Privacy Policy

1. Introduction

BeccaOS LLC ("Company", "we", "us") operates a portfolio of AI-powered business tools, including the Sonny restaurant platform, Colony OS project orchestration, and other products accessible via beccaos.com and associated subdomains. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of our products and services (collectively, the "Services").

2. Information We Collect

2.1 Account Information

• Name, email address, phone number
• Business name, address, and type
• Payment information (processed by Stripe — we do not store card numbers)
• Authentication credentials (managed by Firebase Authentication)

2.2 Business Data

• Business configurations and operational data
• Orders, transactions, and customer records
• Staff accounts, roles, and activity
• Analytics and performance metrics

2.3 Customer Data

• End-customer names and contact information
• Order preferences and interaction history
• Delivery addresses
• Chat and voice interactions with AI assistants

2.4 Communication Data

• SMS and text message records (sent via our notification systems)
• Email communications related to orders and service updates
• Phone numbers used for notifications and alerts
• Message delivery status and opt-out preferences

2.5 Automatically Collected Data

• Device type, browser, and operating system
• IP address and approximate location
• Usage patterns and feature interactions
• Performance and error logs

3. How We Use Your Information

• Provide the Services — Process orders, manage business data, run analytics, and enable AI-powered features
• Communications — Send order confirmations, status updates, and service notifications via SMS, email, and push notifications
• Improve the Services — Analyze usage patterns to enhance features and fix issues
• Billing — Process payments, manage subscriptions, and send invoices
• Security — Detect fraud, prevent abuse, and protect user accounts
• Legal Compliance — Meet regulatory requirements and respond to legal requests

4. SMS & Text Messaging

Our Services may send SMS/text messages for order notifications, delivery updates, and service alerts. By providing your phone number and opting in to notifications:

• You consent to receive automated text messages related to your orders and account
• Message frequency varies based on order activity
• Message and data rates may apply
• You can opt out at any time by replying STOP to any message
• For help, reply HELP or contact support@beccaos.com
• SMS data is not shared with third parties for marketing purposes
• We use Twilio as our messaging provider — messages are transmitted securely

5. Third-Party Services

We use the following third-party services that may process your data:

6. Data Retention

• Account data — Retained while account is active + 30 days after deletion
• Order data — Retained for 3 years for business records and analytics
• SMS/notification records — Retained for 1 year for delivery verification
• Voice data — Processed in real-time, not permanently stored
• Chat logs — Retained for 1 year for quality and dispute resolution
• Analytics — Aggregated data retained indefinitely; individual data for 2 years

7. Data Security

We implement industry-standard security measures including: encryption in transit (TLS/HTTPS), encryption at rest (Firebase/Google Cloud), role-based access controls, regular security audits, multi-tenant data isolation, and secure authentication via Firebase Auth. However, no method of transmission or storage is 100% secure.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — Request a copy of your personal data
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your personal data
• Portability — Request your data in a portable format
• Opt-out — Opt out of marketing communications and SMS notifications
• Restrict processing — Request limitation of how we process your data

To exercise these rights, contact us at privacy@beccaos.com. We will respond within 30 days.

9. Cookies

We use essential cookies for authentication and session management. We use localStorage for theme preferences and UI state. We do not use third-party advertising cookies. Analytics cookies may be used to understand Service usage patterns.

10. Children's Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Services. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

For privacy-related inquiries: