Privacy Policy

1. Who we are

Cafe-saas ("we", "our", "us") is a cafe and restaurant management platform built for independent cafe owners in India. This policy explains what data we collect, why we collect it, and how cafe owners can control it — especially data accessed through your connected Google Business Profile account.

2. Data we collect from Google Business Profile

When you choose to connect your Google Business Profile to Cafe-saas, we request access via Google OAuth 2.0 to the following:

• Your Business Profile account and location information (business name, location ID)
• Customer reviews associated with your connected location(s), including review text, star rating, reviewer display name, and review timestamp
• Replies you post to reviews through the Cafe-saas dashboard, which we submit to Google on your behalf

We only request the business.manage scope, which is the minimum scope required to read and respond to reviews on your behalf. We do not request access to your personal Gmail, Google Drive, or any other Google product.

3. How we use this data

We use Google Business Profile data only to:

• Display your reviews inside your Cafe-saas dashboard in one unified inbox
• Send you a WhatsApp alert when a new review falls below your configured star-rating threshold
• Publish review responses you write inside Cafe-saas back to your Google Business Profile, at your explicit request
• Generate basic sentiment summaries to help you prioritize which reviews to respond to first

We do not sell, rent, or share your Google Business Profile data with advertisers or unrelated third parties. We do not use this data to train general-purpose machine learning models.

4. Data storage and security

OAuth access and refresh tokens are stored securely and used only to make authenticated requests to Google's Business Profile API on your behalf. Tokens are never exposed to your browser in plain text and are not shared with other cafe accounts on Cafe-saas. You can disconnect your Google Business Profile at any time from your dashboard, which removes our ability to access your review data going forward.

5. Other data we collect

In addition to Google Business Profile data, Cafe-saas collects information you provide directly: cafe name, owner name, phone number, city, menu and order data, staff records, and loyalty program activity. This data is used solely to operate the features of the Cafe-saas platform for your cafe.

6. Your rights

You may request a copy of your data, request deletion of your account and associated data, or disconnect your Google Business Profile integration at any time by contacting us or using the controls in your dashboard. Disconnecting Google access revokes Cafe-saas's ability to read or post reviews on your behalf going forward.

7. Google API Services compliance

Cafe-saas's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Contact

Questions about this policy or your data can be sent through the contact form on our homepage, or via WhatsApp once you are an active Cafe-saas customer.