1. Introduction
iamchampion.ai ("Champion," "we," "us," or "our") operates the iamchampion.ai website and platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
2. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, phone number, and password when you create an account.
- Restaurant Information: Restaurant name, location, cuisine type, and other business details you provide.
- POS Data: When you connect your Square (or other POS) account, we access sales data, transaction history, menu items, and order details through their API. We never store your POS login credentials.
- Review Data: We collect publicly available reviews from Google, Yelp, TripAdvisor, and other platforms related to your restaurant.
- Usage Data: Browser type, IP address, pages visited, and interaction patterns with our platform.
- Communication Data: Phone numbers for SMS verification and briefing delivery, email for report delivery and alerts.
3. How We Use Your Information
- Generate Customer Experience reports and analytics
- Provide daily briefings and review alerts
- Analyze revenue, menu performance, and operational metrics
- Improve and personalize our services
- Communicate with you about your account and our services
- Process payments and manage subscriptions
- Comply with legal obligations
4. Data Security
We implement industry-standard security measures including encryption in transit (TLS 1.2+) and at rest, secure token storage for POS integrations, and access controls. We never store your POS credentials — we use OAuth tokens that can be revoked at any time. SOC 2 compliance is in progress.
5. Data Sharing
We do not sell your personal information. We may share data with:
- Service Providers: Cloud hosting (Vercel, Supabase), payment processing (Stripe), communication (Twilio, Resend), and AI processing (Anthropic) — only as needed to provide our services.
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
6. Your Rights
You have the right to:
- Access and receive a copy of your data
- Correct inaccurate information
- Delete your account and associated data
- Disconnect POS integrations at any time
- Opt out of marketing communications
- Revoke OAuth access tokens through your POS provider
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we remove your personal data within 30 days, except where retention is required by law.
8. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising cookies.
9. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our platform. Your continued use after changes constitutes acceptance of the updated policy.