Connect your Google account with one-click OAuth (Business Profile API scope). Tokens are stored encrypted and refreshed automatically.

Settings → Google shows connection status, linked email/name, token health (cached), and connection errors. Revalidate token on demand. List all locations linked to the account with quick navigation. If the connection is revoked or invalid, the UI prompts to reconnect; on reconnection, previously inactive locations that still exist in Google can be auto-reactivated. Connection is required before adding locations or syncing reviews/insights.

Location discovery page lists all GBP locations available to the connected Google account; already-connected locations are marked. Add one or more locations from discovery; the app creates records and dispatches background jobs to fetch full details from the Google API. Location count is limited by plan (Starter 3, Growth 25, Pro 100). List locations in Settings → Google (and elsewhere) with business name, sync status, project assignment. Edit display name and/or assign to a project. Refresh triggers full re-sync (background job). Delete (soft or hard) or bulk delete. Fetch GBP categories for filters/display. Bulk assign multiple locations to a project. Locations can be assigned to at most one project. All Google API calls for locations run via background jobs.

Reusable text templates for replying to reviews; used manually or by auto-reply rules. List all templates with name, body preview, category, usage count (sorted by usage and name). Create template: name, body (max length), optional category; plan limit applies (Starter 5, Growth 25, Pro 100). Edit name, body, category. Delete template (not allowed if in use by an auto-reply rule). JSON endpoint for templates (e.g. dropdowns in review or auto-reply UI). Usage count tracks how often a template has been applied. Templates are account-scoped.

Pro plan and higher. Create and schedule Google Business Profile local posts (offers, updates, events). Paginated list with filters: location, status (scheduled / published / failed). Create post: choose location(s), content (title, body, optional media), schedule for date/time or publish now. Edit scheduled post content or time before publish. Delete post (scheduled or published); can trigger deletion on Google via job. Retry publish for failed posts. ProcessScheduledPosts runs periodically to publish due posts. Publishing and updates call Google Post API via background jobs. Feature gated by tier.

Projects group locations and optional reporting/sharing. Paginated list with search and optional 'include archived' filter. Create project (name; slug auto-generated). Project detail: name, slug, status, location count, last sync times, timezone list, members with project-level role. Edit name, slug, status (active/archived). Archive project (locations can remain linked). Assign project-level role (e.g. viewer, manager) to team members. Generate shareable link (URL + token) for read-only project dashboard; revoke to invalidate. Optional report footer (e.g. company disclaimer) on exported reports and shared dashboard. Configure weekly or monthly scheduled email reports (recipients, frequency); last sent time shown. Report preview (same content as sent). Upload/remove logo for white-label on shared dashboard and reports. Bulk assign locations to a project. Locations assigned to at most one project.

List all members: email, name, role (Owner / Manager / Viewer), status (active/suspended). Add member by email with role Manager or Viewer (Owner is typically the first/primary). Update account-level role. Suspend or reactivate member. Remove member (delete membership). Roles enforced via policies and RoleCapabilities. Project-level roles configured on project detail page. Team roles are Pro (tier-gated).

Notifications: per-account preferences (new review email, reply ready email, sync failure email); update saved to account settings and audit-logged; EmailThrottleService throttles outgoing emails.

Audit log: tenant-scoped list of entries (action type, user, target, timestamp, metadata); paginated; only users with viewAudit permission can see it.

User profile: edit name, email; optional profile photo (public disk); change email can reset verification; delete account (with optional account data) and confirmation.

Context & navigation: ResolveCurrentContext middleware sets current account (and optionally project); project switcher in header/sidebar; authenticated API to search projects for dropdown.

Webhooks: Google Pub/Sub endpoint for GBP review create/update (payload validated; SyncLocationReviews dispatched on webhooks queue); Razorpay webhook for subscription events. Endpoints return 200 OK on validation failure to avoid provider retries; errors logged.

Health: GET /health returns JSON (status, timestamp, services: database, Redis, Horizon); 200 if healthy, 503 if any critical service down.