Privacy Policy

This policy covers the Mahaservice website at mahaservice.com and the LocalBoost app that runs on it. Mahaservice is based in Aurangabad, Maharashtra, India. We do not sell personal information.

What we collect

• Google account details when you choose Continue with Google: your name, email address, Google account id, and profile picture. We store the name, email, and account id so you can sign in again. We do not keep a copy of the profile picture.
• Google Business Profile data when you connect a location, using the Google business.manage scope. That can include the location name, address, phone, website, hours, reviews, review replies, posts, and performance numbers you ask us to read or publish.
• Business details you type in (name, city, services, offers, photos, and brand colours) and files you upload, including customer lists with names and phone numbers.
• WhatsApp messaging data you send through the app: phone numbers, template names, message text, and delivery status returned by WhatsApp.
• Account data you create with email and password, and a session cookie that keeps you signed in.

How we use it

We use this data only to run the product you asked for: signing you in, showing your Google Business Profile, drafting and publishing posts and review replies, storing the customers you upload, and sending the WhatsApp messages you start. We do not use Google user data for advertising, and we do not sell it or share it for other companies to market to you.

Google API Services User Data Policy

Use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features of LocalBoost. We do not transfer it except to run those features (for example, sending a post back to Google, or a message you requested through WhatsApp), to comply with the law, or as part of a merger if you are told first. People do not read this data unless you ask us to, we need to for security, or the law requires it.

Storage

Account, business, customer-list, and message records are stored in the application database on the server that hosts mahaservice.com. Uploaded images used for posts are stored beside that database and served back to you and, when you publish, to Google as a public image URL. Session cookies are host-only, marked Secure on the live site, and use SameSite=Lax so Google can return you to the app after sign-in.

Deletion

Email technicalschool101@gmail.com from the address on the account, or call +91 97023 00780, and ask us to delete the account. We will delete the user, business, uploaded customer list, stored messages, and Google connection tokens we hold for that account, unless we must keep a record for a legal claim. You can also disconnect Google Business Profile in Settings, and you can remove Google's access from your Google Account permissions page.

Questions and deletion requests: technicalschool101@gmail.com or +91 97023 00780. Mahaservice, Aurangabad, Maharashtra, India.