Last updated 7 October 2026
Bluegrass Cookies operates a financial and operations platform used by Crumbl Cookies franchise owners to run their businesses. This policy explains what the platform collects, why, and what we do and do not do with it. It covers both our own use of the platform and its use by customers who license it.
Our customers are business owners. The data the platform handles is business data (sales, labor, inventory, vendor invoices, and business bank activity) belonging to the franchise that supplied it. We are not a consumer product and do not market to or sign up individual consumers.
Bank connections are made through Plaid Inc. When a customer connects an account, they authenticate directly with their bank through Plaid's interface. We never receive, see, or store banking usernames or passwords. Plaid's handling of that information is governed by the Plaid End User Privacy Policy.
Our access is read-only. The platform can read transactions and balances. It cannot initiate a payment, transfer, or any other movement of funds.
We use bank data for one purpose: reconciling what actually cleared against what the customer's books expect (vendor drafts, card-processor deposits, delivery-marketplace payouts, rent, payroll, and sales tax) and projecting cash position forward. We do not use it for advertising, credit decisioning, scoring, or any purpose unrelated to servicing the account that was connected.
A customer can disconnect a bank account at any time from the Connections page in the platform. Disconnecting revokes our access with Plaid and deletes our copy of the access credential. Transactions already imported into the customer's accounting records are retained, because they form part of that business's books.
A customer can connect a store's Google mailbox so the platform can read vendor invoices sent to that store and handle its customer-service email. The connection is made with Google's own sign-in. We never receive, see, or store the mailbox password.
The connection grants two permissions, and no others:
gmail.readonly). Used
to import vendor invoices and receipts into the customer's books, to bring
customer emails into the store's service queue, to record the catering and event
requests in those emails, and to import earlier mail for a date range the
customer chooses.gmail.send). Used only to send a reply to
a customer email, from the store's own address, after a member of the store's
team reviews and approves it.The platform cannot delete, move, label, or change any message in the mailbox.
How the data is used. Mailbox data is used only to provide these features to the customer who connected the mailbox. It is not used for advertising and is not sold. Our personnel do not read mailbox content unless the customer asks us to for specific messages, we need to investigate a security incident, or the law requires it.
Artificial intelligence. Some of these features use Google's Gemini models through Google Cloud Vertex AI. We send them only what each feature needs: the text of a customer email, to sort it by type, screen a donation request, and draft a reply; the text and attachments of a catering or event request, to read its date, size, and contact details; and the item descriptions on an imported vendor invoice, to match each item to the store's ingredient list. A drafted reply is not sent until a member of the store's team approves it. Under Google Cloud's terms, Google does not use this data to train or fine-tune its models. We do not use data received from Google Workspace APIs to develop, improve, or train generalized artificial intelligence or machine-learning models, and we do not send it to any other AI provider.
Who sees it. The customer's own team sees imported mail in the platform. When a customer connects a Slack workspace for customer service, each new customer email posts to that workspace as a notice with the sender's name or email address, the subject, a short summary, the drafted reply, and for a donation request the organization and its screening result. Mailbox data is not shared with anyone else except the service providers listed below.
What is stored. We store the messages the platform imports: vendor invoices with their attachments, and customer-service messages with the replies sent. Other mail stays in the mailbox and is not copied.
Disconnecting. A customer can disconnect a mailbox at any time from the Connections page in the platform, which revokes our access at Google and deletes our copy of the access credential. Access can also be removed from the Google account itself at myaccount.google.com/permissions. Invoices and customer-service records already imported are retained as part of that business's records while the customer's account is active. A customer can ask us to delete imported mailbox data at any time, and we delete it within 30 days of the request, except where a record must be kept by law.
Limited Use. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Bluegrass Cookies' use and transfer to any other app of information received from Google APIs will adhere to the same policy.
Only the service providers required to operate the platform, and only to the extent needed to do so: Google Cloud Platform (hosting, database, and secret storage, and the Vertex AI models that draft customer-service replies), Google Gmail (for mailboxes a customer connects), Slack (the customer's own workspace, where customer-service notices post when the customer connects one), Plaid (bank connectivity), Intuit QuickBooks Online (the customer's own accounting system), and the customer's own point-of-sale, scheduling, and payroll providers. We also disclose data where legally required.
Data is stored in Google Cloud in the United States, encrypted in transit and at rest. Access credentials, including Plaid access tokens and Google mailbox tokens, are held in Google Secret Manager under per-customer access controls, never in application databases or source code. Access to production systems is limited to personnel who need it. Each customer's data is stored in a separate database.
Business and accounting records are retained for as long as the customer's account is active, and afterward as needed to meet tax and accounting recordkeeping obligations. Bank and mailbox access credentials are deleted as soon as a connection is removed. A customer may request deletion of their data by contacting us; we will honor the request except where a record must be retained by law.
Customers may request access to, correction of, or deletion of their data, and may withdraw a bank or mailbox connection at any time. Email michael@bluegrasscookies.com and we will respond within 30 days.
If this policy changes materially we will update the date above and notify active customers by email.
Bluegrass Cookies
michael@bluegrasscookies.com