Privacy Policy

Non-Personal Information

We collect non-personal information that does not identify you as an individual. This may include data such as user proximity to the kiosk, whether a user is speaking, session times, visited pages, and user interactions, including screen touches and navigational choices. We may also collect information automatically through cookies and similar technologies, such as browser type, device type, and referring URLs, enabling us to analyze usage of our Service.

Audio and Visual Interactions

Our kiosks may include cameras and microphones. These devices are used to:

• Detect if a person is near the kiosk to trigger greetings or engagement.
• Identify if someone is speaking to facilitate conversational interactions.

We do not use, record, store, or retain unique biometric data, nor do we identify or authenticate any specific individual from video or audio. All video and audio processing is conducted in real time using temporary memory. Our inferences are limited to anonymous attributes, such as whether a person is present or a user is speaking, without associating such attributes to any personal identity.

Voice Data for Processing

If you speak to our kiosk, we process your voice input by forwarding it to trusted third-party services, such as transcription services or Large Language Model (LLM) providers, to generate a response. We do not attach personal identifiers, like your name or email, to this data. The information is used solely to respond to you in real time and not to identify you personally.

Potential Collection of Personal Information

Our default practice is not to collect personally identifiable information (PII), such as names, emails, or account credentials, during standard kiosk interactions. However, if in the future you are prompted to log in, provide credentials, or submit other personal data, such as signing in with a mobile app or scanning a code, we will present you with clear notice and require your consent at that time. Such PII would then be collected, processed, and stored in accordance with this Privacy Policy and any additional applicable terms.

Children's Privacy

We do not direct our Service to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If there is a situation where users might interact verbally or otherwise, and we are uncertain about their age, we will take reasonable steps to determine age eligibility. If we learn that an individual under 13 has attempted to or has provided personal information without verified parental consent, we will delete that information as soon as possible. If you believe we have inadvertently collected such information, please contact us at legal@biscuitai.com.

If a user is under 13 or if we cannot verify that a user is over 13, we will not accept inputs that contain personal information from that user.

Service Provision and Improvement

We use non-personal and aggregated information to operate, maintain, and improve the Service, enhance user experience, and refine our offerings.

Communications

If you choose to provide contact information, such as when logging in or signing up for a newsletter, we may use that information to respond to inquiries, provide technical support, and send updates or promotional offers, subject to your communication preferences.

Legal Compliance and Safety

We may use or share information if we believe it is necessary to comply with applicable laws, regulations, or governmental requests; to enforce our Terms of Use; to detect or prevent fraud, security, or technical issues; or to protect the rights, property, and safety of our users or the public.

Service Providers and Vendors

We may share limited information with trusted third-party providers who perform services on our behalf, such as analytics, transcription, or LLM processing. These parties only use the information as instructed by us and consistent with this Privacy Policy.

Business Transactions

In the event of a merger, acquisition, asset sale, or other business transaction, user information, including non-personal or anonymized data, may be transferred as a business asset. Any acquirer will be subject to the provisions of this Privacy Policy for any continued use of your information.

Non-Personal Information

We reserve the right to use and share aggregated, non-personal information, such as user engagement metrics, with third parties at our discretion.

We implement commercially reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures may include encryption, firewalls, and secure data transmission. However, no security measure is perfect and we cannot guarantee absolute security. By using our Service, you acknowledge and accept these risks.

Opt-Out of Marketing Communications

If you receive marketing emails from us, you can opt out by following the unsubscribe instructions included in those messages or by contacting us. We may still send you non-promotional communications, such as updates to this Privacy Policy or important notices.

Access, Deletion, and Other Rights

If we collect PII from you, you may have the right, subject to applicable laws like the California Consumer Privacy Act (CCPA), to request access to or deletion of that information. To exercise these rights, please contact us at legal@biscuitai.com. We will provide instructions and respond within the timeframes required by law.

Cookies and Analytics

You may adjust your browser settings to refuse cookies or to alert you when cookies are being sent. Note that some features of our Service may not function properly without cookies.

Our Service may contain links to third-party websites or services not governed by this Privacy Policy. When you access those third parties, their privacy policies and terms apply. We recommend reviewing the privacy policies of any external sites you visit.

We make this Privacy Policy available to all users prior to their use of the Service. By continuing to use the Service after reviewing this Privacy Policy, you acknowledge your understanding of and agreement with its terms.

If at any point you do not agree with our practices, please discontinue use of our Service.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make significant changes, we will notify you by posting a prominent notice on our Site or by other appropriate means. Significant changes will generally go into effect 30 days following such notice. Non-material changes take effect immediately. We encourage you to review this Privacy Policy periodically.

For any questions or concerns about this Privacy Policy or our data practices, please contact us at legal@biscuitai.com.