Privacy Policy

Depending on how you use the service, we may collect:

• Order details, including ordered items, quantities, prices, payment status, and order history.
• Contact and fulfilment details, such as your name, phone number, email address, delivery address, and delivery tracking information.
• Payment method and payment-confirmation information. We do not collect or store payment-card numbers.
• Account and security information for authorized administrators.
• Basic technical information needed to operate and secure the service, such as request logs and device or browser information.

We use this information to accept and fulfil orders, communicate order status, manage delivery and payment records, provide administrative reporting, prevent misuse, troubleshoot problems, and maintain the security and reliability of Kitchen by Connect. We do not sell personal information or use it for targeted advertising.

Kitchen by Connect uses Google OAuth only when an authorized administrator connects a Google account for the Google Sheets export feature. The application requests Google Sheets and Google Drive permissions so it can create, locate, read, and update spreadsheets used for order exports in the administrator's configured Google Drive folder.

When an administrator starts an export, the application sends order records to the selected spreadsheet. Those records can include order date and number, customer name, phone number, delivery address, order amount, payment and bank-transfer status, delivery carrier, delivery status, and tracking number.

We use Google user data only to provide and maintain this administrator-requested export functionality. We do not use Google user data for advertising, profiling, credit decisions, or any unrelated purpose. We do not use Google Workspace API data to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.

OAuth credentials are stored in protected server configuration and are not exposed to customers or client-side code. Exported order records are stored in the Google Drive and Google Sheets account chosen by the administrator. We may also store the spreadsheet identifier so later exports can update the same spreadsheet.

Personal and Google user data is available only to authorized Kitchen by Connect administrators and service providers needed to operate the service, such as our cloud hosting provider and Google for the Sheets and Drive features. We do not sell Google user data, and we do not transfer it to third parties except to provide the requested service, comply with law, or protect users and the service.

We use access controls, encrypted HTTPS connections, restricted server credentials, and cloud-platform security controls designed to protect information against unauthorized access, alteration, disclosure, or loss. No method of transmission or storage is completely secure, but we review and limit access according to operational need.

We retain order and account information only as long as needed to operate the service, maintain business and transaction records, resolve disputes, and meet legal obligations. Administrators control exported spreadsheets in their Google Drive and may delete them there. When information is no longer required, we delete it or make it non-identifying where practical.

An administrator can revoke Kitchen by Connect's Google access at any time from their Google Account permissions page. Revoking access prevents future exports but does not automatically delete spreadsheets already created in Google Drive. Users may request access to, correction of, or deletion of their personal information by contacting the Kitchen by Connect administrator through whom their order was placed.

Kitchen by Connect is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that such information was provided, we will take appropriate steps to delete it.

We may update this policy when our services or data practices change. We will publish the revised policy here and update the effective date. Material changes to the use of Google user data will be disclosed before they take effect where required.