Lavender Grill Intelligence Privacy Policy

Application purpose

Lavender Grill Intelligence is an internal operations and management system for Lavender Grill. It supports authorized restaurant reporting and source-record preservation. It is not a customer ordering or public payment application.

Google Drive access

The application may access files explicitly authorized by the Google account Owner and files created by the application. Access is limited to approved Lavender operational workflows.

The intended Google OAuth scope is https://www.googleapis.com/auth/drive.file. This per-file scope does not grant general access to every file in the Owner’s Google Drive.

How authorized data is used

Authorized Google Drive information is used only to:

• Access approved TouchBistro source reports.
• Preserve authorized operational source files.
• Verify file identity and integrity.
• Support restaurant operational processing.
• Generate authorized internal management records.

Sharing and permitted use

Google user data is not sold, used for advertising, or shared with unrelated third parties. Access is limited to the authorized Lavender operational workflow and service providers supporting that workflow.

The application’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Security

The application is designed around least-privilege access: only the permissions and authorized files needed for approved workflows. Production credentials and tokens are intended to be stored securely using Google Cloud Secret Manager, not embedded in public source code.

This public information site does not provide access to operational records.

Retention and access revocation

Authorized operational source records may be retained as part of Lavender’s business records. Original source files are preserved for audit and reprocessing.

The Google account Owner can revoke application access through their Google Account connections and permissions settings. Revocation stops future access through that authorization; it does not automatically delete previously retained business records. Contact us with questions about retained information.

Public website

These static information pages have no login, forms, advertising, or analytics scripts. They do not set application cookies. The hosting provider processes technical request information needed to deliver and secure the website.

Privacy contact

For privacy enquiries about Lavender Grill Intelligence, contact Lavender Grill at hello@lavendergrill.com.