PRIVACY POLICY

Your data. Your control.

A clear account of what we collect and why. Updated 14 November 2026.

Who looks after your information

Hospitality Tools is operated by Steven Dooley, ABN 26 491 881 967, under the Aussie AI brand. Contact steven017417@gmail.com.

What we collect

When you sign in with Google, Google and our account provider, Supabase, process your basic identity: your name, verified email address and profile information, which may include your Google profile picture. Supabase keeps your account identity and session records. We do not receive your Google password.

In your workspace, we store the name you provide, your sign-in email, venue names, timezones, reply preferences, optional venue photo thumbnails and changes you make to sample review replies. Venue photos are cropped into small JPEG thumbnails in your browser; we store the thumbnail, not the original file.

Our hosting and account providers process technical information such as IP addresses, browser and request details, sign-in events and security logs to deliver and protect the service. If you contact support, we receive your email and the information you include.

Why we use it

We use your information to identify your account, save and load your workspace, keep different customers' information separate, provide support and investigate faults or misuse. Your account can contain several venues; its settings and sample approvals belong to that signed-in account.

We do not sell personal information or use Google user data for advertising. Google sign-in does not give us access to your Gmail, Google Business Profile, reviews, invoices or payment details. Those tool connections are not enabled.

Limited AI drafting pilot

AI drafting is currently limited to the operator's test account before it opens to customers. When enabled for a pilot account, choosing Suggest a rewrite sends the venue name, reply tone, fictional sample review, current draft and requested change to OpenAI to produce a suggestion. We do not add your sign-in email, Google profile, venue photo or account identifier to that request. Use sample information only; do not put private customer information in drafts or instructions.

Suggestions are shown for you to accept or discard. They are not automatically saved, approved or published. Saving an accepted draft stores it in your workspace. We keep account usage counters to limit drafting attempts, not a separate prompt history. OpenAI API data is not used for model training by default. We request that responses are not saved as stored responses, but this does not mean zero retention: OpenAI may retain abuse-monitoring logs and temporary cached data under its API data controls. OpenAI processing may occur outside Australia.

Providers and storage

Cloudflare hosts the website. Supabase provides authentication and the workspace database; this database project is hosted in Sydney, Australia. Google handles Google sign-in. The site loads fonts from Google Fonts and its account software from jsDelivr, so those providers receive the connection information needed to deliver those resources. Support email is handled through Gmail.

Provider infrastructure, security and support operations may process information outside Australia. A Sydney database does not mean all processing stays in Australia. See Supabase's privacy policy, Cloudflare's privacy policy, Google's privacy policy and jsDelivr's privacy policy.

Access to workspace records is restricted to the signed-in owner through database access controls. The operator and service providers may access information when necessary to operate, support or secure the service, or when required by law.

Data on your device

Your browser stores your sign-in session and light/dark preference. Signing out clears the active session and workspace shown in this app. We have not added advertising trackers or marketing analytics. Use Sign out on shared devices.

Keeping and removing information

Workspace records currently have no automatic expiry. They are kept while the account remains open, unless you ask us to remove them. You can edit venue details and remove a venue photo in Settings, then save your changes. Removing a photo replaces it in the current workspace record; provider backups or logs may retain earlier information for their retention periods.

To request account deletion, email us from your account email address. Deletion is handled manually after we verify the request. We will explain any information that must be retained for legal or security reasons. Signing out or removing Google's sign-in permission does not itself delete your Hospitality Tools account.

Access, correction and complaints

Use Settings to download your saved workspace data or change your profile and venue details. Contact steven017417@gmail.com for other account information, corrections, deletion or a privacy complaint. Do not send passwords or sign-in codes. We will verify your identity where needed, investigate your request and respond. You can also contact the Office of the Australian Information Commissioner about privacy concerns.

Future tool connections

This policy describes the current account and sample workspace. Before enabling live review processing, expanding AI drafting beyond the described pilot, connecting invoices or enabling billing, we will explain the additional information involved, update this policy and ask for the relevant connection permissions. Material privacy changes will be brought to your attention in the app.