Privacy Policy

• Account information: the name, phone number, email address and role of the business owners and staff who use the backoffice.
• Business information: the business and branch details, menus, opening hours, settings, and the orders the business receives through the Service.
• Connected accounts: when an owner chooses to connect an external account (for example Wolt or a Google Business Profile), we receive only the access the owner approves on that provider’s own page, as described in sections 3 and 4.
• Technical information: log data such as IP address, browser and device type and the pages used, kept to run and secure the Service.
• Website visitors: details you submit in a form on this website (such as name, phone and business name), and usage data collected with cookies and measurement tools, as described in section 7.

• To provide and operate the Service the business asked for, including showing orders on the kitchen display and the order list.
• To run the connections the owner turned on, and only for the feature the owner turned on.
• To support the business when it contacts us.
• To secure the Service and prevent abuse.
• To bill for the Service and comply with the law.
• To contact people who left their details on this website about the service they asked to hear about.

We do not sell personal information.

On the Connections screen of the backoffice, an owner can connect an account at an external provider. The connection happens on the provider’s own secure sign-in page: Miley never sees or stores the account password, and receives only the permissions the owner approved there.

Wolt connection: used to receive the connected branch’s orders and show them in Miley. We store the branch’s Wolt identifier and the access keys, and the orders become part of the business’s order records.

An owner can connect the business’s Google Business Profile. Miley accesses only the data the owner approves on Google’s consent screen, and only to provide the feature the owner turned on. The permissions we request:

• openid and email — to identify the connected Google account. We store the account’s identifier and email address to show the owner which account is connected.
• business.manage — to read the list of business accounts and locations in the profile, so the owner can choose which Google location is linked to which Miley branch. We store the chosen location’s identifier, name and address.
• Reviews: when the owner turns on the reviews feature, Miley will read the linked location’s reviews to show them to the owner in the backoffice, and will publish on Google only the replies the owner or their staff wrote or approved in Miley.

We do not use Google user data for advertising, do not sell it, do not use it to determine creditworthiness, and do not use it to develop, improve or train generalized artificial-intelligence or machine-learning models.

Google user data is not transferred to anyone, except to the infrastructure providers that host the Service for us under confidentiality obligations, when the law requires it, or as part of a merger or acquisition with the user’s prior consent. Miley employees do not read this data unless the owner asks us to look into a specific problem, it is needed for security (such as investigating abuse), or the law requires it.

• Access tokens for connected accounts are encrypted with industry-standard encryption, with keys managed separately from the data, and are never written to system logs.
• Information is transferred over an encrypted connection and stored on secured cloud infrastructure, with need-to-know access controls.
• No system is perfectly secure. If a security incident happens, we will notify affected businesses and the authorities as the law requires.

We share information only as needed, and only with:

• Service providers that operate the Service for us — cloud hosting, messaging and payment processing — under contract and confidentiality obligations.
• The partners a business chooses to connect, to the extent needed to run that connection.
• Competent authorities, when the law or a court order requires it.

This website uses analytics and advertising cookies from third-party providers to understand how it is used, improve it and measure our campaigns. You can block cookies in your browser settings. These cookies do not run inside the backoffice and do not receive connected accounts’ Google data.

• Account and business information is kept for as long as the business uses the Service, and afterwards as needed for accounting, legal and dispute purposes.
• Disconnecting an account: the owner can disconnect a connected account at any time from the Connections screen of the backoffice. On disconnect we delete the access tokens we hold, stop accessing the account and delete the location details saved on the connection. The account identifier and email are kept as a record of the connection and are deleted on request.
• You can also remove Miley’s access to a Google account at any time from the account’s permissions page: myaccount.google.com/connections.
• Deletion requests: write to info@gomiley.com and we will delete the information within 30 days, except information the law requires us to keep.

Under the Israeli Protection of Privacy Law, 1981 and its regulations, you may ask to see, correct or delete personal information we hold about you. If you are outside Israel, local law (such as the GDPR) may give you additional rights. Contact: info@gomiley.com.

Any change to this policy will be posted on this page, and the date at the top will be updated.