Pilot privacy notice

Your account and property records

THE PASS Restaurant & Hotel Edition uses the THE PASS email account service, provided through Supabase. You can use the same email and password as Chef Business Studio. Restaurant operational records are stored separately. Passwords are verified by the account provider; the application does not store plaintext passwords.

Account sessions use secure, HttpOnly cookies. Property records and recovery history use the hosting platform’s database and object storage. Unsynced drafts can remain in this browser’s local storage. Downloaded backups can contain financial figures and staff pay information; store them securely.

Who can see information?

Property members can see that property’s records according to their role. Current manager and viewer roles can see all operational records, including pay rates. Property owners control team membership. THE PASS owner dashboard shows restaurant account emails, property names, trial/subscription status and feedback submissions for operating the service.

Chef Nico voice and chat

When you enable the assistant permission box and send a question, THE PASS sends that question and a summary of the selected property’s saved records to OpenAI to generate an answer. The summary includes entered weekly financial figures, recipe margin estimates, recent vendor invoice lines, aggregate scheduled labor and hotel metrics. It excludes staff names, individual pay rates and account credentials. Do not include confidential personal information in questions.

Recording starts only after you tap Record and allow microphone access. Recorded audio is sent to OpenAI for transcription, then you can review the transcript before asking. Read aloud sends answer text to OpenAI for an AI-generated voice. THE PASS does not save chat transcripts or recordings in its application database; they stay in page memory until cleared or closed. Provider retention policies may apply. AI answers can be inaccurate. This assistant cannot change property records, schedules or purchase orders. Daily usage limits apply.

Traffic and feedback

First-party traffic tracking records page paths, source categories, timestamps and a hashed browser-session identifier. The session cookie expires after 30 minutes unless renewed by a visit. Full referrer URLs and page query strings are not saved as traffic records. Security rate limits may use a short-lived hash derived from the request IP; raw IP addresses are not stored in the application tables for those limits.

Feedback submitted in My Account is stored for THE PASS owner to review. Do not include passwords, payment details, employee records or sensitive financial data. Feedback downloaded from Start Here is not sent automatically.

Billing and requests

When paid enrollment is activated, Stripe-hosted pages handle payment information. THE PASS does not receive full card numbers. Billing is currently disabled until restaurant setup is completed.

Use My Account → Feedback & support to request help with access, an export or deletion. Exports are available in the studio. Account deletion is not an automatic action in the pilot and must be reviewed together with property ownership, team access and recovery copies. This notice describes the current pilot; commercial launch policies are still under review.