Sunny's OS Privacy Policy
Last updated October 28, 2026
Sunny's OS is the internal operating system used by Sunny's Brunch ("Sunny's", "we") to run our restaurants: schedules, tasks, training, performance and reporting. It is only available to Sunny's owners, managers and employees who have been given access.
What we collect
- Your name, work or personal email and role, so you can sign in and see the right pages.
- Work information you or your managers enter: schedules, tasks and their photos, files and notes, training, reviews and similar records.
- Restaurant data from the systems we use, such as Toast (sales, labor, menu).
Google account data (Google Calendar)
Connecting Google is optional. If you choose "Connect Google" on the Settings page, we ask Google for:
- Your basic profile and email address, to show which Google account is connected.
- Permission to create and manage only calendars that Sunny's OS creates. We create one calendar named "Sunny's OS" and keep your upcoming tasks and meetings on it. We cannot see, read or change your other calendars, events, email or files.
The access tokens Google gives us are stored encrypted and used only to keep that calendar up to date. We do not sell Google data, use it for advertising, share it with anyone else, or use it to train AI models. Sunny's OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect at any time from Settings › Google Calendar › Disconnect (which also removes the "Sunny's OS" calendar) or at myaccount.google.com/permissions. When you disconnect, we delete the stored tokens.
Instagram, Facebook and TikTok (our own business accounts)
The marketing team can connect Sunny's own business accounts (our Facebook Pages, Instagram accounts and TikTok account) on the Social Media page. With the permissions the account owner grants, we:
- Publish the posts our team has planned and approved, to the accounts they were planned for.
- Read our accounts' profile, recent posts, their numbers (views, likes, comments, shares) and the comments on them, so the team can see the feed, plan around what works and answer comments.
- Post replies to comments when a team member writes one.
The access tokens are stored encrypted and used only for these accounts. Comments from the public are used only so they can be answered. We do not sell this data, use it for advertising, share it with anyone else or use it to train AI models. An account can be disconnected at any time on the Social Media page (Accounts › Disconnect), which deletes its tokens, or from the platform's own settings.
How we use information
Only to operate Sunny's restaurants and this system: showing you your work, sending task reminders and notifications by email, and reporting to managers. Access inside the app follows each person's role.
Who we share it with
Service providers that run Sunny's OS for us: hosting (Railway), database and file storage (Supabase), email delivery (Resend), and, when someone uses the AI Assistant, Anthropic to write answers. Google account data is never sent to these providers except our own encrypted storage. We do not sell personal information.
Keeping and deleting data
We keep work records as long as needed to run the business and meet legal requirements. To ask for a copy or deletion of your information, contact us.
Contact
Sunny's Brunch · albi@sunnysbrunch.com