Back to home

Privacy Notice

Last updated: 2026

1. Data controller

Autory acts as the controller of the personal data of the service's user accounts. Contact: contactautory@gmail.com.

2. Data we collect

  • Account data: name, email or username, and encrypted password.
  • Restaurant data: name, location, logo, team members, and permissions.
  • Operational data you upload: inventory, sales, purchases, suppliers, and technical sheets.
  • Technical data: IP address, device identifiers, usage logs, and error logs.
  • Communications: support messages and queries to the AI assistant.

3. Purposes and legal basis

We use this data to create and manage your account (performance of a contract), provide and improve the service and prevent fraud and abuse (legitimate interest), handle support (performance of a contract), and send marketing communications only with your consent. We also comply with applicable legal obligations.

4. Who we share data with

  • Service providers (sub-processors): cloud hosting, database, email, and AI model providers.
  • Paddle.com, our Merchant of Record, for sales, subscription management, payments, tax compliance, and invoicing.
  • Professional advisors (legal or accounting) when necessary.
  • Competent authorities when required by law.

We do not sell personal data.

5. Retention

We retain data while your account is active and for up to 12 months after cancellation, unless a legal obligation requires a longer period. Afterward, we delete or anonymize it.

6. Your rights

You may request access, rectification, deletion, portability, restriction, or objection to the processing of your data, as well as withdraw your consent at any time, by writing to contactautory@gmail.com. We will respond within the timeframes set by applicable regulations (generally one month). If you are located in the UK or the EEA, you may lodge a complaint with your supervisory authority. When data is transferred outside your country, we apply appropriate safeguards such as standard contractual clauses.

7. Security

We apply appropriate technical and organizational measures: encryption in transit, encrypted passwords, role-based access control, and per-restaurant data isolation.

8. Cookies

We only use essential cookies and local storage to keep you logged in and remember your preferences (such as language). We do not use advertising cookies. You may delete them from your browser, though this will log you out.