Privacy Policy

1. Information We Collect

Account information. When you sign up, we collect your email address and, if you sign in with Google, your name and profile information as provided by Google. If you sign up with email/password, we also store the restaurant name you provide.

Content you generate. We store the marketing content you generate through the Service (captions, review replies, menu descriptions, etc.) so you can access your history later.

Payment information. We do not collect or store your credit card details ourselves. Payments are processed by Paddle.com, our payment provider and Merchant of Record, who collects billing information directly. See Paddle's own privacy policy for details on how they handle this data.

Usage data. We track basic usage metrics (such as how many pieces of content you generate per month) to enforce plan limits and improve the Service.

2. How We Use Your Information

• To create and manage your account
• To provide the core functionality of the Service, including generating AI content on your behalf
• To process subscription payments and manage billing status
• To communicate with you about your account, service updates, or support requests
• To monitor and prevent misuse of the Service

3. Third-Party Services We Use

We rely on the following third-party providers to operate the Service. Each processes a limited set of your data solely to perform their function:

• Supabase — hosts our database and handles authentication (including Google Sign-In). Your account and content data are stored on Supabase's infrastructure.
• Google (Sign-In & Gemini API) — if you sign in with Google, Google provides us your basic profile info. Separately, the text prompts you submit to our AI generators are sent to Google's Gemini API to produce your generated content. We do not use your data to train any AI models.
• Paddle.com — our Merchant of Record for billing. Paddle handles checkout, payment collection, tax compliance, and subscription billing. We only receive subscription status (active/canceled) — never your full payment details.
• Resend — sends transactional emails, such as signup confirmations, on our behalf.
• Vercel — hosts our application infrastructure.

4. Data Retention

We retain your account and content data for as long as your account remains active. If you delete your account, we will delete your personal data and generated content within 30 days, except where we're required to retain records for legal, tax, or billing purposes (e.g., transaction records Paddle may retain independently).

5. Your Rights

You may access, update, or delete your account information at any time by contacting us at contact@mrpitchin.com. Depending on your location, you may have additional rights under applicable law (such as the right to data portability or to object to certain processing). Contact us and we will respond within a reasonable time.

6. Cookies

We use essential cookies to keep you logged in and maintain your session. We do not currently use third-party advertising or tracking cookies.

7. Data Security

We use industry-standard measures — including encrypted connections and access controls provided by Supabase — to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is intended for business use by restaurant owners and staff and is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at contact@mrpitchin.com.