Privacy Policy

Last updated: May 2026

Prompt Catering (“we”, “us”, “our”) respects your privacy. This policy explains what information we collect when you visit promptcatering.com, how we use it, and the choices you have. By using our website or services, you agree to the practices described below.

1. Information We Collect

Information you provide

• Contact form submissions: facility name, contact person name, email address, phone number (optional), and any message you write.
• Chatbot conversations: name, phone number, email address, and the text of messages you exchange with our AI assistant.

Information collected automatically

• Technical data: IP address, browser type, device information, and request timestamps, used for security and rate limiting.
• Anonymous session identifiers: a randomized ID assigned by Firebase Authentication so we can associate your chatbot messages with a single session.

2. How We Use Your Information

• Respond to your catering inquiries and prepare quotes
• Contact you about the services you ask about
• Detect and prevent abuse, spam, and security threats
• Improve our website and service quality

3. Sharing With Third Parties

We share your information only with service providers required to operate our website and respond to inquiries:

• Google Cloud / Firebase — hosts our database, authentication, and file storage.
• Google AI (Gemini) — processes chatbot conversations to generate AI responses.
• Telegram Messenger — receives lead notifications for our internal sales team.
• Resend — delivers email notifications to our team.
• Sentry — receives anonymized error reports so we can fix bugs.
• Vercel — hosts the website infrastructure.
• Upstash — stores short-lived rate-limit counters.

We do not sell, rent, or trade your personal information to advertisers or third-party marketing companies.

4. Data Retention

• Unconverted inquiries are automatically deleted from our database after 14 days.
• Active customer relationships — we retain your information for the duration of our working relationship and as required by tax and accounting laws (typically up to 7 years after your last interaction).
• Telegram and email notifications sent to our internal team may remain visible to authorized staff for operational purposes.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Object to or restrict certain processing
• Request a portable copy of your data

To exercise these rights, contact us at one of the offices listed below. We respond to verified requests within a reasonable time, typically within 30 days.

6. Children’s Privacy

Our services are intended for institutional clients (schools, daycares, adult care facilities). We do not knowingly collect personal information from individuals under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

7. Security

We use industry-standard security measures including encrypted HTTPS connections, authenticated database access, server-side rate limiting, and access controls that limit data to authorized staff. However, no method of internet transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.

9. Contact Us

For privacy-related questions or to exercise the rights described in section 5: