1. Introduction
Artéteca Internal Assistant (the “Assistant”) is an internal AI and automation tool operated by Artéteca, a Neapolitan pizzeria and Italian restaurant located at C/ de Lepant, 255, 08013 Barcelona, Spain (“Artéteca”, “we”, “us”).
The Assistant is used exclusively by authorized Artéteca staff to support the restaurant’s internal operations. It is not a public or consumer application and it is not offered to the general public.
This Privacy Policy applies only to the Assistant and to the Google user data it accesses. It does not cover the public Artéteca website or any other service.
2. Google Account Authorization
The Assistant accesses Google user data only after the owner of the Google Account has explicitly authorized it through Google OAuth. During authorization, Google displays the specific permissions being requested, and access is granted only if the account owner approves them.
Without this authorization, the Assistant cannot access any Google Account data. The account owner can revoke the authorization at any time, as described in User Control and Revocation.
3. Google Services Accessed
Depending on the permissions granted by the account owner, the Assistant may access the following Google services:
- Gmail
- Google Drive
- Google Docs
- Google Sheets
4. Types of Data Accessed
Depending on the permissions granted and the task being performed, the Assistant may access:
- Gmail data: email messages, including their content, subject, sender and recipients, dates, attachments, drafts, and mailbox labels and organization.
- Google Drive data: files and folders, their content, and related metadata such as names, locations and modification dates.
- Google Docs data: the content of documents.
- Google Sheets data: the content of spreadsheets, including cells, values and data.
- Account identifiers: where included in the authorization, basic information such as the email address of the connected Google Account, used to identify which account has been authorized.
5. How Google User Data Is Used
Google user data is used exclusively for Artéteca’s internal operational activities, and only when requested by authorized staff or when necessary to carry out an authorized workflow. These activities include:
- searching, reading and managing email, including creating drafts, sending and replying to emails, and organizing the mailbox and its labels;
- searching for, reading, creating, editing, organizing, moving and deleting files in Google Drive;
- reading, creating and editing Google Docs;
- reading, creating and editing Google Sheets;
- internal reporting and analysis;
- internal operational automation.
Google user data is not used for any purpose unrelated to these internal operational activities.
6. Read and Write Access
The Assistant has both read access and write access to the Google services listed above. Write actions — such as sending, modifying, moving or deleting content — are performed only when requested by authorized staff or when required by an authorized workflow.
Gmail
When requested or necessary for authorized workflows, the Assistant may:
- read emails;
- search emails;
- create drafts;
- send emails;
- reply to emails;
- organize the mailbox;
- manage labels;
- modify or delete content when required by authorized workflows.
Google Drive
The Assistant may:
- search for files;
- read files;
- create files;
- modify files;
- organize files;
- move files;
- delete files when required by authorized workflows.
Google Docs
The Assistant may:
- read documents;
- create documents;
- edit documents;
- update document content.
Google Sheets
The Assistant may:
- read spreadsheets;
- create spreadsheets;
- edit cells and content;
- update data;
- use spreadsheets for internal reporting and automation.
7. Data Storage
Most Google user data remains in the connected Google Account, where it is accessed as needed.
OAuth credentials and access tokens may be stored securely on infrastructure controlled by Artéteca, so that the Assistant can operate on behalf of the authorized account without requiring a new authorization for every task.
Operational data derived from Google user data — for example, the results of a requested task, an internal report or an automation log — may be stored only when necessary for the operation of the Assistant or for Artéteca’s operational needs.
8. Data Retention
Google user data and data derived from it are retained only for as long as necessary for Artéteca’s operational purposes, for the functioning of the Assistant, or to comply with legal obligations. When this data is no longer needed for these purposes, it is deleted.
9. Data Sharing
Google user data is not shared with unrelated third parties.
Google user data may be processed by service providers that Artéteca uses to host and operate the Assistant, including providers of the AI processing services on which the Assistant relies. Such processing takes place only to provide the Assistant’s functionality to Artéteca, and not for the providers’ own purposes.
Google user data may also be disclosed where required by applicable law, regulation or a legally binding request from a competent authority.
10. Advertising and Sale of Data
Google user data:
- is not sold;
- is not used for advertising, including personalized, retargeted or interest-based advertising;
- is not shared with unrelated third parties;
- is not used for external commercial profiling.
11. Google API Services User Data Policy
Artéteca Internal Assistant’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements, where applicable.
In line with these requirements, Google user data is used only to provide and improve the Assistant’s functionality for Artéteca; it is not transferred to others except as described in this policy, as necessary to provide that functionality, to comply with applicable law, or for security purposes; it is not used to serve advertisements; it is not used to determine creditworthiness or for lending purposes; and it is not used to develop, improve or train generalized artificial intelligence or machine learning models.
12. Security
Artéteca takes reasonable technical and organizational measures to protect Google user data against unauthorized access, loss, misuse or alteration. These include:
- restricting use of the Assistant to authorized Artéteca staff;
- storing OAuth credentials and access tokens securely on infrastructure controlled by Artéteca;
- using encrypted connections (HTTPS/TLS) when communicating with Google services;
- limiting access to Google user data to what is needed for the task being performed.
No method of transmission or storage is completely secure, but Artéteca works to protect the data it handles.
13. User Control and Revocation
The owner of a connected Google Account can revoke the Assistant’s access at any time from the security settings of their Google Account, at myaccount.google.com/permissions (Google Account → Security → Third-party apps with account access).
After access is revoked:
- no new access to Google user data will take place;
- operational data that has already been stored may be retained only where necessary for operational or legal reasons.
To ask about or request the deletion of stored data, contact Artéteca using the details below.
14. Contact Information
For questions about this Privacy Policy or about how Google user data is handled by the Assistant, please contact:
Artéteca
C/ de Lepant, 255 · L'Eixample, 08013 Barcelona, Spain
Email: info@artetecapizzeria.com
Phone: +34 931 69 37 42
15. Changes to This Policy
Artéteca may update this Privacy Policy from time to time, for example to reflect changes to the Assistant or to applicable requirements. Any changes will be published on this page, and the “Last updated” date at the top will be revised accordingly.