Privacy Policy

Introduction

At CloudBite, we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use and protect your information when you use our application. By using CloudBite, you accept the practices described in this policy.

Data We Collect

We collect the following types of information:

How We Use Your Data

We use your information to:

• Provide and maintain the service
• Process and manage your subscription with the store and RevenueCat
• Operate ordering, POS, kitchen, tables, cash register, inventory, staff, scheduling, payroll, and loyalty
• Record payments and refunds for physical goods or services through Stripe or Mercado Pago
• Send notifications about reservations, orders, feedback, and operations
• Generate your public menu website
• Process text, translations, OCR, and voice orders with artificial intelligence
• Send transactional emails
• Improve and personalize the experience
• Send important service communications
• Prevent fraud and abuse
• Comply with legal obligations

Data Sharing

We share data with the following service providers:

We do NOT sell your personal data to third parties.

Artificial Intelligence

CloudBite uses third-party AI services for:

• Menu digitization (OCR): images of your physical menu are sent to AI services to extract text, categories and prices
• Content generation: automatically generate text for dishes, stories, promotions and events
• Translations: your restaurant content can be automatically translated to other languages
• Review analysis: customer comments can be analyzed with AI
• Voice orders: audio and relevant menu context may be sent to convert an instruction into structured data

When using these features, the necessary data is sent to the AI provider to process the request. Processing, retention, and possible use to improve the service depend on the terms and configuration contracted with the provider. Generated content is a suggestion that you must review and approve before publishing or using it operationally.

Data Storage

Your data is stored on secure servers provided by Supabase. Files (images, logos) are stored in Supabase Storage. Data may be transferred and processed on servers located outside your country of residence, including the United States and the European Union. We implement industry-standard security measures to protect your data.

Data Security

We implement security measures including:

• Data encryption in transit (HTTPS/TLS)
• Credentials managed through Supabase Auth without storing passwords in plain text
• Role-based access policies (RLS)
• Secure authentication with JWT
• Regular backups

Although we take reasonable precautions, no system is 100% secure. We recommend using strong passwords and not sharing your credentials.

Your Rights

You have the right to:

To exercise these rights, contact us at cbiteapp@gmail.com.

Children's Privacy

CloudBite is a business tool intended exclusively for people aged 18 or older. We do not knowingly collect information from anyone under 18. If you are a parent or guardian and believe a minor has provided us with personal information, contact us to request its deletion.

Cookies and Tracking

The mobile application uses:

Our website may use cookies for basic functionality.

Push Notifications

We send push notifications for:

• New reservation requests
• New customer feedback
• Team invitations
• Important service updates

You can manage your notification preferences in Settings > Notifications or in your device settings.

Data Retention

We retain data while your account is active and as needed to provide the service. Before deleting an account, you must cancel any store subscription that is still set to renew. Once deletion is accepted:

• We initiate deletion of the account, restaurants, content, files, and associated operational data
• Transaction, security, fraud-prevention, or compliance records may be retained when legally required
• Backups and provider-held data are removed according to their applicable retention cycles
• Aggregated or de-identified analytics may be retained when it can no longer identify you

We may retain certain data if required by law.

Changes to This Policy

We may update this privacy policy occasionally. We will notify you of significant changes through:

• In-app notification
• Email
• Update of the "last updated" date

We recommend reviewing this policy periodically.