manager.
- Disconnection and retention
- Disconnecting deletes stored OAuth tokens and connection configuration and stops future imports and uploads. Asteri also removes its access from the Google Account, unless another Asteri connection, such as Google Calendar, uses the same Google account, because Google would end that connection too. Previously imported campaign and conversion records may remain as organization business records until account deletion or a verified deletion request.
Your controls
- Connect or disconnect each service from Asteri’s Apps or Settings pages. Disconnecting deletes the tokens Asteri stored.
- Revoke Asteri directly from your Google Account connections.
- Request access, export, correction, or deletion by emailing privacy@getasteri.com.
Asteri does not sell Google user data, use Google Workspace data for advertising, or transfer Google user data to advertising platforms, and does not use Google user data to train AI models.
Asteri's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.