Privacy Policy

1. Introduction

BeccaOS LLC ("Company", "we", "us") operates the Sonny8 AI-Powered Restaurant Platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting the privacy of restaurant owners, their staff, and their customers.

2. Information We Collect

2.1 Account Information

• Name, email address, phone number
• Business name, address, and type
• Payment information (processed by Stripe — we do not store card numbers)
• Authentication credentials (managed by Firebase Authentication)

2.2 Restaurant Data

• Menu items, pricing, and inventory
• Order history and transaction records
• Staff accounts and roles
• Business configurations and settings
• Analytics and performance metrics

2.3 Customer Data

• Customer names and contact information
• Order preferences and dietary restrictions
• Delivery addresses
• Loyalty points and rewards history
• Chat interactions with the AI assistant

2.4 Voice & AI Data

• Voice recordings (when voice ordering is enabled) — processed in real-time, not permanently stored
• Chat messages sent to the AI ordering assistant
• AI-generated order suggestions and responses

2.5 Automatically Collected Data

• Device type, browser, and operating system
• IP address and approximate location
• Usage patterns and feature interactions
• Performance and error logs

3. How We Use Your Information

• Provide the Service — Process orders, manage menus, run analytics, and enable AI-powered features
• Improve the Service — Analyze usage patterns to enhance features and fix issues
• Billing — Process payments, manage subscriptions, and send invoices
• Communication — Send service updates, security alerts, and support responses
• Security — Detect fraud, prevent abuse, and protect user accounts
• Legal Compliance — Meet regulatory requirements and respond to legal requests

4. Third-Party Services

We use the following third-party services that may process your data:

5. SMS & Text Messaging

Sonny8 sends SMS/text messages for order notifications, delivery updates, and service alerts. By providing your phone number and opting in:

• You consent to receive automated text messages related to your orders and account
• Message frequency varies based on order activity
• Message and data rates may apply
• You can opt out at any time by replying STOP to any message
• For help, reply HELP or contact support@beccaos.com
• SMS data is not shared with third parties for marketing purposes

6. Data Retention

• Account data — Retained while account is active + 30 days after deletion
• Order data — Retained for 3 years for business records and analytics
• Voice data — Processed in real-time, not permanently stored
• Chat logs — Retained for 1 year for quality and dispute resolution
• Analytics — Aggregated data retained indefinitely; individual data for 2 years

7. Data Security

We implement industry-standard security measures including: encryption in transit (TLS/HTTPS), encryption at rest (Firebase/Google Cloud), role-based access controls, regular security audits, and secure authentication via Firebase Auth with optional two-factor authentication. However, no method of transmission or storage is 100% secure.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — Request a copy of your personal data
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your personal data
• Portability — Request your data in a portable format
• Opt-out — Opt out of marketing communications
• Restrict processing — Request limitation of how we process your data

To exercise these rights, contact us at privacy@beccaos.com. We will respond within 30 days.

9. Cookies

We use essential cookies for authentication and session management. We use localStorage for theme preferences and UI state. We do not use third-party advertising cookies. Analytics cookies may be used to understand Service usage patterns.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

11. Multi-Tenant Data Isolation

Sonny8 is a multi-tenant platform. Each restaurant's data is logically isolated using workspace-level access controls. Restaurant owners can only access data within their own workspace. Customer data is associated with specific restaurant workspaces and is not shared across tenants.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

For privacy-related inquiries: