Privacy Policy

01Overview

This Privacy Policy explains how FohBoh.ai collects, uses, shares, and protects information across its platform. FohBoh primarily processes business operational data (e.g., POS, financial, inventory) rather than consumer personal data. However, some business data may incidentally include personal information (e.g., employee names or IDs).

02Information We Collect

• Account Information — name, email address, company name, role, password (hashed).
• Usage Data — logins, feature interactions, page views, API calls.
• Business Data — point-of-sale transactions, labor data, financial records, inventory, menu items, and any other data Customer uploads or connects.
• Communication Data — support tickets, emails, feedback.

03How We Use Data

We use data to:

• Operate, maintain, and improve the platform
• Perform deterministic certification (MGE)
• Identify recovery opportunities (Sentry)
• Generate AI insights (Cortex)
• Respond to support requests
• Detect and prevent security incidents or fraud
• Comply with legal obligations

04Data Processing Roles

05Data Sharing & Subprocessors

We share data only as necessary to deliver the service:

• Infrastructure providers — e.g., cloud hosting, databases.
• AI model providers — solely to generate Cortex outputs, under contractual obligations of confidentiality and no independent use of data.
• Professional advisors — legal, accounting, when required.
• Law enforcement or regulators — when compelled by law.

06Data Retention

• Account and usage data is retained as long as the account is active and for a reasonable period thereafter (up to 12 months).
• Business data is retained for the duration of the service agreement plus up to 90 days in backup or archival systems, unless a longer retention period is required by law or agreed in writing.
• Upon termination, Customer may request earlier deletion by contacting privacy@fohboh.ai.

07Your Rights (Account-Level Data)

For account-level data (name, email, etc.), you may request:

• Access to your data
• Correction of inaccurate data
• Deletion of your data (subject to legal or contractual holds)

To exercise rights, email privacy@fohboh.ai with "Privacy Request" in the subject line. We will respond within 30 days.

08Security

FohBoh implements:

• Encryption at rest (AES-256) and in transit (TLS 1.2+)
• Role-based access controls and least-privilege principles
• Audit logging of access to Customer data
• Regular vulnerability scanning and patch management

For more details, see our Data Security Overview, available upon request.

09International Data Transfers

FohBoh currently operates from the United States. If Customer is located outside the US, data may be transferred to and processed in the US. By using the platform, Customer consents to such transfers. For customers in the EEA/UK, we will enter into Standard Contractual Clauses (SCCs) upon request.

10Children's Privacy

The platform is not intended for individuals under 18 years of age. FohBoh does not knowingly collect personal information from children.

11Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or platform notice at least 14 days in advance. The "Version" and date at the top indicate the latest revision.

12Data Processing Addendum (DPA)

If Customer requires a Data Processing Addendum to comply with GDPR, CCPA, or similar laws, please contact privacy@fohboh.ai. We will provide a standard DPA for execution.

13Contact Information