Last updated: 2026-09-15
This policy describes how SquirtleEats ("we", "us") collects, uses, and protects information in connection with our ordering service and the tools at receipts.squirtleats.uk. If we change how this app accesses, uses, stores, or shares Google user data, we'll update this page and its "Last updated" date, and notify affected staff directly.
Depending on how you interact with us, we may collect:
SquirtleEats's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
What we access. Our own staff — never customers — may connect a mailbox they personally own to SquirtleEats using Google Sign-In, granting a read-only (gmail.readonly) connection to that one mailbox.
Why we access it. That connection is used solely to search the linked mailbox for the specific order-verification codes and order-confirmation emails needed to manage a customer's order on a delivery/grocery platform on their behalf. We do not read, browse, or export any other email in the mailbox.
How we use it. Data read from Gmail is used only for that verification/order-management purpose. It is never used for advertising, never used to build user profiles, and is not transferred to any third party except as strictly necessary to complete the order in question (for example, submitting a code we found to the delivery platform's own site).
Human access. Only the staff member who linked their own mailbox, and engineering staff troubleshooting a reported problem, can view data read from a mailbox — and only for the verification/order-management purpose above.
Storage and retention. We store the Google-issued authorization token (not the email content itself) needed to maintain this connection in our database until the staff member disconnects it (via /unlinkgmail) or we detect it's no longer needed. Any verification code/confirmation detail read from an email is used immediately and is not retained once the order step it was needed for is complete.
Revoking access. A staff member can disconnect their mailbox at any time via /unlinkgmail, or directly from their Google Account permissions page, which immediately revokes our access.
We use the information above to place and fulfill your order, process payment, provide customer support, detect fraud/abuse, and comply with legal obligations.
We do not sell your information. We share it only with the service providers needed to fulfill your order and process payment (for example, Square for payment processing, and the grocery/delivery platform your order is placed on), or when required by law.
We retain order, payment, and support records for as long as needed to provide the service, resolve disputes, and meet legal/accounting requirements, after which they are deleted or anonymized.
To request access to, correction of, or deletion of your information, or to revoke a linked Gmail account, contact us at the email below.
Questions about this policy: [email protected]