Last updated: 4 November 2026
This notice describes the private Menara Booking Support application and its handling of Google user data for customer service. It concerns this email assistance application, rather than every service on the business website.
With the mailbox operator’s permission, the application reads relevant Gmail messages, sender and reply addresses, message references, customer text, activity details and booking references when present. It checks previous sent messages to avoid duplicate replies and to recognize human intervention. It uses Gmail sending permission to reply to customers and send internal alerts.
Limited message text is sent to the OpenAI API to classify the request and response language. The application removes recognizable email addresses, phone-like numbers, booking references and web links from this classifier input. This is not complete anonymization: names, addresses or other personal information may remain in the text. The application requests no storage of the model response through the API’s store setting. The API provider’s own applicable data handling terms also apply. The application does not use customer mail to train its own general-purpose AI models.
Information is used for customer support. Cases needing human intervention are emailed to the relevant authorized activity team, including the activity name and ID, the customer’s name and booking reference when available, and the customer’s message. Google provides the mailbox and email transport. The operator’s hosting provider stores the application and its operational records when the application is hosted. Customer information is not sold or used by this application for advertising.
The application keeps private case and message identifiers, delivery records and queued email content to prevent repeated replies and support human review. Human replies visible in the connected mailbox may be retained as private question-and-answer examples for review. Only an operator-approved general answer can be reused as a FAQ for the same activity and option; individual booking details are not automatically turned into general answers. OAuth credentials and the model API key are kept separately from public source code. Operational records and any backups are for authorized operators, not public website visitors.
No automatic deletion deadline is currently configured for the operational case database. Mailbox messages follow the mailbox operator’s retention practices. Contact the operator to request review, correction or deletion of application records. Any removal must account for necessary delivery reconciliation and records that must be retained; deleting application records does not itself delete Gmail messages or records held separately by service providers.
The mailbox operator can revoke the application’s access through the Google Account’s third-party connections settings. Revocation stops future authorized mailbox access, but does not by itself erase existing operational records. The application requests Gmail read-only and send permissions, not permission to delete messages or modify mailbox labels.
Use and transfer of information received from Google APIs follow the Google API Services User Data Policy, including its Limited Use requirements.
For questions about this application or its data handling, contact contact@menaraquadmarrakech.com.
