Privacy Policy
Culimise Inc, a Florida corporation ("Culimise," "we," "us," or "our"), runs Culimise Inventory at culimise.com. This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. It applies to our website, free tools, the Culimise Inventory application, our support system, and related services (together, the "Service").
We do not sell your personal information for money. If you accept advertising cookies on our public website, the advertising tools we use receive information about your visit, which some laws call "sharing" for cross-context behavioral advertising. You can decline or change this at any time. Choose "Cookie settings and your privacy choices" in the footer of our website, or send the Global Privacy Control signal, which we honor.
By using the Service you agree to this policy. If you do not agree, please do not use the Service.
1. Who we are and our role
1.1Culimise Inc is the company responsible for the Service. You can reach us as described in Section 16.
1.2We act in two roles. For information about our own customers, website visitors, and prospects, such as account details, billing, and website activity, we decide how and why it is used (we are the "controller" or "business"). For the business data a restaurant puts into the Service, such as items, costs, recipes, counts, sales, and team details ("Customer Data"), we process it on the customer’s behalf and on its instructions (we are the "processor" or "service provider"). That restaurant is responsible for how it uses the Service and for giving any required notices to its own employees and other individuals whose information it enters.
2. Information we collect
Information you give us
2.1Account and profile information: your name, email address, password or sign-in method, role, job title, and the name, locations, and time zones of your business.
2.2Customer Data: items, costs, suppliers, purchase orders, recipes, counts, waste, transfers, sales, invoices, photos you upload (for example supplier invoices), and details of the team members you invite.
2.3Billing information: your plan and subscription status, and the last four digits and brand of your payment card. Your full card number is collected and held by our payment processor, not by us.
2.4Messages and support: what you send us in support tickets, forms, and emails, including attachments.
2.5Phone calls and texts: when you call or text our company number, an automated virtual assistant answers. We record and transcribe calls, and each call begins with a notice that it is being recorded. We keep the recording, the transcript, a summary, your phone number, and what you tell us, such as your name, business name, and email. If you do not want to be recorded, please end the call and open a support ticket instead.
2.6Website tools and sign-ups: if you use a free calculator and ask us to email you the results, we collect your email address, which calculator you used, the numbers you entered and the results, the page address, whether you ticked the optional updates box (and the wording shown), and whether the email was sent.
2.7Agreements: when the Owner connects a point-of-sale system, we record who agreed to our Terms and Privacy Policy, when, for which provider, and which version they saw.
Information collected automatically
2.8Device and usage information: your IP address, browser type, device type, pages and features used, dates and times, and error and performance logs.
2.9Security information: sign-in history (time, device, and approximate location derived from your IP address) and a log of key account and settings changes.
2.10Cookies and similar technologies, described in Section 7.
2.11Website analytics and advertising data, only if you accept the matching cookies on our public website: the pages you visit, how you reached us (for example a link or ad campaign), your device and browser, your approximate location from your IP address, cookie identifiers, and whether you created an account or asked for calculator results. We do not use these tools inside the signed-in app.
Information from other sources
2.12Connected services: if the Owner connects a point-of-sale system or another outside service to Culimise, we receive information from that service, such as the sales data described in Section 4 or other data the Owner chooses to share through it.
2.13Payment processor: our payment processor tells us the status of your payments and subscription.
2.14Bot-protection service: our bot-protection provider tells us whether a sign-up looks automated.
2.15Telephone and email providers: our telephone provider gives us the recording, transcript, and summary of calls and texts to our company number, and our email provider delivers them to our team.
Information we do not intend to collect
2.16We do not knowingly collect government identification numbers, full payment card numbers, health information, biometric information, or precise geolocation. Please do not put this kind of information into the Service, including in photos or notes. If you do, you are responsible for having the right to do so.
3. How we use information
3.1We use personal information to:
- (a)provide, operate, secure, and support the Service, including creating and managing accounts, importing and processing your data, and running the features you use;
- (b)process payments, manage subscriptions and trials, send receipts, handle refunds, and prevent billing fraud;
- (c)send service messages, such as sign-in alerts, team invitations, trial and billing reminders, security notices, support replies, and the notifications you choose;
- (d)send you the calculator results you ask for, and, if you opted in or are a customer and the message relates to your account, tips and product updates;
- (e)answer calls and texts to our company number, take messages, and follow up on what you asked, including by using details from your earlier calls from the same number;
- (f)review calls for quality and training;
- (g)protect the Service and users, including detecting and preventing fraud, abuse, and security incidents, and checking sign-ups with bot protection;
- (h)measure website traffic and how people find us, with your permission, using analytics tools;
- (i)measure and improve our advertising, and show our ads to people who visited our website, with your permission, using advertising tools;
- (j)understand how the Service is used, fix problems, and improve and develop the Service, using de-identified or aggregated information where possible (but never data read from a connected sales system);
- (k)comply with law, enforce our Terms, and defend legal claims.
Legal bases (for visitors in the European Economic Area, United Kingdom, or Switzerland)
3.2Where those laws apply, we rely on: performance of our contract with you (to provide the Service); our legitimate interests (to secure, operate, and improve the Service and to communicate with our customers); your consent (for optional marketing emails and similar choices, which you can withdraw at any time); and legal obligation.
4. Connected sales systems
4.1If the Owner connects a point-of-sale system, they sign in on the provider’s own page and approve read-only access. We never see your provider password and never write to or change anything in your provider account.
4.2What we read: for the dates you choose, and for each finished day when daily pulls are on, item names, quantities, sales amounts, and tax per day, for the locations you map to a Culimise location. Where the provider offers it, we also read the item list. We also store the provider merchant ID and business name, and the provider’s location names and time zones.
4.3What we keep: the access and refresh keys (tokens), which are encrypted and stored only on our servers, never readable from your browser; the location mapping; and the date of the last pull. Pulled sales are saved to your account automatically or after your review, depending on your setting. After that they are ordinary Customer Data.
4.4Why we use it: only to show your sales to you and to power the features you use, such as Menu Insights and food cost. We do not sell it, use it for advertising, build aggregated or de-identified data sets from it, or give it to other restaurants.
4.5Provider terms: the provider’s own agreements and privacy notice also apply to its system. We act only for the merchant that connected it. Requests about data held by the provider go to the provider, and requests about data in Culimise go to us.
4.6Connection checks: we regularly check that the connection still works, and we receive notices from the provider when you disconnect or revoke access. We use these only to update the connection status and never treat them as sales data.
4.7Your consent: when you connect, you expressly consent to our reading that data and storing a copy of what you import in your account, and you confirm that you agree to our Terms and this Privacy Policy. We record who agreed, when, which provider, and which version of these pages was shown.
4.8Disconnecting: use Settings, then Integrations. When you disconnect, or remove Culimise from inside the provider’s system, we stop reading your data from that provider and delete our stored keys, and where the provider allows it we ask the provider to revoke our access. Sales already imported are part of your account data and stay until you delete them or ask us to delete them, which we do within 30 days of your request.
4.9The provider’s own privacy policy applies to data inside the provider’s system.
5. Automated processing and AI
5.1Some features, such as invoice scanning and photo-based estimates, send the images or text you upload to automated processing services (artificial intelligence and optical character recognition) provided through our platform, so they can return matches and estimates for you to review. We do not make decisions that have legal or similarly significant effects about individuals using solely automated processing.
5.2Our company phone line uses an automated virtual assistant, which is a form of artificial intelligence, to answer calls and texts. It gives general information about Culimise Inventory and takes messages. It does not make decisions about your account or billing, which people handle through support tickets.
8. Marketing emails and your choices
8.1If you asked for updates, or you are a customer and the message relates to your account or the Service, we may send tips and product updates. Every marketing email has an unsubscribe link, and each includes our mailing address. You can also unsubscribe by writing to us. We will stop marketing emails promptly, but we may still send service and legal messages, such as receipts, security alerts, and notices about your account, which you cannot opt out of while you have an account.
9. How long we keep information
9.1We keep personal information only as long as needed for the purposes in this policy, unless the law requires or allows longer.
9.2Account and Customer Data: kept while your account is active. When the Owner deletes the account, the organization and its business data, subscriptions, and backups are permanently deleted. Our platform provider keeps deleted records for up to 30 days before removal, and copies may remain in its routine backups for a limited time after that.
9.3Free plan history: transaction history older than 90 days on the Free plan (purchase orders, purchases, counts, sales, waste, usage, and transfers) is deleted automatically.
9.4Billing and tax records: kept for as long as the law requires, generally several years.
9.5Support tickets and messages: kept while needed to help you and to keep a record of the request, and for a reasonable period after.
9.6Security and sign-in logs: kept for a limited period needed to protect the Service and investigate incidents.
9.7Connected-service tokens: deleted when you disconnect.
9.8Call recordings, transcripts, and messages: kept while needed to help you and to keep a record of the request, and for a reasonable period after.
9.9Agreement records: kept for as long as the connection exists and as long after as needed to show your agreement.
9.10Calculator email requests: kept until you ask us to delete them. If you opted in to updates, we keep your address until you unsubscribe, and then only as needed to honor your opt-out.
10. Security
10.1We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, separation of each customer’s data, encryption in transit, and encryption of the access keys we store for Connected Services. Backups you create in Settings are encrypted with a password only you hold, and we cannot recover it.
10.2No system is perfectly secure. If we confirm a security breach that affects your personal information, we will notify you and the authorities as the law requires.
11. Your privacy rights
11.1Depending on where you live, you may have the following rights. We offer them to all users, whether or not your state’s law requires it.
11.2Know and access: ask what personal information we hold about you, and get a copy, including in a portable format.
11.3Correct: ask us to fix inaccurate information. You can update much of it in your account settings.
11.4Delete: ask us to delete your personal information, subject to legal exceptions, such as billing records we must keep.
11.5Opt out of sharing and targeted advertising: Choose "Cookie settings and your privacy choices" in the footer of our website, or send the Global Privacy Control signal, which we honor. We do not sell personal information for money.
11.6Limit use of sensitive personal information: we do not use it beyond what is needed to provide the Service.
11.7Withdraw consent: for choices based on consent, such as marketing emails.
11.8Non-discrimination: we will not deny you the Service, charge you a different price, or give you a different level of service because you exercise these rights.
How to make a request
11.9Email sales@culimise.com with the subject "Privacy request," or open a ticket at culimise.com/support. Tell us who you are, your account email, and what you are asking for. We may need to verify your identity, for example by confirming control of the account email, before we act, and we may ask for more information. We respond within 45 days, and we may extend that once by another 45 days where the law allows, and we will tell you why.
Authorized agents and appeals
11.10You can have an authorized agent make a request for you. We may ask for proof of their authority. If we decline your request, you may appeal by replying to our decision or emailing us with the subject "Privacy appeal," and we will respond in writing within 60 days. If you are still not satisfied, you may contact your state attorney general.
Business data and your employer
11.11If your information is in a restaurant’s Customer Data, for example because you are an employee of that restaurant, the restaurant is responsible for it. Please contact the restaurant first. We will help the restaurant respond to your request.
California and other states
11.12In the last 12 months we collected these categories of personal information, which we obtained from you, your Users, your devices, and the third parties in Section 2, and which we used and disclosed to the service providers in Section 6 for the purposes in Section 3: identifiers (such as name, email, and IP address); customer records and commercial information (such as subscription and billing status); internet and device activity (such as usage and sign-in logs); approximate location derived from your IP address; professional information (such as role and business name); the content you provide (such as Customer Data and support messages); and audio recordings and transcripts of calls to our company number. We do not collect sensitive personal information beyond account sign-in credentials used to authenticate you, and we do not knowingly sell or share the personal information of anyone under 16. California residents may also ask for details of personal information we disclosed to third parties for their direct marketing, and we do not make such disclosures.
12. International use
12.1The Service is intended for businesses in the United States and is operated from the United States. If you use it from another country, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those where you live. Where the law requires, we use safeguards for such transfers, such as standard contractual clauses.
12.2If you are in the European Economic Area, United Kingdom, or Switzerland, you may also have the right to object to or restrict certain processing and to lodge a complaint with your local data protection authority. Contact us to exercise these rights.
13. Children
13.1The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children under 18, and in particular not from children under 13. If you believe a child has given us information, contact us and we will delete it.
14. Third-party links
14.1The Service may link to websites and services we do not control, including connected sales providers, our payment processor, and other outside services. We are not responsible for their content or privacy practices. Please read their policies.
15. Changes to this policy
15.1We may update this policy from time to time. We will post the new version with a new "Last updated" date and, for material changes, notify you by email or in the Service before they take effect. If you keep using the Service after the effective date, you accept the updated policy.
16. Contact us
16.1Privacy questions and requests: sales@culimise.com. For help with your account, open a ticket at culimise.com/support.