Privacy and your restaurant records
Updated October 3, 2026
Never86’d operates Action Shift, including its free One Seat entry. Your restaurant name identifies your workspace; Community Tap & Pizza is one restaurant using the platform. This policy describes information handled by this application.
Information we use
Sign-in supplies your account identifier, name and email so we can identify your workspace. We retain the restaurant details, uploaded originals, extracted report facts, corrections, questions, answers and actions you save. Connection and processing records help us diagnose failures, prevent duplicate imports and limit misuse.
Site usage analytics
We measure browser page visits, referring website names and campaign tags using a random visitor cookie (one year) and a session cookie (30 minutes of inactivity). Signed-in visits are connected to your account so the owner can understand adoption alongside saved file and question counts. We do not record screens, keystrokes, full referring URLs, query strings or IP addresses in this analytics feature. Browser Do Not Track and Global Privacy Control disable this page tracking. Hosting may maintain separate request analytics. Clearing cookies resets your anonymous identifier. Usage reports are available only to the site administrator.
Optional email connection
Gmail connection requests read-only mailbox access, which is broader than your selected sender list. We use that access to identify your connected address, search for matching reports and retrieve attachments from the senders and time period you choose. If you explicitly enable email text, we also save matching email bodies as dated operating notes, including messages without attachments. Selected text may be used to answer your questions with a not-checked label; it is not automatically approved policy or financial evidence. Saved import records include message and attachment identifiers, sender, subject and receipt date. We do not request permission to send or delete mail. Outlook availability depends on provider setup. You can instead forward an attachment or upload it.
Email and password sign-in
You can create an account with your email and password without a ChatGPT or Grok account. Resend delivers verification and recovery codes to your address. Codes expire after 10 minutes, work once, and are tied to the browser that requested them. We store password verifiers, not plaintext passwords. Sign-in sessions and request limits protect your account. Existing ChatGPT users can explicitly link a verified email to the same restaurant account.
Processing and sharing
OpenAI’s Sites hosting and its storage infrastructure run the application. ChatGPT sign-in remains an optional account method. Google or Microsoft provides connected mailbox access; Resend receives forwarded reports and sends sign-in messages. When you choose an enabled AI reading or question feature, relevant files or report context are sent to OpenAI’s API to produce that result. The application requests that API responses are not stored as retrievable responses. This is not a promise that service providers keep no operational logs.
If you ask the Never86’d team to contact you, your submitted contact details and permission record may be stored in HubSpot for that follow-up. Restaurant mailbox contents are not sent to the contact follow-up system.
Google data and Limited Use
Our handling of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google-derived data is used for the restaurant features you choose, not advertising, sale to data brokers, credit decisions or training general-purpose AI models. Human review requires your affirmative permission for the relevant records, except where needed for security or applicable law.
Storage and your choices
Mailbox credentials are encrypted on the server. Pause stops new collection. Disconnect removes saved mailbox credentials or disables forwarding; imported reports remain available in your restaurant history. Reports and their review history are retained until removed through a deletion request; there is no automatic expiry period configured. Provider logs and backups may follow the providers’ own retention practices.
You can also revoke permission in your Google or Microsoft account. To request access, correction or deletion of retained application records, email Myke at Never86’d. We will verify that you are authorized for the affected workspace before acting. Signing out does not delete records.
Browser storage
Email sign-in uses secure, browser-only session cookies lasting up to seven days. A separate cookie remembers your chosen sign-in method for up to one year. Signing out revokes the current email session; changing your password revokes all email sessions and pending recovery codes. Optional ChatGPT sign-in also uses the hosting platform’s session controls. Sample exercises may save progress in your browser. Clearing browser storage removes sample progress and sign-in cookies, not your saved restaurant records.