Privacy policy

Effective October 2, 2026

My Greek Shop LLC, doing business as Yiaya Greek Yogurt, operates this application to manage its yogurt shop staffing, scheduling, employee onboarding, operational reports, and recruiting. This policy covers information handled by Yiaya Greek Yogurt Operations, including its connected accounts and interview pages.

Information we collect

We process account identifiers and email addresses for sign-in; employee names, contact details, availability, schedules, timecards, breaks, attendance, onboarding forms, signed documents, and training details; applicant names, contact details, application messages, availability, and interview responses; and business sales and payment information retrieved from connected Toast accounts. Features may also record delivery status, errors, and timestamps to operate and troubleshoot the service.

If you use a recorded interview, we collect the audio and video you submit, transcripts, and generated summaries and ratings. The interview asks for camera and microphone access. Interview information is available for review by authorized business staff; it is not published on the public privacy page.

Connected Gmail accounts

The account owner chooses whether to connect Gmail. The application requests permission to read Gmail messages and send email. It reads relevant hiring and operational messages, including message content, sender and recipient details, subjects, and timestamps, to import applicant replies and support the displayed business workflows. It sends authorized messages such as shift reminders, attendance and break notices, availability requests, onboarding documents, applicant invitations, interview confirmations, and manager review links.

Gmail permissions can technically allow reading other mailbox messages; the application's business workflows use relevant messages rather than displaying a general public inbox. We store account addresses and encrypted authorization tokens so approved background tasks can continue without repeated sign-in. Imported messages and delivery records may be retained in the application. The application does not need or store your Google password.

How information is used and shared

We use information to operate the features above, communicate with employees and applicants, support manager review, maintain business records, and diagnose failures. Relevant information is shared with the business owner and designated managers, and with the intended recipients of authorized emails. Review and interview links provide access to their associated records and should be treated as private.

Service providers process information needed to deliver these features: Google for connected Gmail access and email delivery, Toast for connected workforce and business records, Cloudflare for application hosting, database and recording storage, and OpenAI for application hosting and AI interview processing. Recorded answers are sent to the OpenAI API for transcription; interview transcripts and relevant applicant details are processed for interview responses, summaries, and ratings. Video recordings are stored for business review. These providers also have their own privacy terms.

We do not sell personal information or use connected Google account information for advertising. Yiaya Greek Yogurt Operations' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data to develop, improve, or train generalized AI or machine learning models. Human access to Google user data is limited to authorized feature use, user-authorized support, security needs, or legal obligations as permitted by that policy.

Storage, security, and retention

Application records are stored in cloud databases and interview recordings in cloud object storage. Stored integration tokens and API keys are encrypted. Passwords are stored as salted scrypt hashes. Sign-in sessions use secure, HttpOnly cookies and expire after seven days. Repeated login attempts are limited. Owner functions require sign-in, and applicant and manager pages use private access links. No system can guarantee absolute security.

Records are kept as needed for recruiting, employment administration, business operations, and applicable recordkeeping obligations. There is currently no automatic deletion schedule for all records. Disconnecting an account or revoking access stops future access but does not automatically erase information already imported or emails already delivered.

Your choices and requests

You can revoke Gmail access in your Google Account connections settings. You can decline camera or microphone permission and contact the business about an alternative interview arrangement. To request access, correction, or deletion of information, or ask a privacy question, email hiring.greekshop@gmail.com. We may verify your identity before handling a request and may retain records where needed for legal or business recordkeeping obligations.

Company and notices

My Greek Shop LLC, DBA Yiaya Greek Yogurt

22900 Ventura Blvd #100, Woodland Hills, CA 91364 Attn: Shane Shalev Phone: (818) 654-5703

Policy updates

Changes will be posted on this page with an updated effective date. Material changes to connected account data use will be disclosed before that new use begins.