GBP Autopilot Extension Privacy Policy
Last updated: September 3, 2026
GBP Autopilot is a browser extension that fills and, when you choose, submits Google Business Profile forms (review reports, appeals, and reinstatement appeals) using case data you prepared in your GMB Helper or GBP Defender dashboard, and can check the status of the reinstatement appeals you submitted. This policy describes exactly what data the extension touches.
Where the extension runs
- Your dashboard: app.gmbhelper.ai and app.gbpdefender.com. It does not run on any other dashboard domain.
- Google's Business Profile help pages under support.google.com/business, where the report, appeal, and reinstatement forms and the appeal status page live.
- Three pages on www.google.com: the standalone review report form (www.google.com/local/content/rap), Google Search (www.google.com/search) and the reviews manager (www.google.com/local/business). On Search and the reviews manager it acts only inside a tab it opened itself for a report you started; on any Search tab you opened it does nothing.
What the extension stores on your device
- Case data you explicitly hand to it from your dashboard: business name, address, Profile ID, contact email, your appeal statement, and copies of the evidence files you chose to load.
- One setting: which dashboard you use, so the popup can open it.
All of this lives in your browser's local extension storage on your device. Removing a case in the extension popup, or uninstalling the extension, deletes it.
What the extension sends, and where
- To Google's own forms: the case data above, typed into the form fields on the Google pages listed above, the same way you would type it. Submissions happen only after a visible countdown you can cancel, or by your own click.
- To your own dashboard: when the extension does not recognize a screen, it sends a structured summary of that screen's form fields and buttons to your dashboard's server, which decides the single next step. Appeal status results are reported to your dashboard the same way. These requests use your existing dashboard login and go only to app.gmbhelper.ai or app.gbpdefender.com, whichever you use. Our servers use OpenAI as a processing provider for the next-step decision.
What the extension never does
- It does not read your email, browsing history, or any site other than the dashboard and Google pages listed above.
- It does not collect analytics, use tracking pixels, or run any third-party code.
- It does not sell, rent, or share your data with anyone. Data is used solely to provide the features described here.
- It does not act on a Google page you are looking at without you pressing Run, and it never opens or reads a Google page in the background.
Permissions, in plain words
- Storage: keep your loaded case and settings on your device, including evidence files, which can be large.
- Scripting: when the extension is installed or updated, reconnect it to dashboard tabs you already had open, so you do not have to reload them. Used on the two dashboard domains only.
- Access to app.gmbhelper.ai and app.gbpdefender.com: receive case data from your dashboard and send it next-step requests with your login.
- Access to support.google.com/business and the three www.google.com pages above: fill and read the Google Business Profile forms.
The extension asks for no optional permissions and cannot be extended to other sites from its popup.
Data retention and deletion
The extension keeps at most your ten most recent case handoffs, on your device only. Screen summaries sent to your dashboard are processed to produce the next step and are subject to the dashboard privacy policy of the service you use. To delete extension data, remove cases in the popup or uninstall the extension.
Contact
Questions about this policy: support@gmbhelper.ai.