How GBP Worker handles information

GBP Worker is a private business tool for an authorized operator of Southgate Urgent Care, Adrian Urgent Care, and Prospect Ashtabula Urgent Care. This page describes the software’s configured handling of Google Business Profile information. It is separate from the clinics’ patient-information practices.

Google access and purpose

The operator authorizes Google Business Profile access to read the selected businesses’ public profile information, posts and review metadata, prepare eligible review replies and promotional updates, and publish enabled replies and posts. The Google authorization can be revoked from the authorizing Google account. Revocation stops future authorized API access; it does not automatically delete content already published on Google.

Review screening and drafting

The software checks original creation dates, ratings and whether a reply already exists before requesting eligible review details. It considers only unanswered 4–5-star reviews created on or after the operator’s saved October 12, 2026 cutoff. Review wording and public display names are processed transiently on the operator’s server. A local offline detector screens names, dates of birth and other recognizable identifiers before permitted redacted wording reaches a ChatGPT-signed-in Codex drafting process. Raw review wording, actual display names and reversible redaction maps are not intentionally supplied to that model process.

A suitable recognized public first name may be inserted locally into one neutral greeting slot. The model receives a name-availability indicator and the placeholder, rather than the actual name. The completed reply may therefore include that first name when it is published publicly on Google.

A separate automated reviewer checks exact proposals in a fresh context under the same Codex account before local publication preparation. It receives only the permitted screened feedback or verified public post evidence and proposed text, and cannot publish or restore names. Screening and model assessment are fallible. They do not guarantee removal of personal information, de-identification, a particular legal status, or healthcare compliance. The tool does not connect to medical records or use internal patient information.

Storage and security

Google authorization credentials and private workflow records are encrypted on the operator’s server. Exact completed reply drafts, including a locally inserted first name when used, remain in encrypted workflow storage. Original review bodies, raw display names, and reversible redaction maps are not retained as a review library. Private review-routing references and related metadata expire within seven days; permanent one-way exclusion guards and source-free attempt history help prevent duplicate replies. Completed workflow records do not have an automatic age-based deletion policy.

Each writing and independent review step uses a fresh ephemeral Codex session under the operator’s existing main account, with temporary memory-backed working files. It does not resume the designated control chat or save the conversation as a normal resumable chat. Source-free completion records remain local and can be inspected from that chat on request; scheduled jobs do not start extra reporting conversations. Bounded prompts, scoped inputs, validated drafts and review verdicts remain as private audit evidence inside the project after each process exits; review-model audit artifacts are encrypted locally. These artifacts include screened wording and name placeholders, not intentionally supplied raw reviews or actual names. Public post text, clinic logos, publication receipts and source-free operational logs are also retained within the project. Audit records have no automatic age-based deletion policy. Ephemeral local execution does not control external provider retention. Google and ChatGPT process information according to their own account settings, terms and privacy practices.

Published content and other providers

Approved or enabled Google API writes send the completed business reply or promotional update to Google, where it may become public. Redacted review wording and public business information may be sent to ChatGPT for drafting. This software includes no advertising, sale-of-data, or medical-record integration functions. No separate OpenAI API key is used.

These public information pages

These pages provide information only. They contain no account sign-in, administration interface, submission form, analytics script, or tracking cookie. The web server processes requests and keeps operational access and error logs, which may include an IP address, requested path, time and response status. The configured access log omits URL query strings, referrers and browser identifiers. Logs are rotated locally and are not part of the review-drafting input.

Questions and control

The authorized operator can pause scheduling, revoke the tool’s local workflow permissions, revoke Google authorization, and manage retained local files. For questions, contact the business through its official website. Do not send medical details through this tool’s public information pages.

About GBP Worker