◍ Privacy Policy

Your kitchen's data stays yours.

Last updated: [EFFECTIVE DATE]
⚠️ DRAFT — for your lawyer's review before publishing. This is a working draft written from how Lowboy actually handles data; it is not legal advice. Have a licensed attorney review and finalize it, and replace every [BRACKETED] field: legal entity name, effective date, and governing-law location.

1Who we are

Lowboy is a food-cost and kitchen-operations tool operated by [LEGAL ENTITY NAME] ("Lowboy," "we," "us," or "our"). This Privacy Policy explains what information we collect when you use our website, apps, and services (together, the "Service"), how we use it, and the choices you have.

By using the Service, you agree to this Policy. If you don't agree, please don't use the Service.

2What we collect

Information you give us

  • Account details — your name, email address, restaurant/business name, role, and password (stored in hashed form).
  • Billing details — your plan and billing history. Payment card numbers are entered into and handled by our payment processor; we do not store full card numbers on our own systems.
  • The kitchen data you bring — the heart of the Service. This includes photos you snap (invoices, menus, prep lists, whiteboards, count sheets, delivery labels, and similar paper), the text extracted from them, and the recipes, ingredients, vendor prices, counts, pars, prep records, checklists, and cost figures you or your team enter or generate.
  • Communications — messages you send us (support requests, demo inquiries) and your responses to us.

Information from connected services

  • Point-of-sale (POS) data — if you connect a POS such as Square, we receive the catalog, item, and sales data you authorize, so the Service can compute food cost and related metrics. We access only what you grant and use it only to run the Service for you.

Information collected automatically

  • Usage & device data — basic log data such as pages viewed, features used, approximate location from IP, browser/device type, and timestamps, to keep the Service working and improve it.
  • Cookies & similar technologies — used to keep you signed in, remember preferences, and understand usage. You can control non-essential cookies through your browser or any cookie controls we provide.

3How we use it

We use the information above to:

  • Provide, operate, and maintain the Service — including reading your snaps, computing food costs, pars, prep forecasts, and the insights the Service is built to deliver.
  • Set up and manage your account and your team's access.
  • Process your subscription, billing, and any refunds.
  • Respond to your requests and provide support.
  • Send you service messages (receipts, security notices, product updates) and, where permitted, occasional marketing you can opt out of.
  • Monitor, secure, debug, and improve the Service.
  • Comply with law and enforce our terms.
We don't sell your data. We do not sell your personal information or your kitchen data, and we do not share it with third parties for their own advertising.

5When we share it

We share information only in these situations:

  • Within your account — your team members see the shared kitchen data appropriate to their role, by design.
  • With service providers — vendors who help us run the Service (see the next section), bound by contracts limiting their use of the data.
  • For legal reasons — to comply with law, respond to lawful requests, or protect the rights, safety, and property of Lowboy, our users, or the public.
  • In a business transfer — if we're involved in a merger, acquisition, or sale of assets, data may transfer as part of that deal, subject to this Policy.
  • With your direction — anytime you ask us to share it or connect a service.

6Service providers we rely on

We use a small set of trusted providers to run the Service. Typical categories include:

  • Payments — [e.g., Stripe], to process subscriptions and refunds.
  • Hosting & infrastructure — [hosting provider], where the Service and your data are stored.
  • POS integrations — Square (and other POS providers as we add them), for the data you connect.
  • Image/text processing — providers that help turn your snaps into structured line items.
  • Email & support — [email/support tools], to communicate with you.
  • Analytics & error monitoring — [analytics tools], to keep the Service reliable.

Confirm and list your actual providers here before publishing.

7How long we keep it

We keep your information for as long as your account is active and as needed to provide the Service. After you close your account, we delete or de-identify your data within a reasonable period, except where we must keep certain records (for example, billing records) to comply with law, resolve disputes, or enforce our agreements. You can ask us to delete your data sooner — see your rights below.

8How we protect it

We use reasonable technical and organizational safeguards — including encryption in transit, access controls, and hashed passwords — to protect your information. No method of transmission or storage is perfectly secure, so we can't guarantee absolute security, but we work to protect your data and to notify you as required if a breach affects it.

9Your choices & rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can also:

  • Update most account and kitchen data directly in the app.
  • Opt out of marketing emails using the unsubscribe link (service messages will still be sent).
  • Control cookies through your browser.
  • Ask us to export or delete your data by contacting us.

We won't discriminate against you for exercising these rights. To make a request, email us at the address below; we may need to verify your identity first.

10California privacy

If you're a California resident, the California Consumer Privacy Act (as amended) gives you rights to know what personal information we collect, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under California law. You may exercise your rights using the contact details below, and you may use an authorized agent. We will not discriminate against you for exercising these rights.

11Children

The Service is built for businesses and is not directed to children under 16. We don't knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.

12Changes to this Policy

We may update this Policy from time to time. When we make material changes, we'll update the "Last updated" date and, where appropriate, notify you in the app or by email. Your continued use of the Service after changes take effect means you accept the updated Policy.

13Contact us

Questions about this Policy or your data? Reach us at hello@getlowboy.com, or write to [LEGAL ENTITY NAME + MAILING ADDRESS].