This Privacy Notice explains how Jason Lee Ruiz-Gonzalez ("we", "us", the "Seller") collects, uses, and shares personal data when you use BarBoost AI (the "Service"). We act as the data controller for the personal data we process about you.
1. Data we collect
- Account data: name, email, hashed password or OAuth identifiers.
- Business data: restaurant/venue name, cuisine, menu, hours, brand voice, uploaded assets.
- Usage data: generations, prompts, telemetry, feature interactions, IP address, device and browser identifiers.
- Support data: messages you send us and their metadata.
2. How we use it
- Provide, maintain and improve the Service (contract performance).
- Authenticate accounts and prevent fraud/abuse (legitimate interests, legal obligation).
- Send transactional email (contract performance) and, with consent, marketing.
- Analytics and product improvement (legitimate interests).
- Customer support (contract performance).
3. Who we share it with
- Paddle — our Merchant of Record for payments, subscription management, tax compliance and invoicing.
- Hosting & infrastructure providers — cloud hosting, database, and email delivery subprocessors.
- AI model providers — to generate content from your prompts.
- Analytics providers — aggregated product analytics.
- Professional advisers — legal, accounting.
- Authorities — where legally required.
4. International transfers
Data may be processed outside your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
5. Retention
We keep account and business data while your account is active and for up to 12 months after closure, then delete or anonymise it. Backups are cycled on a rolling basis. Legal, tax and dispute records may be retained longer where required.
6. Your rights
Depending on your location, you may have the right to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent. You may lodge a complaint with your local supervisory authority. We aim to respond within 30 days.
7. Security
We use appropriate technical and organisational measures including encryption in transit, access controls, and audit logging. No system is perfectly secure — you use the Service at your own risk.
8. Cookies
We use essential cookies to keep you signed in and to remember preferences. With consent (where required) we may use analytics cookies. You can manage cookies in your browser.
9. Contact
Privacy requests: privacy@barboostai.net