Privacy Policy

Owner Assistant is made by X Pulse Inc for the restaurants it works with. This page says, in plain words, what the platform collects, why, who sees it, and how to have it removed. Last updated 9 October 2026.

Who we are

X Pulse Inc ("X Pulse", "we") is a marketing agency in Massachusetts, United States. Owner Assistant, at owner-assistant.com, is our reporting platform: it reads a restaurant's own numbers from the social platforms the restaurant has connected, keeps a daily record of them, answers the owner's questions from those numbers, and produces a monthly report.

Questions about this policy, or any request about your data: yousuf@xpulseinc.com.

What we collect

About the restaurant's social accounts

When a restaurant connects an account (today Facebook Pages and Instagram professional accounts through Meta; TikTok Business accounts and Google Business Profiles when those connections are offered), we read what the platform makes available to the account's owner: daily account figures (followers, views, reach, profile visits, likes, comments, shares and similar), each post's figures, comments on the restaurant's own posts, audience summaries, and, where the restaurant has shared them, advertising spend and results. We keep every daily reading permanently so the record is complete, and we never change a figure after the platform has finished counting it.

To read these, the platform gives us an access token for the connected account. Tokens are stored encrypted and are used only to read that account. Disconnecting the account, or revoking our access inside the platform, ends our reading of it.

About the people who sign in

Name, email address, phone number, username, a scrambled (hashed) form of the password, an optional profile picture, which restaurants the person may see, when they signed in, and what they did in the staff workspace. If a person turns on the device lock, we store the public half of a passkey; the private half never leaves the person's device.

Questions and answers

The questions a person asks the assistant, the answers it gives, and the figures those answers were built from. A person may rename or delete their own chats.

Voice

If a person asks a question by voice, the recording is sent to our AI provider to be written down and then discarded. We keep neither the audio nor the words it contained, only a count of the transcription's length and cost.

Public information

For the content tools, we read the public profiles and posts of other restaurants ("rivals") that the restaurant's team chooses, and of creators who tag the restaurant. This is information those accounts have made public; we do not sign in to read it.

On your device

We store a session token so you stay signed in, and preferences such as the dark or light theme, in your browser. We do not use advertising cookies or trackers.

How we use it

• To show each restaurant its own performance, answer questions about it, and produce its monthly report.
• To send the emails the service needs: confirming an address, resetting a password, invitations, and, when the restaurant asks for it, the report itself.
• To keep the service secure and to know who changed what.
• To measure our own costs (for example how much the AI was used), in aggregate.

We do not sell data. We do not use one restaurant's data to serve another. We do not use your data to train AI models.

The AI

Answers and report text are produced by Google's Gemini API. To produce an answer we send the question, the conversation so far, and the restaurant's own figures that the answer needs. The AI is only allowed to quote figures our system gave it; it is never a source of numbers. Google processes this data under its API terms to produce the answer and does not use it to train its models.

Who else handles the data

Only the providers that run the service, each for its part and under its own terms:

• Meta (Facebook and Instagram), TikTok and Google Business Profile: the platforms whose data the restaurant connects.
• Google (Gemini API): the assistant's answers, report text and voice transcription.
• Supabase: the database and file storage. Render: hosting. Google Workspace: the mailbox that sends the service's emails. Apify: reading public pages for the content tools.

Within X Pulse, the staff assigned to a restaurant can see that restaurant's data in the workspace, but not its chats: a chat is seen only by the person who asked it. We may also disclose data if the law requires it.

How long we keep it

The daily record of a restaurant's figures is kept for as long as the restaurant is a client of X Pulse, because its value is in being complete. Chats a person deletes disappear from their account at once and are removed from our systems on request. When a connection is removed, its access token is deleted. When an account is closed, the person's details are removed; their name may remain in the activity log of the workspace.

Your choices and your rights

• Disconnect a platform at any time from the platform's own settings (for example Facebook → Settings → Business integrations, or the TikTok app → Settings → Security and permissions → Apps) or by asking us. We stop reading the account immediately.
• Delete your chats yourself, in the app.
• See, correct or delete what we hold about you or your restaurant: email yousuf@xpulseinc.com. We answer within 30 days. A restaurant that ends its work with X Pulse may ask for its whole record to be deleted; we confirm by email when it is done.

Data deletion requests from a platform. If you remove Owner Assistant from your Facebook, Instagram, TikTok or Google account, you may also ask us to delete the data we read from it by emailing the address above with the name of the restaurant and the account. We delete it and confirm.

Security

Everything travels over HTTPS. Passwords are stored only as scrambled hashes. Access tokens and mail credentials are stored encrypted. Sign-in can be protected with a passkey (Face ID, a fingerprint or the device's PIN). The staff workspace records who changed what.

Children

Owner Assistant is for businesses and the adults who run them. It is not meant for anyone under 18, and we do not knowingly collect data about them.

Changes

If this policy changes in a way that matters, we say so in the app and update the date at the top. The current version is always at owner-assistant.com/privacy.