Loading…
Last updated: [TO BE COMPLETED: publication date]
Valora AI (“Valora”, “we”) provides restaurant operating analytics to businesses. Our registered entity and address: [TO BE COMPLETED: legal entity name, registered address, and any EU/UK representative].
For data you upload or connect about your restaurant, you are the controller and Valora is a processor acting on your instructions. For your own account details and our marketing, Valora is the controller.
Account data. Name, work email, hashed password, business name, locations, role and access scope, and your subscription status.
Point-of-sale data. When you authorise Square, Clover or Toast, Valora reads transactional records from that provider:
Access is read-only. Valora does not receive card numbers, cardholder names or any payment credentials, and cannot move money, issue refunds or modify anything in your POS.
Usage data. Pages viewed, features used, approximate location derived from IP, browser and device type, and error diagnostics.
Communications. Emails you send us, demo bookings, and support requests.
[TO BE COMPLETED: confirm the lawful basis relied on for each purpose if serving UK/EU customers — typically contract for the first four, legitimate interests or consent for marketing]
Valora sends your operating metrics to Google’s Gemini API to generate written insight and recommendations. What is sent is aggregated business data — figures, trends and comparisons — not raw customer records.
Google processes this as our sub-processor. [TO BE COMPLETED: confirm and state whether your Gemini tier is excluded from model training, and link the applicable Google terms] This matters to operators and should be stated plainly rather than buried.
We use the following sub-processors. Each is bound to confidentiality and security terms.
We do not sell your data, and we do not share it with advertisers. [TO BE COMPLETED: confirm this list is complete against current production infrastructure]
Data is stored and processed in [TO BE COMPLETED: primary hosting region(s)]. If you are outside that region, your data is transferred there. [TO BE COMPLETED: state the transfer mechanism for UK/EU customers — Standard Contractual Clauses or equivalent]
We keep your data for as long as your account is active. After you cancel, we retain it for [TO BE COMPLETED: retention window, e.g. 30 or 90 days] so the account can be restored, and then delete or anonymise it. You can request earlier deletion at any time.
Billing records are kept longer where tax or accounting law requires it: [TO BE COMPLETED: statutory retention period].
No system is perfectly secure. If a breach affects your data we will notify you and any relevant regulator as required by law. [TO BE COMPLETED: notification timeframe commitment, e.g. within 72 hours of becoming aware]
Depending on where you are, you may have the right to access, correct, delete, export or restrict processing of your personal data, to object to processing, and to complain to a supervisory authority. To exercise any of these, email support@valoraai.us. We respond within [TO BE COMPLETED: response window, e.g. 30 days].
[TO BE COMPLETED: add the California-specific disclosures (CCPA/CPRA) if you have California customers, including the “do not sell or share” statement]
We use cookies that are necessary to keep you signed in, and [TO BE COMPLETED: confirm whether analytics or marketing cookies are in use — if so, a consent banner is required for UK/EU visitors].
Valora is a business tool and is not directed at anyone under 16. We do not knowingly collect their data.
We will post any material change here and update the date above. If the change meaningfully affects how we handle your data, we will tell you by email before it takes effect.