Privacy Policy — Nodal Hospitality

About this policy

Nodal Hospitality ("the service" or "the application") is operated by Nodal Marketing Limited, a company registered in Hong Kong ("we", "us", or "our"). This Privacy Policy explains what data we collect - including Google user data accessed through Google APIs - how we use it, how we protect it, who we share it with, how long we keep it, and the choices you have. It took effect on 29 September 2026.

If you have any questions about this Privacy Policy or how we handle your data, contact us at tim@nodal-ai.io.

Data we collect

We may collect, or process on behalf of our customers, the following categories of personal data when you use or interact with our products and services:

Account data: Your name, email address, and password. Your password is stored only as a hash by our authentication provider - we cannot see it in plain text.
Business data you connect: Outlet details, and sales and revenue data synced from POS systems (Loyverse, Keeta, Foodpanda) through API connections you authorize. We also collect publicly available customer review data for venues you monitor.
Google user data, only if you connect your Google account: Our application will access the data you have provided to us or that is available through your Google account, specifically:
- Google Analytics data (read-only): Traffic and usage metrics for your own Google Analytics property - including sessions, users, pageviews, bounce rate, session duration, traffic source/medium, device category, and geographic country. We access this data through the Google Analytics Data API with read-only scope and do not modify your Analytics configuration.
- Google Drive files (file-level, user-initiated): When you explicitly request an export, we save a report file to a folder in your Google Drive. We use the drive.file scope, which means we can only access files that this application itself creates - we cannot read, view, or modify any other files in your Drive.
Technical logs: Access and error logs used for security, debugging, and service reliability.

We do not access your Google email, contacts, calendars, photos, documents (other than files we create at your request), or any other Google data beyond the scopes listed above.

How we use your data

We use your data to provide you with the services you requested - including dashboards, reports, and AI-assisted answers about your own business data - and to secure and maintain the service. Specifically:

POS and business data: To display revenue trends, product performance, and operational metrics for the outlets you have connected.
Google Analytics data: To display website traffic metrics alongside your revenue data so you can understand how online activity relates to sales performance.
Google Drive: To save report exports you explicitly request to your own Google Drive for your convenience.
Review data: To aggregate and display customer review sentiment for venues you monitor, including competitor venues you choose to track.
AI assistant: To answer plain-language questions about your own connected data. The AI assistant can only access your own tenant data - it cannot access other customers' data.
Service operations: To authenticate you, secure the platform, debug errors, and provide customer support.

How we do NOT use your data

We limit our use of data - including Google user data - strictly to providing and improving user-facing features of the application. We do not use your data, including Google user data, for any of the following purposes:

Targeted advertising or any form of user, personalized, retargeted, or interest-based advertising
Selling personal data to data brokers or information resellers
Providing personal data to information resellers
Determining credit-worthiness or for lending purposes
Creating databases for purposes unrelated to providing the service
Training non-personalized or generalized artificial intelligence (AI) or machine learning (ML) models

Artificial intelligence and machine learning

The in-app AI assistant uses large language models to answer questions about your connected business data. These models process your queries and data solely to generate responses returned to you within the application. We do not use Google user data - and we do not use Google Workspace APIs - to develop, improve, or train any non-personalized or generalized AI or ML models. Your Google data is never used as training data for any model.

Sharing, transfer, and disclosure

We do not transfer or disclose your personal data, including Google user data, to third parties for purposes other than the ones described in this Privacy Policy. Specifically:

Service processors: We share data only with subprocessors necessary to run the service - our hosting and database platform (Base44) and the cloud infrastructure providers that host the application. These processors are bound by contractual obligations to protect your data and use it only as instructed by us.
POS and review APIs you connect: When you authorize a POS or review platform integration, we retrieve and store data from those APIs on your behalf. We do not share your data back to those providers beyond what is necessary to maintain the connection you authorized.
AI model providers: When you ask the AI assistant a question, your query and relevant data may be sent to a third-party large language model provider to generate a response. The data is transmitted securely and is used solely to generate the response returned to you - it is not used to train models.
Legal obligations: We may disclose data if required by law, court order, or government regulation, or to protect the rights, property, or safety of our users or others.

We do not sell personal data to any third party. We do not transfer Google user data to third parties for targeted advertising, selling to data brokers, providing to information resellers, determining credit-worthiness, lending, or training generalized AI or ML models.

Google-specific data access

Connecting your Google account is entirely optional. You can use Nodal Hospitality fully without connecting any Google service. If you do connect:

Google Analytics: We request read-only access to your Google Analytics property data. We use this data to display traffic metrics in your dashboards. We do not modify your Analytics configuration, goals, or settings.
Google Drive: We request file-level access (drive.file scope) so we can save report exports you request to your Drive. We can only access files that this application creates - we cannot see or modify any existing files in your Drive.
Revocation: You can disconnect Google at any time within the app's Settings page, or revoke access at myaccount.google.com/permissions. Upon disconnection, we delete the associated access tokens and stop retrieving new data.
Google API Services compliance: We use Google APIs in accordance with the Google API Services User Data Policy, including the Limited Use requirements.

Data retention and deletion

We store your personal information for a period of time that is consistent with our business purposes, as described below:

Active accounts: We retain your data while your account is active and you are using the service. POS and business data is kept and continuously updated as long as your integrations remain connected.
Google user data: Google Analytics data retrieved by the application is stored to maintain historical trend displays. When you disconnect a Google integration, we delete the associated OAuth tokens immediately and stop retrieving new data. Previously cached Google Analytics data is deleted within 30 days of disconnection.
Account closure: When you close your account, we will retain your personal information for the length of time needed to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. When the data retention period expires for a given type of data, we will delete or destroy it. In practice, we delete business data and associated personal data within 30 days of account closure, except where law requires longer retention.
Requesting deletion: You may request that your data be deleted at any time by emailing tim@nodal-ai.io with the subject line "Data Deletion Request." We will process your request and confirm deletion within 30 days.

Security

Security procedures are in place to protect the confidentiality of your data. Specific measures include:

Encryption in transit: All data transmitted between your browser, our servers, and third-party APIs is encrypted using TLS (Transport Layer Security).
Encryption at rest: OAuth tokens and sensitive credentials are encrypted when stored in our database.
Multi-tenant isolation: Per-tenant access controls ensure that each customer's data is accessible only to that customer. The AI assistant and all queries are scoped to your own tenant data - cross-customer data access is technically prevented.
Access controls: Internal access to production data is restricted to authorized personnel on a least-privilege basis and is logged for audit.
Authentication: User passwords are stored only as cryptographic hashes by our authentication provider and cannot be viewed in plain text.

Your rights

You have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete data.
Export: Request an export of your data in a portable format.
Deletion: Request that we delete your personal data.
Revocation: Disconnect any third-party integration (including Google) at any time.
Account closure: Close your account at any time, which triggers the deletion process described above.

To exercise any of these rights, email tim@nodal-ai.io and we will respond within 30 days.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes - particularly to how we use Google user data - we will notify you through the app or by email. The "Last updated" date above reflects the most recent revision. We encourage you to review this page periodically to stay informed about how we protect your data.

Contact

If you have any questions about this Privacy Policy or your data, contact us at tim@nodal-ai.io or write to: Nodal Marketing Limited, Hong Kong.