1. Introduction

KitchenPulse ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our restaurant operations management platform.

By using KitchenPulse, you consent to the data practices described in this policy.

2. Information We Collect

Information You Provide

• Account Information: Name, email address, phone number, role, and password
• Company Information: Restaurant name, locations, business details
• Operational Data: Inventory items, recipes, menu items, catering orders, feedback
• Payment Information: Processed securely through Stripe (we do not store card numbers)

Information Collected Automatically

• Usage Data: Features used, pages visited, actions taken
• Device Information: Device type, operating system, browser type
• Log Data: IP address, access times, error logs

Information from CSV uploads

• POS sales & labor CSVs: Files you upload yourself (daily sales totals, labor hours, menu-item performance). We do not connect to your POS directly and we never receive customer payment details.

3. How We Use Your Information

4. Data Sharing

We do not sell your personal data. We may share information with:

• Service Providers: Companies that help us operate (hosting, payment processing)
• Integrated Services: Stripe (only as authorized by you)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS)
• Encrypted password storage (bcrypt hashing)
• Regular security audits
• Access controls and authentication
• Rate limiting to prevent abuse

While we strive to protect your data, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account termination:

• Personal data is deleted within 30 days
• Operational data is anonymized or deleted within 90 days
• Backup data is removed within 180 days
• Some data may be retained for legal compliance

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data
• Portability: Export your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your data

You can exercise the deletion and portability rights yourself, without contacting us, from Settings → Privacy & your data inside the app:

• Request export queues a JSON archive of your account data and emails you a download link (link expires after seven days).
• Delete my account requires you to type the word DELETE to confirm. It signs you out of every device, erases your personal identifiers (name, email, phone, avatar) from our active systems within 30 days, and cancels any pending exports. Operational records that other people rely on (feedback, schedules, training history) are retained but no longer reference you.

For any other request — correction, restriction, objection — contact us at privacy@kitchenpulse.app.

8. Cookies and Tracking

We use essential cookies for:

• Authentication and session management
• Security and fraud prevention
• Remembering your preferences

We do not use advertising or tracking cookies.

9. Children's Privacy

KitchenPulse is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

10. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

11. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell data)
• Right to non-discrimination for exercising rights

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the Service. The "Effective Date" at the top indicates the last revision.

13. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@kitchenpulse.app

You may also contact your local data protection authority if you have concerns about our data practices.