Privacy Policy

Who this policy covers

Minhwa Spirits operates Mission Control at sool.bar for authorized staff and administrators. This policy describes information handled through this app, including information about staff and guests contained in operational records. It does not describe every data practice of our restaurant, point-of-sale providers, or other websites.

Information we handle

Account information includes your name, username, assigned role, location or team, account status, and authentication records. User account records store password hashes. Server-side credentials and keys are held in restricted service configuration.

Operational information may include sales and order records, employee identifiers and schedules, labor hours and costs, reservations and guest names, party sizes and table assignments, inventory, production records, checklists, shift notes, actions, and music-library information. The information available depends on the integrations and imports configured by administrators.

We also receive information that authorized users enter or upload, such as notes, spreadsheet imports, and corrections. Certain administrative and operational changes are recorded with the acting user and time. Our hosting and security providers may process technical information such as IP addresses, browser details, request times, and errors to deliver and protect the service.

How we use information

We use information to authenticate authorized users, enforce access roles, coordinate restaurant operations, generate reports and estimates, maintain records of changes, troubleshoot problems, and protect the app. Administrators and other authorized staff can access information according to their roles and assigned location. Do not treat work notes entered into the app as private messages.

Google sign-in

Google sign-in verifies approved managed Google Workspace accounts. Access is limited to basic identity information: a Google account identifier, email address and verification status, and basic profile information such as your name. Google authentication does not by itself grant access; Mission Control administrators assign roles and approve access.

This sign-in feature does not request access to Gmail messages, Google Drive files, calendars, or contacts. Mission Control does not receive your Google password. Google identity information is used for account identification, access control, and security, not advertising or sale. We will update this policy if the implemented feature changes these practices. Google also processes information under its own privacy policy.

Cookies and service providers

Mission Control uses a session cookie to keep you signed in and enforce access. Blocking or clearing it may sign you out or prevent authenticated features from working. The app does not currently include advertising trackers or third-party marketing analytics.

Information is processed by providers needed to operate the service, including hosting, network security, and administrator-configured operational integrations. Authorized staff may export information for business use. Information may also be disclosed when required by law or necessary to investigate misuse or protect people and the service. These disclosures are limited to the purpose involved.

Storage, retention, and security

Information is stored in the app database, operational logs, and backups. We retain records as needed for operations, security, financial recordkeeping, dispute resolution, and applicable obligations. Sign-in history is retained for up to one year in the active database and cleaned up as new login events are recorded. Retention depends on the record type; the app does not currently apply one automatic deletion period to all data.

Disabling an account removes access but does not automatically erase its contributions, audit history, or related business records. Backups may retain information after it is removed from active use until those backups expire or are replaced.

We use HTTPS, role-based access, session controls, and operational safeguards to protect information. No system can guarantee absolute security. Use only your own approved account, protect your credentials, and report suspected unauthorized access promptly.

Questions, corrections, and deletion requests

Contact Minhwa Spirits using the address below to ask about your information or request access, correction, or deletion. We may verify your identity and authority before responding. Some information may need to be retained for legitimate business records or applicable obligations; we will explain relevant limitations. Rights available to you depend on applicable law.

Do not upload unnecessary sensitive personal information, payment-card credentials, passwords, or private health information into notes or imports. If such information is entered accidentally, notify an administrator.

Changes to this policy

We may update this policy as the app and its integrations change. The effective date identifies the current version. Material changes will be communicated to affected users through appropriate business communications or the app.