Privacy

What we hold

An account, made when you sign in with your email address and password. Every venue member has one; there is no guest sign-in. The account holds the name and email address your sign-in carries, and the language you read in.

The role you hold at each venue, owner, manager or staff, and when it was granted. Which member marked an order as seen. Which member recorded a payment or an adjustment against a runner's balance. What you write in an order's chat.

A notification token for this device, held by Firebase so a new order can reach you.

Your role

Roles are per venue. The same account can be owner at one bar and staff at another, and what you see at one tells you nothing about the other.

The owner and managers can see the venue's team, with names, email addresses and roles, and the runners paired with it. Staff cannot.

What you see about customers

You see the orders sent to your venue: the items, the customer's note, and the order's status. You are shown nothing about what the same customer ordered from any other bar.

The customer's phone number reaches you only once your venue has accepted the order. Until then it stays hidden. The delivery spot reaches you once the order is no longer new. You are never shown a customer's email address.

While a runner carries an order you see the runner's name and photo, and where they are.

What your actions record

Every change to an order's status is written to its timeline with the status, the time, the role that made it and, if you gave one, a reason. The timeline names your venue as the actor, not you personally. It is the customer's tracking view and the source of the venue's statistics.

Marking an order as seen is the one action that records which member did it. It changes no status and writes no timeline event. It only gives the venue longer to answer, and nobody outside the venue sees it.

Why we hold it

We hold it so you can run the bar's orders, menu and runners, so we can tell you when an order arrives, so you can talk to a customer or runner about an order, and to keep the books straight between the bar and its runners. We do not build a profile of you and we do not sell anything to anyone.

The companies we use

We use three companies and no others. Firebase, from Google, holds sign-in and delivers notifications. Sentry receives crash reports on servers in the European Union, and those reports say what went wrong rather than who you are. Map tiles come from OpenStreetMap, which sees that a map was drawn when you open an order. Each of them works on our instructions and holds nothing for its own purposes.

How long it lasts

Your account stays until it is deleted. An order stays as the bar's record of a sale, which the bar is entitled to keep, and its chat stays with it. Ledger entries are never changed or removed, because a balance is owed between two other parties; a correction is a new entry.

Deleting it

The app has no delete button yet. Write to privacy@starfrontventures.com and we will delete what can be deleted and tell you what cannot, and why.

An owner must hand the venue to someone else first, because a venue cannot be left without an owner. Orders stay as the bar's record. Ledger entries stay. Signing in again afterwards makes a new account, not the old one.

Your rights

You can ask what we hold about you, ask us to correct it, and ask us to delete it. Where you live may give you more than that, such as the right to object, to restrict, or to receive a copy, and we honour those wherever they apply. Write to privacy@starfrontventures.com and we will answer.

Children

Beach Bliss for Business is for people who work at a bar, not for children, and you should not use it if you are under 16.

Changes and contact

When this changes, the new version appears here with a new date. Anything you want to ask about it goes to privacy@starfrontventures.com.