Privacy Policy for BoothBrain

Introduction

BoothBrain ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Information We Collect

Information You Provide

Account Information

• Email address
• Password (encrypted)
• Display name
• Profile information

Business Data

• Inventory items (products, prices, descriptions, photos)
• Sales transactions
• Event details
• Customer information (if you choose to collect it)
• Payment records

Automatically Collected Information

Device Information

• Device type and model
• Operating system version
• Unique device identifiers
• App version

Usage Data

• App features used
• Session duration
• Crash reports and error logs
• Performance data

Biometric Data

• We use Face ID/Touch ID/Fingerprint for authentication
• Biometric data is processed locally on your device only
• We never store or transmit your biometric data

How We Use Your Information

We use the information we collect to:

• Provide Services: Operate and maintain the app functionality
• Account Management: Create and manage your account
• Data Sync: Synchronize your data across your devices
• Payment Processing: Process subscription payments via Stripe
• Customer Support: Respond to your questions and support requests
• Improve Services: Analyze app usage to improve features and performance
• Security: Protect against fraud and unauthorized access
• Legal Compliance: Comply with legal obligations

Data Storage and Security

Where We Store Data

• Supabase: Your account data, inventory, and sales records are stored securely on Supabase servers (industry-standard encryption)
• Local Device: App data is cached locally on your device for offline access
• Stripe: Payment information is processed and stored by Stripe (PCI-DSS compliant)

Security Measures

• All data transmitted between your device and our servers is encrypted using SSL/TLS
• Passwords are hashed and never stored in plain text
• Biometric authentication adds an extra layer of security
• Regular security audits and updates

Data Sharing and Disclosure

We do NOT sell, trade, or rent your personal information to third parties.

We may share your information with:

Service Providers

• Supabase: Database and authentication services
• Stripe: Payment processing (they have their own privacy policy)
• Firebase: Crash reporting and analytics (anonymized)

Legal Requirements

We may disclose your information if required by law, subpoena, or other legal process.

Business Transfers

If BoothBrain is acquired or merged, your information may be transferred to the new owner.

Your Data Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information in the app Settings
• Deletion: Delete your account and all data directly in the app (Settings → Delete Account)
• Export: Download your data in a portable format (CSV export available in-app)
• Opt-Out: Unsubscribe from marketing communications

Account Deletion: You can permanently delete your account and all associated data at any time by going to Settings → Delete Account in the BoothBrain app. This action is immediate and cannot be undone. All your inventory, orders, events, and personal information will be permanently deleted.

Data Retention

• Active Accounts: We retain your data while your account is active
• Deleted Accounts: Data is deleted within 30 days of account deletion
• Legal Requirements: Some data may be retained longer if required by law
• Backups: Backup copies are automatically deleted within 90 days

Children's Privacy

BoothBrain is not intended for users under 18 years of age. We do not knowingly collect information from children.

Third-Party Services

Our app integrates with third-party services that have their own privacy policies:

• Supabase: https://supabase.com/privacy
• Stripe: https://stripe.com/privacy
• Firebase: https://firebase.google.com/support/privacy

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted in the app and on our website. Continued use of the app constitutes acceptance of changes.

Contact Us

If you have questions about this Privacy Policy or our data practices:

• Email: song.sopaul@gmail.com
• Website: https://boothbrain.app/privacy

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, see the Contact Us section below.

European Privacy Rights (GDPR)

European Union residents have rights under the General Data Protection Regulation:

• Legal Basis: We process data based on contract, consent, or legitimate interest
• Data Controller: BoothBrain is the data controller
• Right to Lodge Complaint: You can complain to your local data protection authority

For GDPR-related inquiries, see the Contact Us section below.