Approval before publishing
A draft is never a public reply. A person chooses to send each one.
Human control is part of the security model.
OpsHub keeps review access, AI assistance and public publishing as separate, visible decisions.
Scoped source access
Setup explains what OpsHub needs from Google Play and your mailbox before you connect.
Uncertain cases stay visible
Sensitive or low-confidence messages move to Needs human.
Traceable outcomes
Sent replies, edits and queue outcomes remain reviewable in Done.
Google Play connection
Explain access before asking for it.
Setup distinguishes reading reviews from publishing approved replies, and validates the package and permissions before anything is imported.
Requested accessGoogle Play
Read app reviewsImport review text, rating, language, app version and device.
Publish approved repliesSubmit only the replies you explicitly send in OpsHub.
Read store listingUse the app name, icon and description to set up the app.
How it’s built today
- Credentials
- Service account keys, mailbox passwords and AI keys are stored on the server and never returned to the browser after saving. They are encrypted at rest (AES-256-GCM) when the server is configured with an encryption key.
- Sessions
- Sign-in uses HttpOnly, SameSite cookies. Changing or resetting a password signs out every session, and you can sign out other devices from your account settings.
- Requests
- Changes sent from other websites are rejected, and sign-in, signup and connection tests are rate limited.
- Roles
- Only owners and admins can change apps, sources, AI settings and categories. Billing changes need the workspace owner.
OpsHub is in preview.
We haven’t completed an independent security audit or certification. Data retention, subprocessors and incident procedures will be published before general availability. Questions: support@appopshub.com