Privacy Policy

1. Information We Collect

Information you provide directly: name, email address, business name, payment information, menu content, customer records you register on the platform, and any other information you send us when creating an account, using the Service, or communicating with us.

Information we collect automatically: technical data such as IP address, device type and operating system, browser, pages visited, session duration, and other usage metrics that help us operate and improve the Service.

Information from third parties: when you integrate third-party services (such as Stripe for payments), we may receive data necessary to complete the integration, as permitted by that third party's policies.

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain the Service.
• To process transactions and manage your subscription.
• To authenticate users and protect account security.
• To send you Service-related communications (updates, alerts, support).
• To send you marketing communications if you have given your consent (see section 8).
• To analyze Service usage in order to improve it and develop new features.
• To comply with legal obligations and resolve disputes.

We do not use your data for third-party advertising, nor do we sell it under any circumstances.

3. How We Share Your Information

Gastriva does not sell your personal information. We may share it only in the following cases:

Service providers: we share data with third parties that help us operate the Service, such as payment processors (Stripe), cloud infrastructure providers (AWS), and analytics tools. These providers may only use your data to provide their services to us and are subject to confidentiality obligations.

Legal requirement: we may disclose information when required by law, court order, or competent authority.

Protection of rights: we may disclose information when necessary to protect the rights, property, or safety of Gastriva, our users, or the public.

Business transfer: in the event of a merger, acquisition, or asset sale, your information may be transferred to the new owner, who will be subject to this policy or an equivalent one.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service. Essential cookies are necessary for basic operation (authentication, session) and cannot be disabled without affecting the Service.

We may use analytics cookies to understand how the Service is used and improve its performance. You can disable these cookies in your browser settings, though this may affect your experience.

We do not use tracking cookies for third-party advertising.

5. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide the Service.

After account cancellation, we retain your data for 30 days to allow you to request an export. After that period, we delete or anonymize the data, unless the law requires us to retain it longer (e.g., tax records).

Access data and security logs may be retained for longer periods as required by our security and regulatory compliance obligations.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS), role-based access controls, and storage in secure environments. However, no system is completely infallible; in the event of a security breach affecting your data, we will notify you as required by applicable law.

7. Third-Party Services

The Service integrates with external providers whose privacy policies apply independently of ours. These include: Stripe (payment processing), Apple Inc. and Google LLC (mobile app distribution), and AWS (cloud infrastructure). We encourage you to review the privacy policies of these providers.

8. Marketing Communications

We will only send you marketing communications if you have given your explicit consent. You may withdraw that consent at any time by clicking the "Unsubscribe" link in any marketing email, or by contacting us directly. Transactional communications related to your account (invoices, security alerts, Service updates) do not require consent and will continue to be sent while you have an active account.

9. Children's Privacy

The Service is intended exclusively for businesses and individuals aged 18 and over. We do not knowingly collect personal information from minors under 18. If you are aware that a minor has provided us with personal data, please contact us so we can delete it.

10. International Data Transfers

Gastriva operates from Puerto Rico (United States). Your data may be stored and processed on servers located in the United States. By using the Service, you consent to your data being transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

11. Your Rights

Under applicable law, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal information.
• Object to certain processing of your data.
• Request portability of your data in a machine-readable format.
• Withdraw your consent at any time (without affecting the lawfulness of prior processing).

To exercise any of these rights, contact us at the address below. We will respond within a reasonable timeframe as required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via a notice in the Service or by email at least 15 days in advance. Continued use of the Service after the changes take effect constitutes your acceptance of the updated policy.

13. Contact