Privacy Policy

1. Overview

zview helps restaurants collect customer feedback, draft review text, and manage Google Business Profile reviews and replies. This policy explains what we collect, how we use it, and your choices.

2. Who this applies to

• Restaurant users — owners, managers, and staff who log into the zview dashboard.
• Customers — people who scan a restaurant QR code and leave feedback (no account required).

3. Information we collect

3.1 Restaurant account data

Name, email, password (stored hashed), role, and restaurant/branch association.

3.2 Customer feedback (QR flow)

Star rating, optional tags, optional comments, and order context if provided by staff. We do not require customer name, email, or phone for the QR flow.

3.3 Google Business Profile (optional, owner-initiated)

If a restaurant owner connects Google Business Profile, we access data permitted by the business.manage OAuth scope, including:

• OAuth access and refresh tokens (stored securely on our servers).
• Google account and business location identifiers (account ID, location ID, location name and address).
• Google reviews for the linked location: rating, review text, reviewer display name, review date, and existing business replies.

We only access Google data after explicit authorization by a user who manages that business profile.

3.4 Automatically collected data

Server logs (IP address, browser type, timestamps) for security and operations.

4. How we use information

We use data to:

• Provide the zview dashboard and QR review experience.
• Sync Google reviews into the restaurant's private dashboard.
• Generate AI-assisted review drafts and suggested replies (see Section 5).
• Post approved replies to Google on behalf of the connected business.
• Send email alerts for negative reviews (if configured).
• Improve reliability, security, and support.

We do not sell personal information.

5. Third-party services

Each provider processes data under their own terms and privacy policies.

6. Data retention

• Account data: retained while the account is active.
• Google OAuth tokens: retained until the user disconnects Google or deletes the branch/account.
• Reviews and feedback: retained for dashboard history unless deleted or upon account termination.
• Users may request deletion by contacting sales@dezdok.com.

7. Security

We use industry-standard measures including HTTPS, hashed passwords, and restricted access to production systems. OAuth tokens are not exposed in the dashboard API.

8. Your rights and choices

Restaurant users may:

• Disconnect Google Business Profile at any time (Settings → Google Business Profile → Disconnect).
• Update branch and contact information.
• Request access, correction, or deletion of account data.

Customers using the QR flow may close the page at any time; no account is created. Depending on your location, you may have additional rights under GDPR, CCPA, or similar laws. Contact us to exercise them.

9. Google API Services User Data Policy

zview's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only use Google user data to provide the connected Business Profile features described in this policy. We do not use Google data for advertising, and we do not transfer it to third parties except as needed to provide the service (e.g. hosting, AI reply generation from review text).

10. Children

zview is not directed at children under 13. We do not knowingly collect data from children.

11. Changes

We may update this policy. The "Last updated" date will change. Continued use after changes constitutes acceptance.

12. Contact

Email: sales@dezdok.com