HomeBites AI
Version 1.0.0·Effective May 5, 2026

HomeBites AI — Privacy Policy

Last updated: [DATE]

⚠️ DRAFT — REQUIRES LAWYER REVIEW BEFORE LAUNCH. Working draft. Not legal advice.

1. Who We Are

This Privacy Policy explains how RedCube Group LLC, a Texas limited liability company doing business as HomeBites AI ("HomeBites AI," "we," "us"), collects, uses, and shares information when you use our website, mobile app, and services (the "Platform") at homebitesai.com.

2. What We Collect

2.1 Information You Provide

  • Account info: name, email, password (hashed), role (customer / home chef)
  • Customer info: delivery/pickup address, phone (optional)
  • Chef info: restaurant name, cuisine, kitchen address, hours, delivery radius, food handler certification, photo IDs, DSHS registration ID (if applicable)
  • Order info: items, prices, special instructions, order history
  • Payment info: processed by Stripe — we do not store your card number. We store a Stripe customer/account ID and last-4 / brand for display.
  • Communications: messages you send us via support, email, or in-app

2.2 Information Collected Automatically

  • Device & log data: IP address, browser, OS, device identifiers, pages viewed, timestamps
  • Location: approximate location from IP, or precise location if you grant permission (used to show nearby Chefs)
  • Cookies & similar tech: session cookies for login, analytics cookies (see Section 8)

2.3 Information from Third Parties

  • Stripe: payment status, payout details (for Chefs)
  • Supabase: authentication metadata
  • Resend: email delivery status

3. How We Use It

We use your info to:

  • Operate the Platform (accounts, listings, orders, payments)
  • Connect customers with Chefs and facilitate transactions
  • Send transactional emails (order confirmations, status updates, receipts)
  • Provide customer support
  • Detect fraud, abuse, and policy violations
  • Comply with legal obligations
  • Improve the Platform (analytics, AI feature development)
  • With your consent, send marketing communications (you can opt out anytime)

4. How We Share It

We share information only as described below.

4.1 With Chefs (when you place an order)

When you order, the Chef sees: your name, contact email, order details, and pickup time. This is necessary for fulfillment.

4.2 With Customers (when you're a Chef)

Customers see your restaurant name, listings, neighborhood/city, and approximate location. They do not see your home address until they place an order with you.

4.3 With Service Providers

We share data with vendors who help us run the Platform under confidentiality and data-protection obligations:

  • Supabase (database, auth, storage)
  • Stripe (payments, payouts, identity verification)
  • Resend (email delivery)
  • Vercel (hosting)
  • Anthropic (AI features, when used)

4.4 Legal & Safety

We may disclose info to comply with law, respond to subpoenas, protect our rights, or address fraud or safety issues.

4.5 Business Transfers

If HomeBites AI is acquired, merged, or sells assets, your info may transfer — subject to this Policy.

4.6 We Do NOT Sell Your Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under California or Texas privacy law.

5. Data Retention

We keep info as long as your account is active. After deletion, we may retain limited info (order history, tax records, fraud signals) for up to 7 years to meet legal/accounting obligations, and aggregated/anonymized data indefinitely.

6. Your Rights

6.1 All Users

You can:

  • Access, correct, or delete your account info in settings
  • Export your data on request
  • Opt out of marketing emails (unsubscribe link in every marketing email)

6.2 Texas Residents (TDPSA)

Under the Texas Data Privacy and Security Act, you may:

  • Confirm whether we process your personal data
  • Access, correct, or delete it
  • Obtain a portable copy
  • Opt out of targeted advertising, sale of personal data, or significant profiling

To exercise rights, email [privacy@homebitesai.com]. We will respond within 45 days.

6.3 California Residents (CCPA/CPRA)

You have similar rights including the right to know, delete, correct, and opt out of sale/sharing. We do not sell or share your personal information for cross-context behavioral advertising.

6.4 EU/UK Residents (GDPR/UK-GDPR)

If you access the Platform from the EU/UK, you have rights of access, rectification, erasure, restriction, portability, and objection. Our legal bases are: contract (to provide service), legitimate interest (security, analytics), consent (marketing), and legal obligation. Contact [privacy@homebitesai.com].

7. Security

We use industry-standard measures: encryption in transit (TLS), encryption at rest (Supabase), Row-Level Security policies, hashed passwords, and limited internal access. No system is 100% secure; we cannot guarantee absolute security.

8. Cookies

We use:

  • Strictly necessary cookies (login, session) — always on
  • Analytics cookies — usage stats, with consent where required

You can manage cookies in your browser settings. EU/UK users will see a consent banner.

9. Children

The Platform is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has provided info, email [privacy@homebitesai.com] and we will delete it.

10. Changes

We may update this Policy. Material changes will be posted with a new "Last updated" date and emailed where required.

11. Contact

RedCube Group LLC d/b/a HomeBites AI [Address] Privacy: [privacy@homebitesai.com] General: [support@homebitesai.com]