Privacy Policy
Who this covers
Bella Baciata HQ (“BB HQ”) is the internal operations application used by Bella Baciata staff at hq.bellabaciata.com.au. It is not a public product and is not offered to other businesses. This policy explains what BB HQ collects, why, and how it is stored.
Staff account data
BB HQ stores the name, work email address and role of each staff member who is granted access, along with the operational records they create: rosters and clock-ins, production and stock counts, cash-ups, invoices, catering enquiries and marketing activity. Access is restricted by role, and each staff member sees only the locations they are assigned to.
Google account data
Where a manager connects a Google account, BB HQ requests only the scopes it needs and uses the resulting data solely for the operational purpose described here:
https://www.googleapis.com/auth/business.manage— reads the Business Profile locations Bella Baciata owns so a manager can map one profile to one BB HQ location, reads the reviews for that mapped location, and publishes or updates a reply to a review when a manager explicitly presses Publish. BB HQ never posts a reply automatically.https://www.googleapis.com/auth/calendar.readonlyandcalendar.events— reads the shop calendars a manager selects so today's bookings appear in BB HQ, and writes events a manager creates in BB HQ.https://www.googleapis.com/auth/gmail.readonlyandgmail.compose— reads Square Online catering enquiry emails delivered to the connected mailbox and saves reply drafts to that mailbox. BB HQ does not send email from the connected Google account.openidandemail— used only to label which Google account is connected, so a manager can tell whether the right account is authorised.
Google access and refresh tokens are held server-side in Supabase Vault and are never returned to the browser or stored in application code. Disconnecting a Google account in Settings → Integrations deletes the stored tokens for that connection.
Limited use of Google user data
BB HQ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained from Google APIs is used only to provide and improve the operational features described above. It is never sold, never used for advertising, and never transferred to anyone except the service providers listed below acting on Bella Baciata's behalf.
AI-drafted review replies
When a manager presses Draft with AI on a Google review, BB HQ sends the review's star rating, the reviewer's display name as shown publicly on Google, the review text and any existing reply to OpenAI to generate a suggested reply. The suggestion is returned to BB HQ for the manager to edit or discard. Nothing is published to Google unless a manager with reply permission explicitly publishes it.
Service providers
BB HQ relies on a small number of processors, each handling data only to run the application: Supabase (database, authentication and secret storage), Vercel (application hosting), OpenAI (drafting review replies and other assistant features), Resend (sending invoices), and the integrations a manager chooses to connect, currently Google, Square, Xero, Instagram and Deputy.
Retention and deletion
Operational records are retained for as long as Bella Baciata needs them for business and tax purposes. Google data is retained only while the relevant connection is active: disconnecting removes the stored tokens, and removing a location's mapping stops any further review sync for that location. To request deletion of a staff account or of data held about you, contact us at the address below.
Security
Access to BB HQ requires an authorised email address. Data is held in a managed Supabase project with row-level security so that staff can reach only the locations and records their role permits. Credentials and tokens are stored as server-side secrets, never in browser code.
Contact
Questions about this policy, or requests about your data, can be sent to admin@bellabaciata.com.au.