Privacy Policy

1. Information We Collect

a. Account information. When you register, we collect your name, email address, and password (stored as a one-way hash). If you sign in using a third-party provider (Google or LinkedIn), we receive your name and email address from that provider — we do not receive or store your third-party password.

b. Organization data. We collect the business name, cost targets, recipes, ingredients, and invoice data you enter into the platform.

c. Usage data. We automatically collect certain technical data, including your IP address, browser type, pages visited, and actions taken within the platform, to operate and improve the service.

d. Payment information. Payments are processed by Stripe. We do not store your full payment card number. We receive confirmation of payment and your billing email from Stripe.

2. How We Use Your Information

• To provide and maintain the BOH Brain platform
• To authenticate your identity and manage your account
• To process payments and manage your subscription
• To send transactional emails (account creation, billing, password reset)
• To improve our AI invoice parsing and cost calculation features using anonymized, aggregated data
• To respond to support requests and communicate product updates
• To detect and prevent fraud or unauthorized access

We will not sell your personal information or use your proprietary business data (recipes, pricing, financial records) to train AI models or share it with other users in any identifiable form.

3. Third-Party Sign-In (Google & LinkedIn)

You may choose to sign in using your Google or LinkedIn account. When you do, those providers authenticate your identity and share your name and email address with us. We use this information solely to create or access your BOH Brain account.

Your use of Google sign-in is subject to Google's Privacy Policy. Your use of LinkedIn sign-in is subject to LinkedIn's Privacy Policy.

BOH Brain does not post to your Google or LinkedIn accounts, access your contacts, or request any permissions beyond basic profile identification.

4. Data Sharing

We do not sell your personal data. We may share your information only in the following limited circumstances:

• Service providers: We use third-party vendors (including Stripe for payments, Resend for email, and Neon for database hosting) who process data on our behalf under confidentiality obligations.
• Team members: If your organization has multiple users, members of your organization can access shared data within your workspace.
• Legal compliance: We may disclose information if required by law, court order, or to protect the rights and safety of BOH Brain or others.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes.

6. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls to protect your data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of non-essential marketing communications

To exercise any of these rights, contact us at support@bohbrain.com.

8. Children's Privacy

BOH Brain is intended for use by adults operating food and beverage businesses. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected data from a minor, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on the Website and, where appropriate, by email. Your continued use of the platform after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: