Privacy Policy

Aque ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

Information you provide directly:

• Account information: your name and email address when you register.
• Business and financial data: sales reports, transaction records, revenue figures, and other business documents you upload to the Service.
• Business profile details: business name, industry, and context you provide.
• Payment information: handled directly by Stripe; we do not store card numbers.
• Communications: messages or support requests you send us.

Information collected automatically:

• Usage data: pages visited, features used, timestamps of activity.
• Device and browser information: IP address, browser type, operating system, and referring URLs, used for security and service improvement.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Generate AI-powered insights, forecasts, and reports from your uploaded data.
• Process payments and manage your subscription.
• Send account-related notifications and, if opted in, email digest reports.
• Respond to your support requests and communications.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations.

4. How We Share Information

We share your information only in the following limited circumstances:

• Service providers: Trusted third-party vendors who help us operate the Service (listed in Section 5), bound by confidentiality obligations and permitted to use your data only to perform services on our behalf.
• Team members: If you invite team members to your business workspace, they will have access to that business's data within the Service as permitted by their assigned role.
• Legal requirements: When required by law, subpoena, court order, or to protect the rights, property, or safety of Aque, its users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred with advance notice to you.

5. Third-Party Services

We use the following third-party services to operate Aque:

• Supabase — database and authentication (data stored in a secured cloud environment).
• Stripe — payment processing (Stripe's privacy policy governs payment data).
• Anthropic (Claude AI) — AI model used to analyze your data and generate insights. Data is transmitted to Anthropic's API for processing. Anthropic's enterprise API terms prohibit training on your data by default.
• Resend — transactional and digest email delivery.
• Clover — optional POS integration; used only when you explicitly connect your Clover account.

Each third-party provider has its own privacy policy governing their handling of data.

6. Data Retention

We retain your account information and uploaded data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal information and business data within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention.

7. Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.

8. Your Rights and Choices

You have the right to:

• Access and update your account information through the Settings page.
• Opt out of email digest reports at any time through Settings.
• Request deletion of your account and associated data by using the "Delete Account" option in Settings or by contacting us.
• Request a copy of the personal information we hold about you by contacting us.

Depending on your jurisdiction (such as the EU/EEA under GDPR, or California under CCPA), you may have additional rights. Please contact us to exercise them.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page and, where appropriate, by sending you an email. Your continued use of the Service after the updated policy is posted constitutes your acceptance of it.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through your account settings or at the contact information provided on our website.