Privacy Policy

This Privacy Policy explains how Air (“we”, “us”) collects and uses information when you use Agentix Menu (the “Service”). By using the Service you agree to this Policy.

1. Information we collect

• Account information — your email address, business name, and a hashed password (we never store plain-text passwords). If you sign in with Google or Apple we receive your name and verified email from them; we do not receive your Google/Apple password.
• Business content — the menus, prices, images, staff records, settings and other content you add to run your business on the Service.
• Customer data you process through the Service — when your customers place orders, book tables or leave reviews, the Service stores the details they submit (such as name, phone number, delivery notes, ratings) on your behalf so you can fulfil them.
• Usage data — page-view counts for your public menu, basic request metadata (such as IP address for rate-limiting and security), and AI usage counters for plan quotas.
• Cookies — we use an essential, httpOnly session cookie to keep you signed in, and a short-lived cookie during Google/Apple sign-in. We do not use advertising or cross-site tracking cookies.

2. How we use information

• To provide, secure and improve the Service.
• To authenticate you and prevent abuse (rate limiting, fraud checks).
• To meter plan usage and process billing.
• To power the features you invoke — e.g. publishing your menu, delivering orders to your dashboard, generating AI content you request.
• To contact you about the Service (security, billing, important changes).

3. AI processing

When you use AI features (menu generation, descriptions, images, chat, the command bar), the relevant content — such as your menu text or a customer’s chat message — is sent to third-party AI model providers to generate the response. We send only what is needed for the feature and we do not sell this data. Do not submit information you are not permitted to share.

4. Your customers’ data — your responsibility

For data your customers submit through your menu (orders, reservations, reviews), you are the data controller and we process it on your instructions to operate the Service. You are responsible for handling that data lawfully — including telling your customers how you use their details and honouring their requests to access or delete them.

5. Sharing

• Service providers — hosting, storage, AI model providers, and sign-in providers (Google, Apple), strictly to run the Service.
• Legal — if required by law, regulation or valid legal process, or to protect the rights, safety and integrity of the Service, our users or the public.
• Business transfers — as part of a merger, acquisition or asset sale, under confidentiality.
• We never sell your personal information or your customers’ personal information.

6. Security

We use reasonable technical measures to protect data: scrypt-hashed passwords, signed httpOnly session cookies, rate limiting, server-side validation of orders, and access controls that scope every business’s data to its own account. No system is 100% secure — please use a strong, unique password and keep staff logins current.

7. Retention and deletion

We keep your data while your account is active. If your account is closed or terminated we delete or anonymise personal data within a reasonable period, except where we must keep records to comply with legal, tax or security obligations. You may request deletion of your account and data at any time using the contact below.

8. Your rights

You may request access to, correction of, or deletion of your personal information, and you may object to or restrict certain processing. Contact us and we will respond within a reasonable time. Where the request concerns data your business collected from its customers, we will refer the request to you as the controller.

9. Children

The Service is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 18 as an account holder.

10. International processing

Our infrastructure and service providers (including hosting and AI providers) may process data outside your country. Wherever data is processed, this Policy applies.

11. Changes to this Policy

We may update this Policy. Material changes will be announced in the Service or by email; the “Effective date” above always shows the current version. Continued use after changes take effect means you accept the updated Policy.

12. Contact

Privacy questions or requests: mohammedaalabri123@gmail.com.