← Back to Home

Google User Data & Limited Use Compliance

Last updated: August 16, 2026

1. Introduction

Next Technologies ("NextCall," "we," "us") provides an AI receptionist platform that answers calls, books appointments, and manages customer communication for business owners.

NextCall uses Google APIs only to provide features that business owners explicitly request and authorize through Google's OAuth consent screen. This page describes how Google user data is handled and how NextCall complies with Google's User Data Policy, including the Limited Use requirements.

2. How We Use Google Data

Google Calendar (calendar.events scope)

When a business owner connects their Google account, NextCall uses the calendar.events permission to create calendar events for appointments booked by the AI receptionist during a call. Events are only created after a caller books an appointment and only when an owner has an active Google Calendar connection.

  • NextCall only uses the calendar.events.insert API to create events in the owner's primary calendar.
  • NextCall does not read, list, update, or delete existing calendar events.
  • Each created event can contain: the appointment/customer name, the appointment start and end time, the business owner's company name as the event location, a short AI call summary, the customer's phone number, and a limited snippet of the call transcript.

Calendar data is used solely to record appointments booked through NextCall. NextCall does not read or analyze an owner's existing calendar or its contents.

Google Business Profile (business.manage scope)

Owners may connect their Google Business Profile to automate replies to customer reviews. When connected, once per day NextCall checks the connected Google Business Profile for customer reviews that have not yet been answered. For each such review, NextCall receives the review text and star rating and uses them to generate an AI-assisted response, which is then posted back to the owner's Google Business Profile. Review responses are generated by AI and published automatically to the connected Google Business Profile, without a separate manual approval step.

The business.manage permission is requested for the sole purpose of this review-response feature. NextCall does not use Business Profile data for any other purpose.

During connection, NextCall also requests userinfo.email so it can display which Google account is connected in the Settings page. No other Google account data is collected.

3. Third-Party AI Processing

To generate review responses, review text and ratings may be sent from Google to OpenAI, a third-party AI provider, through NextCall's servers. Review text is transmitted to OpenAI only for the purpose of generating the requested AI review response on behalf of the business owner. NextCall does not sell or share Google user data with any other third party, and does not use it for advertising, ad measurement, or ad targeting.

NextCall does not use Google user data to train, improve, or develop generalized AI/ML models. Review content is processed solely to produce the review response the owner asked for.

4. Limited Use Compliance

NextCall's use and transfer of information received from Google APIs complies with Google's User Data Policy, including the Limited Use requirements.

Specifically:

  • NextCall uses information received from Google APIs only to provide the features described in this statement, which the business owner explicitly authorizes.
  • NextCall does not sell Google user data.
  • NextCall does not use Google user data for advertising, including no advertising targeting, ad measurement, or retargeting.
  • NextCall does not transfer Google user data to third parties except the AI provider in the limited manner described above to provide the requested review-response feature.
  • NextCall does not use Google user data to train or improve generalized AI/ML models.

NextCall removes the stored Google connection credentials, including the refresh token, when the owner disconnects the Google integration, and review content is no longer processed through NextCall. Service data that does not originate from Google APIs, such as call records, is governed by our Privacy Policy.

5. Data Security

  • All Google OAuth exchanges and API calls happen server-side. Google access and refresh tokens are never sent to, or stored in, a web browser.
  • Google access tokens are only generated server-side, on demand, and are used only to make the Google API calls described above.
  • All communications with Google occur over encrypted HTTPS/TLS connections.
  • Owner access to the NextCall dashboard is protected by authentication.
  • The refresh token required to keep the Google integration connected is stored in NextCall's managed data store, on the server only.

6. User Control

Business owners can disconnect the Google integration at any time from Settings → Integrations in the NextCall dashboard.

Disconnecting removes the stored Google connection credentials (including the refresh token) from NextCall and stops both appointment calendar-event creation and automated review responses going forward. Disconnecting does noterase calendar events already created, responses already posted, or Google's own copy of the OAuth grant. To fully revoke NextCall's access to a Google account, an owner can visit Google's "Third-party apps & services" page in their Google Account and remove NextCall there.

7. Contact

If you have questions about how NextCall handles Google data, contact us at support@getnextcall.com, or use the contact form on the homepage.