BestTablesBestTables Bandera de Ecuador
INFORMATION AND CONTROL

Privacy Policy

This policy explains how BestTables accesses, uses, stores, protects, shares, and deletes personal information, including data obtained through Google OAuth and the Gmail API.

Application: BestTablesLast updated: September 18, 2026Ecuador

1. Controller and scope

BestTables is a restaurant management platform. This policy applies to the BestTables website, dashboards, applications, and services. For privacy questions, email soporte@besttables.net.

2. Data we process and why

Depending on the features used, we may process registration and account information, establishment and user data, end-customer information needed for orders and invoicing, payment and subscription information, tax documents, support records, IP addresses, devices, sessions, and security events.

We use this data to provide requested features, administer accounts and subscriptions, issue and deliver receipts, provide support, maintain security, prevent fraud, perform backups, comply with legal obligations, and improve the features the user employs.

GOOGLE WORKSPACE INTEGRATION

3. Google user data

Data we access

  • Name and email address of the authorized Google account.
  • OAuth access and refresh tokens required to maintain the connection.
  • The limited https://www.googleapis.com/auth/gmail.send permission.
  • Content of the message the user instructs us to send: sender, recipient, subject, and the receipt or message body.

How we use that data

BestTables uses this information exclusively to connect the selected account and use it to send the receipts or emails requested by the user through a visible BestTables feature. We do not use the Gmail API to read the inbox, existing messages, contacts, files, or account settings.

  • We do not sell Google data.
  • We do not display advertising using this data.
  • We do not create advertising profiles.
  • We do not determine creditworthiness or issue loans.
  • We do not transfer data to data brokers.
  • We do not use Google Workspace data to develop, improve, or train generalized AI or machine-learning models.

BestTables' use and transfer to any other application of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

4. With whom we share, transfer, or disclose Google data

We do not share, transfer, or disclose Google user data except in the limited circumstances described below:

  • Google LLC: we exchange OAuth authorization and submit the message to the Gmail API to perform the action requested by the user.
  • Recipient selected by the user: when the user orders a receipt to be sent, the recipient receives the message and the data included in it.
  • Technical providers acting for BestTables: hosting, database, backup, connectivity, and security providers may process limited encrypted data or metadata strictly necessary to operate and protect the service. They are subject to confidentiality, security, and processing obligations under our instructions and may not use the data for advertising or their own purposes.
  • Competent authorities: we may disclose information only when required by law, a valid order, or a legally binding request.
  • Corporate transaction: a transfer through merger, acquisition, or asset sale would only occur with any required prior consent and applicable safeguards.

We do not permit human access to Google data unless it is essential for security, legal compliance, or support concerning specific data, and the user's express authorization has been obtained when required.

5. Data protection

We apply reasonable technical, administrative, and organizational safeguards. Communications with Google use HTTPS. OAuth tokens are encrypted at rest and hidden from ordinary responses and logs. We restrict access by role, maintain security records, and use session controls, backups, and incident-response procedures.

6. Retention, disconnection, and deletion

We retain Google tokens only while the connection is needed and remains active. The user can delete the connected account through Electronic invoicing, Receipt email, Delete email; this removes the associated tokens and credentials from the active configuration. Access can also be revoked through the Google account's connections settings.

Minimum delivery, security, or audit records may be retained for the period necessary to prevent fraud, address claims, and comply with legal obligations. These records do not include Gmail inbox content, which BestTables does not access. To request deletion of personal data, email soporte@besttables.net.

7. Rights and contact

Data subjects may request information, access, updating, correction, deletion, objection, restriction, portability, or withdrawal of consent where applicable under relevant law. Requests are accepted at soporte@besttables.net. We may request reasonable information to verify identity and protect the account.

Privacy contact

BestTables
soporte@besttables.net
Ecuador

8. Changes to this policy

We may update this policy to reflect legal, technical, or operational changes. We will publish the current version and its update date. If the processing of Google data changes materially, we will notify users and request new consent when required.