Privacy Policy

1. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our services:

Information You Provide:

• Account Information: Email address, full name, and password when you create an account
• Restaurant Information: Restaurant name, address, phone number, website, cuisine type, booking platform, and any other information you provide when claiming or managing your restaurant listing
• Payment Information: When you purchase subscriptions, payment information is processed by Stripe. We do not store your full payment card details on our servers.
• Campaign Data: Information about tracking links you create, campaigns you manage, and subscription details

Automatically Collected Information:

• Analytics Data: Page views, clicks (phone, address, website, hours), reservation requests, and how visitors interact with your restaurant page
• Tracking Information: Source of traffic, campaign attribution, referrer URLs, and device information (browser type, device type, IP address, operating system)
• Usage Data: How you interact with our dashboard, features used, and time spent on the platform
• Cookies and Tracking: We use cookies and similar technologies to track visitor behavior and improve our services

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your account registration and manage your restaurant listing
• Process payments for subscriptions
• Track and display analytics data in your dashboard (page views, clicks, reservation requests, traffic sources)
• Generate tracking links and attribute traffic to specific campaigns or sources
• Send you service-related communications (account updates, subscription information, analytics reports)
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service

3. How We Share Your Information

We may share your information in the following circumstances:

Service Providers:

We use third-party services to operate our platform:

• Supabase: For database storage and authentication (see Supabase's Privacy Policy)
• Stripe: For payment processing (see Stripe's Privacy Policy)
• Vercel: For hosting and platform infrastructure (see Vercel's Privacy Policy)

Public Information:

Your restaurant name, address, phone number, website, and other information you provide will be displayed publicly on your BiteReserve restaurant page. This page is designed to help potential diners find and contact your restaurant.

Legal Requirements:

We may disclose information if required by law or to protect our rights and safety, or that of our users.

Business Transfers:

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Data Storage and Security

Your data is stored securely using Supabase, a cloud database service. We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• IP address hashing for visitor analytics to protect privacy

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Update or correct your account and restaurant information through your profile settings
• Deletion: Request deletion of your account by emailing matthijs@2xgen.com with "Delete Account Request" in the subject line (see our Terms of Service for details)
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: You can opt out of certain data collection through your browser settings or cookie preferences

To exercise these rights, please contact us at matthijs@2xgen.com.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Analytics data is retained according to your subscription plan:

• Free Plan: 14 days of analytics history
• Pro Plan: 90 days of analytics history
• Business Plan: 365 days of analytics history

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or legitimate business purposes. Note that some anonymized analytics data may be retained for platform improvement purposes.

7. Children's Privacy

BiteReserve is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at matthijs@2xgen.com.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our services, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information (subject to certain exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise your California privacy rights, please contact us at matthijs@2xgen.com.

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent (where processing is based on consent)

To exercise your GDPR rights, please contact us at matthijs@2xgen.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: