1. Introduction
Bite Analytics ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect information when you visit biteiq.ai and purchase the Bite IQ Revenue Leak Audit (the "Service"). This Policy applies to all visitors and customers of the Service. It works alongside our Terms of Service at biteiq.ai/terms.
2. Information We Collect
We collect only the information necessary to deliver the Service. Information you provide at checkout includes: email address (for delivery of the audit and support communication); name (if provided during Stripe checkout); business identifier (a Google Maps "place_id" representing the publicly listed venue you select for analysis); segment classification (one of eight operator types); primary operational concern (one of five categories); how long the property has been open (range); whether a prior operational analysis has been commissioned (yes/no); and billing market (international or Mexico). Information automatically collected when you visit biteiq.ai includes: standard server-log information (IP address, browser type, pages visited, timestamps, referring URL); cookies strictly necessary for functioning of the site (we do NOT use advertising or remarketing cookies). Payment information is collected and processed directly by our payment processor. We do NOT receive, see, or store your credit card number, CVC code, or banking details. We do NOT collect or have access to: internal financial statements, point-of-sale data, reservation system data, payroll data, internal operational KPIs, proprietary business records, social security numbers, government-issued ID numbers, health information, biometric data, sensitive personal information as defined under CCPA/CPRA, or information from individuals under 16 years of age.
3. Public Data We Analyze
To generate the audit, we analyze publicly available data associated with the business identifier you provide. This public data may include: publicly listed business name and address, publicly listed aggregate guest rating, publicly listed total review count, and publicly listed text of guest reviews. We do not collect or store the personal identifiers of guests who left public reviews. The review text is processed analytically for operational pattern recognition and is not retained in identifiable form once the audit is generated.
4. How We Use Your Information
We use the information described in Section 2 solely to: (a) generate, deliver, and support your audit; (b) send the audit PDF to your email; (c) respond to support inquiries, refund requests, and feedback; (d) maintain operational records for tax, accounting, and legal compliance; (e) improve the Service through aggregate, de-identified analysis. We do NOT use your information for advertising or remarketing, sale to third parties for commercial gain, sharing with data brokers, building behavioral profiles, or training third-party machine-learning models outside the scope of generating your specific audit.
5. Information Shared with Service Providers
To operate the Service, we share limited and necessary information with service providers under written data processing agreements. These service providers process information only on our behalf and may not use the information for their own commercial purposes. Categories of service providers include: payment processors, analytical infrastructure providers, public data extraction services, document generation services, email delivery platforms, and workflow orchestration platforms. All service providers are bound by contract to use your information only for the purposes we direct, maintain confidentiality and security, and notify us if they can no longer meet these obligations. Upon written request to intelligence@biteiq.ai, individual consumers may receive a list of the specific service providers handling their data.
6. We Do Not Sell or Share Personal Information
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not share your personal information with advertising networks or data brokers. The only "sharing" that occurs is with service providers as described in Section 5, which under CCPA/CPRA constitutes "disclosure for a business purpose" and not "sale" or "sharing" as those terms are defined under California law.
7. Data Retention
We retain information only as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required by law. Audit content and Audit ID are retained for verification purposes. Email address and checkout information are retained for up to 7 years for tax and accounting compliance. Server logs are retained for up to 90 days. Public review data processed for the audit is not retained in identifiable form once the audit is generated. After the retention period expires, information is securely deleted or de-identified.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information: right to know, right to access, right to correct, right to delete, right to opt-out of sale or sharing (not applicable here — we do not sell or share), and right to non-discrimination. To exercise any of these rights, contact intelligence@biteiq.ai with the subject line "Privacy Request". We will respond within 7 business days and verify your identity before processing the request.
9. Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, or alteration. These measures include encrypted data transmission (HTTPS), access controls, and contractual security obligations with all service providers. No system is completely secure. In the event of a data breach that affects your rights and freedoms, we will notify you and applicable authorities as required by law.
10. International Data Transfers
Bite Analytics is operated from México. Your information may be processed or stored by our service providers in the United States or other countries where they maintain infrastructure. By using the Service, you consent to the transfer of your information to these locations. Where required by applicable law (e.g., GDPR for EU residents), we ensure that appropriate safeguards are in place for international data transfers, including standard contractual clauses.
11. Children's Privacy
The Service is intended for business operators and is NOT directed at individuals under 16 years of age. We do not knowingly collect personal information from individuals under 16. If we discover that we have collected personal information from an individual under 16, we will delete that information promptly. Parents or guardians who believe their child has provided us with information should contact intelligence@biteiq.ai.
12. Cookies and Tracking
biteiq.ai uses minimal cookies: essential cookies necessary for the site to function (e.g., maintaining your selection during checkout) and functional cookies to remember your form inputs during a session. We do NOT use advertising cookies, remarketing pixels (no Facebook Pixel, no Google Ads remarketing), third-party analytics that build behavioral profiles, or cross-site tracking technologies. You can configure your browser to block or alert you to cookies. Note that disabling essential cookies may prevent the site from functioning properly.
13. Third-Party Links
The Service and the delivered audit may contain links to third-party websites (e.g., academic research sources, industry benchmark publications). We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party site you visit.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this document. For material changes, we will notify affected customers via email. Continued use of the Service after publication of the updated Policy constitutes acceptance of the changes.
15. California Residents — Additional Disclosures (CCPA/CPRA)
This section provides additional information for California residents under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act (CPRA). Categories of personal information collected in the prior 12 months: identifiers (email, name, IP address), commercial information (purchase records), internet activity (limited server logs), geolocation (limited to general region from IP), and business-context information (segment, volume, spend, concern signals). We do NOT collect sensitive personal information as defined under CPRA. We do not sell or share personal information for cross-context behavioral advertising. No "Do Not Sell or Share" link is required because no sale or sharing occurs. To exercise rights granted by CCPA/CPRA, contact intelligence@biteiq.ai as described in Section 8. California residents may designate an authorized agent to make requests on their behalf.
16. European Union Residents (GDPR)
For residents of the European Union, the United Kingdom, and the European Economic Area, the legal bases for processing your personal information are: performance of a contract (to deliver the audit you purchased), legitimate interests (to operate, support, and improve the Service), compliance with legal obligations (tax, accounting, and regulatory record-keeping), and consent where specifically requested. You have the right to access, correct, and delete your personal information; object to or restrict processing; data portability; withdraw consent at any time; and lodge a complaint with your national supervisory authority. To exercise these rights, contact intelligence@biteiq.ai.
17. Contact
For questions about this Privacy Policy or our data practices: Bite Analytics · intelligence@biteiq.ai (subject line: "Privacy Inquiry") · biteiq.ai · We will respond within 7 business days.