Privacy Policy

1. Data We Collect

We collect the following categories of data:

1.1 Information You Provide

• Email address
• Chat messages
• Uploaded photos (including menu images)
• Preferences (budget, spice level, etc.)

1.2 Automatically Collected Data

• Device and browser information
• IP address
• Geolocation (when Maps features are used)
• Cookies and usage analytics

1.3 Billing Data

Processed exclusively by Stripe. We do not store full payment card numbers.

2. How We Use Data

We process your data to:

• Provide AI-based chat and recommendations
• Perform restaurant search based on your location
• Translate menus and analyze dishes
• Operate and improve the Service
• Detect abuse and ensure safety
• Process payments
• Provide customer support
• Comply with legal obligations

3. AI Data Processing

Your data (chat content, photos, text) may be transmitted to third-party AI providers for processing, including:

• OpenAI (via Vercel AI Gateway) – text and image processing
• Google Maps API – place search and geodata

AI providers process data solely to deliver requested outputs. We do not use your data to train third-party models.

4. Third-Party Services We Use

• Vercel (hosting, routing, AI Gateway)
• OpenAI (AI inference)
• Google Maps API
• Stripe (payments)
• Postgres database
• Analytics: Google Analytics (GA4), Plausible, LogSnag

Each service may collect data in accordance with their policies.

5. Data Retention

• Chat history: retained indefinitely unless deletion is requested
• Login data: retained while account is active
• Analytics: retained according to each provider's schedule

6. Data Deletion

You may request deletion of:

• Your account
• Chat history
• Any uploaded data

Requests should be sent to hi@foodsens.ai.

7. Security

We implement reasonable physical, technical, and administrative safeguards to protect your data.

However, no system is 100% secure, and we cannot guarantee absolute security.

8. Your Rights (GDPR & International)

You have the right to:

• Access your data
• Request correction
• Request deletion
• Withdraw consent (where applicable)
• Lodge a complaint with your local authority

9. International Transfers

Data may be processed in Hong Kong, the United States, or other jurisdictions where our providers operate. We use appropriate safeguards where required.

10. Updates

We may update this Privacy Policy at any time. Updates are effective when posted.