Privacy Notice

Effective 29 August 2026 · Version 2026-08-29

Who we are

ROB Hospitality Technologies Corp., trading as ROB, is the data controller for the personal data described here. We decide what is collected and why. Contact us at support@restaurantownerbuddy.com.

What we collect and why

• Account details — name, email, phone, sign-in credentials. Used to create and secure your account. Legal basis: performance of our contract with you.
• Restaurant profile — restaurant name, role, location, seats, service type, seasonality, timezone. Used so ROB's answers fit your business. Basis: contract.
• Conversations and memories — what you say or type to ROB, his replies, saved facts, reminders and session notes. Used to provide the service and keep continuity between conversations. Useful restaurant and working facts may be saved automatically. Sensitive personal details, including health, family, intimate matters, and personal financial distress, are not promoted into cross-conversation memory unless you explicitly ask ROB to remember them. Basis: contract.
• Voice recordings — short audio of your turns, sent for transcription and not retained as audio afterwards. Basis: contract.
• Community content — your public display name, city and country, forum posts, replies and direct messages to other owners. Basis: contract.
• Connected services — credentials and data you choose to connect, such as your point-of-sale sales figures. Basis: consent, withdrawn by disconnecting.
• Usage and technical data — device and browser information, IP address, error and usage logs. Used for security, fraud prevention and improving the product. Basis: legitimate interests.
• Support messages — what you send us. Basis: legitimate interests.
• Marketing — only where you have opted in. Basis: consent, withdrawable at any time.

Privacy-safe product and discovery analytics

We measure a short, fixed list of product actions — such as finishing signup, completing a conversation turn, ending a conversation, viewing one of ROB's public information pages, or selecting its signup link — so we can tell whether ROB is working and whether owners can find it. Public discovery events contain only a fixed page category and a broad source category, such as Google, Bing, ChatGPT, Perplexity, Claude, direct, or other. Exact page URLs, referrer URLs, search terms, and query strings are discarded. All events are anonymous and content-free: they are not linked to your ROB account or profile, and they never include audio, transcripts, messages, ROB's answers, uploaded files, names, emails, restaurant names, or invitation codes. Our analytics provider still assigns its own anonymous device and session identifiers, and your IP address is discarded rather than stored. There is no session recording, no automatic click tracking, and no advertising use.

Who we share it with

• Service providers — hosting, database, and the AI providers that generate ROB's replies and transcribe your speech, acting on our instructions.
• Paddle, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Other owners — but only the content you deliberately publish or send in the ROB Community. Your private conversations with ROB are never shared with other members.
• Professional advisers (legal, accounting) and authorities where we are required by law.

We do not sell personal data.

Google user data

ROB no longer connects to Google Calendar, Gmail, Google Sheets or Google Drive. Any connections made previously have been revoked at Google and the stored connection records deleted from our side. If you sign in with Google, we receive only your email address for the purpose of signing you in.

How long we keep it

Account and conversation data is kept while your account is open and for up to 30 days after it closes, so you can come back or export it, after which it is deleted or anonymised. Records we must keep for legal, tax or accounting reasons are kept for as long as the law requires.

Your rights

Depending on where you live, you can ask for a copy of your data, correct it, have it deleted, limit or object to how we use it, receive it in a portable form, or withdraw consent. Write to support@restaurantownerbuddy.com and we'll respond within one month. If you are in the UK or EEA you can also complain to your supervisory authority. Where data is transferred outside the UK/EEA we rely on adequacy decisions or standard contractual clauses.

Security

We use appropriate technical and organisational measures — encryption in transit, access controls, per-account isolation of your data at the database level, and server-side handling of any credentials you connect.

Cookies

We use essential cookies and local storage to keep you signed in and remember preferences such as your microphone choice and layout. These are required for the service to work. We do not use advertising cookies. You can clear them in your browser at any time, which will sign you out.