Privacy policy

This policy explains how the 5 Sparrows Coffee website processes data when an authorized administrator connects Instagram or Google Business Profile. These connections are optional and are used only to display content the administrator selects for this website.

Information processed

For Instagram, the website stores an access token, the authorized professional account ID and username, and synced media details such as captions, image URLs, permalinks, and timestamps. For Google Business Profile, it stores OAuth tokens, the selected account and location identifiers, and review data returned by Google.

How information is used

The information is used to sync Instagram posts and Google reviews into the private administration portal. Nothing is published automatically: an administrator chooses which posts or reviews appear on the public homepage. Connection data is not sold or used for advertising.

Storage, sharing, and security

Connection credentials are stored server-side and are not exposed in the browser. Data may be processed by infrastructure providers needed to operate the website, subject to their own security and privacy commitments. Access is limited to authenticated administrators and service operations required to keep selected content synchronized.

Local delivery distance

When you select local delivery and request a delivery price, the website sends the business address and your delivery address to Google Maps to calculate a driving route. Your name, email, payment details, and order contents are not included in that Google request. The driving distance determines delivery eligibility and the fee shown before payment. Google processes this information under its Privacy Policy. You can choose an available shipping or pickup option instead.

Address suggestions and checks

When address assistance is enabled, the street address you type is sent to Google Maps to offer address suggestions. Your completed delivery address, including any apartment or unit, is sent to Google to check formatting and completeness before getting delivery prices. These requests do not include your name, email, phone number, order contents, or payment details. Suggested corrections are shown for your review. If the check is unavailable, you can confirm your manually entered address. Google processes address information under its Privacy Policy.

Retention and deletion

Connection data is retained while the integration is active. An administrator can disconnect either provider from the Connections area. Disconnecting deletes stored OAuth credentials and provider-synced content for that connection. Instagram users can also trigger deletion by removing the app from Instagram. See the data deletion instructions.

Your choices

Provider authorization can be revoked at any time through Instagram or Google account settings. To ask a privacy question or request help with deletion, email shady@weborbitllc.com.

Changes

This policy may be updated when the connection features or applicable requirements change. The current revision date appears above.