CrabAI
The AI operations assistant for restaurants and local businesses
Built and operated by Open Media INC., CrabAI is an AI assistant for restaurants and other local businesses. Merchants connect authorized business accounts to handle reviews, posts and advertising. Google Ads reports appear in the workspace and can be used by the assistant for analysis or proposals you request; changes require your confirmation.
Is your store run by the Open Media team? Sign in to the team workspace.
What CrabAI does
- Answers questions about your stores using authorized account data, including Google Ads reports when you ask or enable a scoped read task.
- Shows your Google Business Profile reviews and drafts replies. A reply is posted only after you confirm it — or, if you turn on auto-reply for a store, its 4- and 5-star reviews that raise no complaint or question get a reply automatically, at most 10 a day.
- Writes and schedules posts for Google Business Profile, Instagram, Facebook and TikTok. Nothing is published until you confirm it.
- Reads authorized Google Ads resources and performance, prepares requested analyses and proposals, and submits advertising changes only after you review and confirm each proposal.
Who can use it
Any owner or manager of a restaurant or local business can create an account on this site. Restaurants that work with Open Media can also have an account set up for them by our team.
CrabAI never asks for your Google password: connecting a Google account always happens on Google's own sign-in screen. We never ask for passwords or verification codes by email, text message or phone. If someone claiming to be us asks for those, it is not us.
How CrabAI uses your Google data
Connecting a Google account is your choice. When CrabAI asks Google for access, Google shows its own consent screen naming CrabAI and listing what CrabAI is asking for. Each connection requests the permissions for that service described below. Drive also requests OpenID and email to identify the Google account you connect.
Google Business Profile
https://www.googleapis.com/auth/business.manage
- What we access: the name and ID of your Business Profile account, the business locations your Google account manages (name, address and basic listing details), their customer reviews and replies, and the replies and posts published through CrabAI.
- What it is for: showing your reviews in CrabAI, drafting replies, and publishing the replies and posts you confirm (or that an auto-reply setting you turned on allows).
Google Ads
https://www.googleapis.com/auth/adwords
- What we access: the connected Google account email and authorized advertising account identifiers; selected campaign/ad-group settings, budgets, bids, ads, assets, targeting and conversion settings; requested performance fields and dates. Account-management and billing reads also require the appropriate role and Google permissions.
- What it is for: reports, requested AI analysis and plans, and preparing or submitting the changes you individually review and confirm. The assistant can read and prepare; it cannot confirm or execute a change itself. An analysis or accepted plan does not itself change an advertising campaign.
Google Ads offers the adwords permission, shown as full account-management access. CrabAI uses it within your authorized account and role, with a separate preview and confirmation for every change.
Google Drive — authorized photos and videos
https://www.googleapis.com/auth/drive.file
- What we access: the connected Google account identity, plus metadata and thumbnails of photos and videos already shared with this app. We read and copy originals when you select them for import or content creation; we do not access files outside the grant or automatically sync, modify or delete Drive originals. Your connection is bound to the selected store; reconnecting for another store replaces your previous Drive authorization in CrabAI.
- What it is for: previewing, downloading and selecting your imported copies for posts. Selected photos are sent to OpenAI when you request AI captions or start an automatic posting plan. Importing alone does not publish. Disconnecting Drive leaves existing copies and schedules intact; delete copies through the library recycle bin.
Google Analytics — read-only reports
https://www.googleapis.com/auth/analytics.readonly
Shows aggregate reports for the website you select and lets the assistant analyze them when you ask. Disconnecting removes credentials and website bindings, not existing conversations.
Gmail — optional outreach mailbox
gmail.send · gmail.readonly
A separate authorization requests gmail.send and gmail.readonly. Send messages you individually preview and confirm, check uncertain delivery and import verified replies from those outreach threads. We store encrypted credentials and store-shared message history. Disconnect removes saved credentials and cancels prepared/queued messages, but preserves history with no automatic expiry; Google-side revocation is separate. The mailbox integration does not send message content to AI models. See the privacy and deletion pages for the store-owned records that remain after personal account deletion.
We do not sell Google user data or provide it to data brokers or information resellers, and we do not use it to develop, improve or train AI models. Data from Gmail, Drive, Analytics or Business Profile, including derived data, is not used to profile people, build advertising audiences, or target or retarget advertising, and is not transferred to advertising platforms for those purposes. OpenAI processes the data needed for features you request or enable, including review replies, selected Analytics reports, Drive photo captions and authorized Google Ads analysis/proposals. Ads changes send the settings and content you provide and confirm to Google for your own campaigns; the model cannot approve those changes or receive OAuth credentials.
CrabAI's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting and revoking access
In CrabAI, open Channels & integrations (渠道与集成) → Social accounts (社媒账号), choose ⋯ next to the account, then Disconnect (解绑账号). You can also remove CrabAI's access at any time from your Google Account: myaccount.google.com/permissions
For Drive, use Disconnect on its connection card. This deletes our stored Drive credentials without revoking other Google services or deleting imported copies. You can separately revoke the app in your Google Account settings; other services using the same Google project may also disconnect.
What we store, for how long, which service providers process it and how to delete it are in section 4 of our Privacy Policy.
Other data CrabAI handles
- Your account: your sign-in email address. Passwords are stored only as a salted hash, never in plain text.
- Conversations: your messages and the assistant's replies, kept so your history is there when you come back.
- Store data: orders, menus and posts from the store systems and other accounts you have connected (Google data is covered above), shown only to people with access to that store.
- AI processing: to write a reply, the conversation and the data it needs are sent to OpenAI, whose models power the assistant. We do not sell your data or share it with advertisers.
Contact
CrabAI is built and operated by Open Media INC. (openmediaads.com). For help, or to have your data deleted, contact us: info@openmediaads.com · +1 217-318-6661