Privacy Policy
This policy covers the TopTeck website and the TopTeck Review service for restaurant operators. Other TopTeck products may have additional notices. We take responsibility for the information we process to provide these services.
Information we handle
- Business account details, such as an operator's name, work email, role, organisation and support messages.
- When an authorised operator connects Google Business Profile: account and location identifiers, location details, review identifiers, ratings, review text, public reviewer display names, review times, and reply content and status.
- Google OAuth access and refresh tokens needed for the connection. These are stored encrypted and are not displayed to other merchants.
- Technical records needed to run and protect the service, such as sign-in, access, error and audit events.
How we use it
We use this information to authenticate operators, connect the Google account they authorise, match its locations to their stores, synchronise and display reviews, prepare response drafts, publish a reply only when an authorised operator requests it, support users, secure the service and meet legal obligations. Review data is kept within the relevant merchant organisation's access controls. We do not sell Google user data or use it for advertising.
AI reply drafts
If an operator requests an AI draft, the review rating and a limited extract of review text may be sent to Google's Gemini service. The service masks detected email addresses and phone numbers and excludes the reviewer's display name from the prompt. Masking cannot guarantee removal of every personal detail a reviewer puts in free text. The resulting draft requires operator review before publication.
Sharing and storage
We share information with Google when using its Business Profile APIs or Gemini as described above, and with hosting, security and support providers that help us operate the service. We may disclose information where required by law. Service data may be processed in Australia, Singapore or other places where these providers operate. We use access controls, encryption for OAuth tokens and transport security to protect it.
Retention and your choices
We keep information while needed to provide the service, maintain business and audit records, or meet legal obligations. Revoking TopTeck's access in your Google Account connections stops future authorised access; previously synchronised reviews and business records may remain until deletion is requested or an applicable retention obligation ends. An operator may ask us to access, correct or delete information, subject to applicable law and the merchant's account controls.
Contact and updates
Contact partnerships@topteck.ai for privacy requests or questions. Our registered office is Unit 7/6 Wells Road, Oakleigh VIC 3166, Australia. We will post material changes here and update the effective date.