Privacy Policy

1. Bubuka

Foodfy ("Perusahaan", "urang", "urang", "urang") komitmen pikeun ngajagaan privasi sareng kaamanan inpormasi pribadi anjeun. Kabijakan Privasi ieu ngajelaskeun kumaha kami ngumpulkeun, ngagunakeun, nyingkab, nyimpen, sareng ngajaga data anjeun nalika anjeun berinteraksi sareng platform Foodfy, kalebet halaman wéb kami di foodfy.ai, aplikasi mobile, API, dasbor padagang, jasa AI, jaringan pangiriman drone, sareng sadaya jasa sareng fitur anu aya hubunganana (sacara koléktif, "Platform").

This Privacy Policy applies to all users of the Platform worldwide, including Customers, Business Partners, Delivery Partners, Territory Partners, Corporate Account administrators and employees, Investors, Influencers, NutriLife users, and visitors. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

Foodfy beroperasi di 250+ nagara. Undang-undang perlindungan data khusus anu berlaku pikeun anjeun tiasa béda-béda gumantung kana lokasi anjeun. Dimana hukum lokal nyadiakeun panyalindungan leuwih gede ti Kabijakan Privasi ieu, hukum lokal prevails. Ketentuan régional tambahan diwincik dina Bagian 16.

2. Data Controller

Foodfy mangrupikeun pengontrol data anu tanggung jawab pikeun data pribadi anjeun anu diolah ngaliwatan Platform, kecuali dinyatakeun. Pikeun Foodfy for Work (Akun Perusahaan), organisasi anu ngadaptar bertindak salaku pangontrol data pikeun data pribadi karyawan, sareng Foodfy bertindak salaku prosesor data atas nama aranjeunna.

Pikeun patarosan panyalindungan data, anjeun tiasa ngahubungi Patugas Perlindungan Data kami di:

Surélék: [email protected]
Alamat Pos: Foodfy, Patugas Perlindungan Data, sayogi upami dipénta via [email protected]

3. Émbaran Urang Kumpulkeun

We collect different categories of personal data depending on how you interact with the Platform and which services you use.

3.1 Sadayana Pamaké

Émbaran Akun: Ngaran lengkep, alamat surélék, nomer telepon, tanggal lahir, poto profil, sarta sandi énkripsi.
Data auténtikasi: Kapercayaan login, rusiah auténtikasi dua faktor sareng kode pamulihan, token API, sareng idéntifikasi sési.
Alat sareng Data Téknis: Jinis alat, sistem operasi sareng versi, jinis sareng versi browser, resolusi layar, idéntifikasi alat unik, inpormasi jaringan sélulér, alamat IP, sareng token béwara push (token Expo).
Usage Data: Halaman anu dilongok, fitur anu dianggo, pamundut milarian, pola klik, jalur navigasi, durasi sési, cap waktu, URL ngarujuk, sareng acara interaksi.
Data Lokasi: Perkiraan lokasi diturunkeun tina alamat IP. Kalayan idin eksplisit anjeun, lokasi GPS anu tepat pikeun pangiriman, panemuan bisnis caket dieu, sareng fitur dumasar lokasi.
Data Komunikasi: Pesen dikirim ngaliwatan Platform, interaksi rojongan customer, eupan balik, sarta réspon survéy.

3.2 Palanggan

Data pesenan: Barang anu dipesen, riwayat pesenan, alamat pangiriman (kalebet nami gedong, jalan, apartemen, lantai, kode éntri, sareng petunjuk pangiriman), preferensi pesenan, syarat diet khusus, sareng sumber pesenan (web, aplikasi, kios, QR, WhatsApp, rencana tuang).
Data pamayaran: Jenis metode pamayaran, alamat tagihan, jumlah transaksi, sareng riwayat transaksi. Nomer kartu pamayaran lengkep diolah ku prosesor pembayaran anu patuh PCI DSS (Belang) sareng henteu pernah disimpen dina server Foodfy.
Buku Alamat: Saved delivery addresses including structured address components, GPS coordinates, Google Place IDs, and formatted addresses.
Karesep: Usaha paporit, barang-barang anu disimpen, karesep diet, setélan basa sareng mata uang.
Reviews and Ratings: Product reviews, business ratings, delivery ratings, photos, and comments.

3.3 Mitra Usaha

Émbaran bisnis: Ngaran hukum bisnis, ngaran dagang, subdomain, idéntifikasi toko umum, jinis bisnis (réstoran, grosir, apoték, kembang, ritel, supplier, merek), alamat fisik, nomer telepon, email, sareng URL halaman wéb.
Data Hukum sarta Keuangan: Tax identification name and number, legal entity type, banking details for payouts, and business registration documents.
Data Operasional: Item menu, katalog produk, harga, tingkat inventaris, jam operasi, waktos persiapan, zona pangiriman, sareng konfigurasi jasa.
Data Hubungan Palanggan: Propil CRM kalebet frékuénsi pesenan pelanggan, total belanja, skor RFM (Recency, Frékuénsi, Moneter), tahap siklus kahirupan, tingkat kasatiaan, status milih pamasaran, basa anu dipikaresep, tag, sareng catetan.
Data Pagawe: Staff member names, roles, employee codes, departments, designations, employment type, contact information, emergency contacts, banking details, identity documents, and HR records when using the People and HR feature.
Third-Party Integrations: Google Place ID, rating Google, propil média sosial (WhatsApp, Facebook), sareng data anu ditukeurkeun sareng jasa terpadu (software akuntansi, platform pangiriman).
Data Waralaba: Asosiasi merek waralaba, kode outlet, konfigurasi multi-lokasi, sareng analitik tingkat merek.

3.4 Mitra pangiriman

Verifikasi Idéntitas: Idéntifikasi anu dikaluarkeun pamaréntah, lisénsi supir, pendaptaran kendaraan, sareng bukti asuransi.
Real-Time Location: Koordinat GPS diropéa salami pangiriman aktip pikeun ngalacak pesenan, optimasi rute, sareng tujuan kaamanan.
Data kinerja: Jumlah pesenan réngsé, pesenan ditolak, waktos pangiriman, rating anu ditampi, sareng sajarah panghasilan.
Data Pangiriman Drone: Pikeun mitra pangiriman anu sanggup drone: status kamampuan drone, jinis runner, statistik pangiriman, tugas DronePort, sareng log operasional drone.

3.5 Mitra Téritori

Diurus Téritori: Tingkat wilayah anu ditugaskeun (Wilayah, Nagara, Propinsi, Kota, Wewengkon), idéntifikasi wilayah, sareng lingkup géografis.
Métrik kinerja: Ongkos onboarding bisnis, panghasilan dihasilkeun, skor kapuasan pasangan, sarta metrics pertumbuhan wewengkon.
Data Aplikasi: Territory applicant profile information submitted during the application and onboarding process.

3.6 Pamaké Akun Perusahaan (Foodfy for Work)

Data Organisasi: Ngaran hukum perusahaan, jinis badan hukum, nomer lisénsi dagang, nomer pajeg, alamat kadaptar, inpormasi kontak tagihan, sareng logo.
Data Pagawe: Ngaran pagawe, email, kalungguhan (admin/manajer/pagawe), departemén, puseur biaya, nomer rujukan pagawe, kasaimbangan dompét, sajarah transaksi dompét, jeung status pagawean.

3.7 Investor

Propil Investor: Status akreditasi, preferensi investasi, dokumén verifikasi identitas, jeung sajarah komunikasi.
Kagiatan Investasi: Kapentingan investasi, partisipasi deal, jumlah investasi, sareng korespondensi anu aya hubunganana.

3.8 Pamaké NutriLife

NutriLife ngumpulkeun kaséhatan sénsitip sarta data biometrik. Tingali Bagéan 9 kanggo inpormasi lengkep.

3.9 Émbaran ti Pihak Katilu

Social media platforms when you sign in using social login (Google, Facebook, Apple).
Prosesor pamayaran sareng lembaga keuangan pikeun verifikasi transaksi sareng pencegahan panipuan.
Public business directories and government registries for business verification and directory building.
Buka Fakta Pangan sareng pangkalan data gizi anu sanés pikeun data gizi produk.
Third-party delivery platforms (Uber Eats, Deliveroo, Talabat, Keeta, Careem) for integrated order management.
Google Maps and Places API pikeun lokasi, pemetaan, sareng data alamat.
Analytics sareng mitra pariwara pikeun analisa lalu lintas halaman wéb sareng pangukuran kampanye.

4. Dasar Hukum pikeun Processing

We process your personal data on the following legal bases, as applicable under the General Data Protection Regulation (GDPR) and similar frameworks:

Kinerja Kontrak: Processing necessary to fulfill our contractual obligations to you, including account creation, order processing, payment handling, delivery coordination, and provision of Platform features you have subscribed to or requested.
idin: Processing based on your freely given, specific, informed, and unambiguous consent. This applies to: precise GPS location tracking, NutriLife health and biometric data collection (special category data), marketing communications and promotional emails, non-essential cookies and tracking technologies, and AI-powered photo analysis of meals.
Kapentingan Sah: Processing necessary for our legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms. This includes: Platform security and fraud prevention, analytics and service improvement, personalized search results and recommendations (non-AI profiling), customer support and communication, and enforcement of our Terms of Service.
Kawajiban Hukum: Processing necessary to comply with applicable legal requirements, including tax and accounting regulations, anti-money laundering (AML) and know-your-customer (KYC) requirements, food safety and public health regulations, data retention mandated by law, and responses to lawful government or regulatory requests.
Vital Interest: Dina kaayaan anu luar biasa, pamrosésan diperyogikeun pikeun ngajagi kapentingan penting batur, sapertos kaayaan darurat anu ngalibatkeun alergi dahareun, kajadian kaamanan, atanapi kaayaan darurat kaséhatan masarakat.

5. Kumaha Urang Ngagunakeun Émbaran Anjeun

We use the personal data we collect for the following purposes:

5.1 Operasi Platform Inti

Provide, maintain, operate, and improve the Platform and all its features and services.
Process and fulfill orders, payments, refunds, and deliveries.
Jieun, auténtikasi, sareng atur akun pangguna dina sadaya jinis pangguna.
Aktipkeun tracking pesenan sacara real-time, koordinasi pangiriman, sareng kiriman supir / drone.
Process Business Partner payouts and financial reconciliation.
Atur langganan Foodfy Gold, kauntungan, sareng tagihan.
Ngajalankeun Foodfy for Work dompét perusahaan, alokasi, sareng pelacak biaya.

5.2 Komunikasi

Send transactional communications including order confirmations, delivery updates, payment receipts, and account notifications.
Provide customer support and respond to inquiries through all channels (email, in-app, WhatsApp, SMS).
With your consent, send promotional communications, marketing offers, and personalized recommendations.

5.3 Personalisasi sareng AI

Pribados pangalaman anjeun ngaliwatan hasil teangan anu dikuatkeun ku AI, saran bisnis, sareng saran produk.
Provide Business Partners with AI-powered tools including menu optimization, demand forecasting, automated marketing content generation, and customer analytics.
Fitur Power NutriLife kalebet analisa poto tuangeun AI, itungan gizi, sareng pedoman diet anu dipersonalisasi.
Aktipkeun chatbots AI sareng dukungan palanggan otomatis.

5.4 Kasalametan, Kaamanan, sareng Patuh

Ngadeteksi, nalungtik, jeung nyegah panipuan, nyiksa, aksés teu sah, jeung kagiatan ilegal atawa ngabahayakeun lianna.
Verify the identity of Business Partners, Delivery Partners, Territory Partners, and Investors.
Patuh kawajiban hukum anu berlaku, syarat pajeg, sareng mandat pangaturan.
Laksanakeun Sarat Layanan sareng perjanjian anu sanés.

5.5 Analytics sarta Perbaikan

Ngalaksanakeun analitik agrégat sareng anonim pikeun ngartos pola pamakean sareng ningkatkeun fitur Platform.
Laksanakeun uji A / B sareng panalungtikan pangalaman pangguna.
Train and improve AI and machine learning models using anonymized and aggregated data.
Ngahasilkeun laporan intelijen bisnis sareng wawasan pasar.

6. Kumaha Urang Bagikeun Inpormasi Anjeun

We share your personal data only as necessary to operate the Platform and provide our services. We do not sell your personal data to third parties.

6.1 Jeung pamaké Platform lianna

Mitra Usaha: When you place an order, we share your name, delivery address, phone number, and order details with the relevant Business Partner to fulfill your order. Business Partners on Foodfy retain full ownership of their customer data and can export it at any time.
Mitra pangiriman: We share your delivery address, order pickup location, and necessary contact information with Delivery Partners to complete deliveries. Delivery Partner access to your data is limited to what is necessary for the current delivery.
Palanggan: Inpormasi Mitra Usaha (nami, alamat, rating, ménu, jam operasi) ditampilkeun sacara umum dina Platform pikeun ngaktipkeun penemuan sareng pesenan.

6.2 Jeung panyadia Service

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements:

Stripe: Ngolah pamayaran, tagihan langganan, sareng deteksi panipuan.
Cloudflare: Pangiriman eusi, panyalindungan DDoS, sareng firewall aplikasi wéb.
Anthropic sareng OpenAI: Inferensi modél AI sareng mesin learning pikeun fitur Platform AI. Data anu dikirim ka panyadia AI diolah dina kaayaan ngolah data perusahaan sareng henteu dianggo pikeun ngalatih modél umumna.
Deepgram: Speech-to-text processing for voice-enabled features.
Twilio: SMS delivery and voice communication services.
Google: Maps, Places API, analytics, sareng jasa iklan.
Meta: Manajemén kampanye iklan sareng tracking konvérsi.
Panyadia Infrastruktur Awan: Server hosting, data storage, and computing services.

6.3 Kalayan Platform Pangiriman Pihak Katilu

When Business Partners use delivery platform integrations (Uber Eats, Deliveroo, Talabat, Keeta, Careem, and others), order data and necessary operational information is exchanged between the Platform and these third-party services to enable cross-platform order management. This sharing is initiated by the Business Partner and governed by the terms of each delivery platform.

6.4 Kalawan Integrations Akunting

When Business Partners connect accounting software (Xero, QuickBooks), financial transaction data, invoices, and business records are synchronized as configured by the Business Partner.

6.5 Pikeun Tujuan Hukum sarta Pangaturan

When required by applicable law, regulation, legal process, subpoena, court order, or enforceable governmental request.
To enforce our Terms of Service and other agreements.
To protect the rights, property, safety, or security of Foodfy, our Users, or the public.
To detect, prevent, or address fraud, security, or technical issues.

6.6 Mindahkeun usaha

Dina sambungan jeung ngahiji, akuisisi, reorganisasi, bangkrut, diobral aset, atawa transaksi perusahaan sarupa, data pribadi Anjeun bisa dibikeun ka entitas acquiring. Kami bakal masihan bewara sateuacan data pribadi anjeun tunduk kana kawijakan privasi anu béda.

6.7 Kalawan idin Anjeun

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

7. Ingetan Data

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, provide our services, and comply with legal obligations. Specific retention periods include:

Data Akun Aktif: Retained for the duration of your account plus 30 days after account deletion request to allow for recovery.
Urutan jeung Transaksi Records: Retained for a minimum of 7 years to comply with tax, accounting, and financial regulations in applicable jurisdictions.
Rékaman pamayaran: Retained as required by PCI DSS standards and financial regulations, typically 7 years.
Data Mitra Usaha: Retained for the duration of the business relationship plus the legally required retention period for business records.
Data Kaséhatan NutriLife: Retained while your NutriLife profile is active. Upon deletion request, health data is permanently deleted within 30 days, except where retention is required by law.
Data Langganan Foodfy Emas: Retained for the duration of the subscription plus 3 years for billing dispute resolution.
Data Pagawe Rekening Perusahaan: Retained for the duration of the employee enrollment plus 1 year after removal from the Corporate Account.
Log Komunikasi: Interaksi rojongan customer dipikagaduh salila 3 taun pikeun jaminan kualitas sarta resolusi sengketa.
Data Analytics: Data analitik agrégat sareng anonim tiasa dipikagaduh salamina sabab henteu ngaidentipikasi individu.

When personal data is no longer needed and no legal obligation requires its retention, we securely delete or irreversibly anonymize it using industry-standard methods.

8. AI jeung Otomatis Putusan-Nyieun

Foodfy nganggo intelijen buatan sareng pamrosésan otomatis dina sababaraha fitur Platform. Kami komitmen kana transparansi ngeunaan kumaha téknologi ieu ngolah data anjeun.

8.1 Kumaha AI Ngolah Data Anjeun

Rekomendasi Pribadi: Model AI nganalisa sajarah pesenan anjeun, paripolah browsing, lokasi, sareng karesep pikeun nyarankeun usaha, produk, sareng tawaran. Ngolah ieu dumasar kana kapentingan sah.
Search Ranking: Search results are ranked using algorithms that consider relevance, distance, popularity, ratings, and personalization signals.
Paménta Forecasting: Pikeun Mitra Usaha, AI nganalisa data urutan sajarah, pola musiman, kajadian lokal, sareng data cuaca pikeun ngaduga paménta. Ieu ngagunakeun data bisnis aggregated.
Optimasi ménu: AI nyarankeun pangaluyuan harga sareng modifikasi ménu dumasar kana data penjualan, analisa pesaing, sareng kahoyong pelanggan. Kaputusan ahir sok dilakukeun ku Mitra Usaha.
Deteksi panipuan: Sistem otomatis nganalisis pola transaksi, inpormasi alat, sareng sinyal paripolah pikeun ngaidentipikasi kagiatan anu berpotensi curang. Transaksi anu ditandaan tiasa diulas ku analis manusa.
NutriLife AI: AI nganalisa poto tuangeun pikeun ngira-ngira eusi gizi sareng ngahasilkeun rekomendasi diet pribadi dumasar kana profil kaséhatan anjeun. Tempo Bagéan 9 pikeun detil.
Pamasaran otomatis: AI ngahasilkeun kontén pamasaran, kampanye email, sareng tawaran promosi pikeun Mitra Usaha dumasar kana ségméntasi palanggan sareng data paripolah.

8.2 Hak Anjeun Ngeunaan Kaputusan Otomatis

Under applicable law (including GDPR Article 22), you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Where such automated decisions are made:

You have the right to obtain human intervention and review of the decision.
You have the right to express your point of view and contest the decision.
You may request an explanation of the logic involved in the automated decision.

To exercise these rights, contact us at [email protected].

8.3 AI Data Safeguards

Data anu dikirim ka panyadia AI pihak katilu (Anthropic, OpenAI) diolah dina perjanjian ngolah data perusahaan. Data anjeun henteu dianggo pikeun ngalatih modél AI tujuan umumna.
Pelatihan modél AI ku Foodfy nganggo data anonim sareng agrégat anu henteu ngaidentipikasi pangguna individu.
Kaluaran AI téh probabilistik sarta dibere salaku saran atawa perkiraan, teu determinations definitif.

9. Kaséhatan sareng Data Biometrik (NutriLife)

NutriLife ngolah data sénsitip nu patali jeung kaséhatan sarta biometric nu merlukeun panyalindungan husus dina hukum privasi lumaku. Bagian ieu nyadiakeun inpo wincik tentang kumaha urang nanganan data ieu.

9.1 Kategori Data Kaséhatan Dikumpulkeun

With your explicit consent, NutriLife may collect and process the following categories of health data:

Pangukuran Fisik: Beurat awak, jangkungna, persentase gajih awak, kuriling cangkéng, kuriling hip, sareng indéks massa awak (BMI).
Vital Signs: Tingkat glukosa getih, bacaan tekanan darah, sareng denyut jantung.
Indikator gaya hirup: Sleep duration, hydration levels, daily step count, energy levels, stress levels, mood, and digestive health indicators.
Émbaran dietary: Entri diary dahareun, foto hidangan, asupan kalori jeung makronutrien (protéin, karbohidrat, lemak, serat, gula, natrium), asupan micronutrient (vitamin A ngaliwatan B12, kalsium, beusi, kalium, jeung sajabana), tipe dietary, sarta alergi dahareun.
Propil Kaséhatan: Tanggal lahir, jenis kelamin, tingkat aktivitas, tujuan kaséhatan (leungitna beurat, gain, pangropéa), beurat target, kaayaan médis, pamakéan suplement, kakandungan atawa status breastfeeding.
Data Analisis AI: Poto tuangeun dianalisis ku AI, skor kapercayaan, sareng perkiraan gizi anu dibangkitkeun AI.

9.2 Dasar Hukum sarta Idin

Data kaséhatan sareng biometrik digolongkeun kana data kategori khusus dina GDPR (Pasal 9) sareng undang-undang anu sami di dunya. Kami ngolah data ieu sacara éksklusif dumasar kana idin eksplisit anjeun, anu anjeun bikeun salami NutriLife onboarding. Anjeun tiasa mundur idin anjeun iraha waé ku nganonaktipkeun NutriLife dina setélan akun anjeun, anu bakal nyababkeun ngahapus data kaséhatan anjeun dina 30 dinten.

9.3 Watesan Tujuan

Your NutriLife health data is used strictly for the following purposes:

Ngitung tingkat métabolik basal anjeun (BMR), total pengeluaran énergi sapopoé (TDEE), sareng target kalori sareng makronutrien anu dipersonalisasi.
Tracking your food diary entries and nutritional intake over time.
Providing AI-powered dietary suggestions and meal plan recommendations.
Nampilkeun tren kaséhatan sareng kamajuan ka arah tujuan anu anjeun nyarios.

9.4 Protection Data ketat

Data kaséhatan NutriLife énkripsi nalika istirahat sareng transit nganggo enkripsi AES-256 sareng TLS 1.3.
Data kaséhatan disimpen sacara misah ti data Platform umum kalayan kadali aksés tambahan.
Data kaséhatan NutriLife PERNAH dibagikeun sareng perusahaan asuransi, pangusaha, pangiklan, atanapi pihak katilu mana waé pikeun tujuan anu teu aya hubunganana sareng nyayogikeun jasa NutriLife.
Data kaséhatan henteu kantos dianggo pikeun nargetkeun iklan atanapi dijual ka pihak katilu.
Aksés ka data kaséhatan dina Foodfy dibatesan pikeun tanaga sareng sistem penting dina dasar anu kedah terang.

10. Data Langganan Foodfy Emas

When you subscribe to Foodfy Gold, we process additional data related to your membership:

Subscription Data: Jinis rencana, status langganan (aktip, uji coba, direureuhkeun, dibatalkeun, kadaluwarsa), tanggal ngamimitian sareng tungtung, kaping periode sidang, sareng kaping pembaharuan.
Data pamayaran: Stripe customer ID, Stripe subscription ID, payment method (last four digits and card type only), and billing history. Full card details are stored exclusively by Stripe.
Mangpaat Pamakéan: Total orders placed with Gold benefits, delivery savings, discount savings, total calculated savings, and benefit redemption logs.

This data is processed to manage your subscription, apply benefits to eligible orders, calculate your savings, and provide you with subscription management features. Legal basis: performance of contract.

11. Akun Perusahaan sareng Data Pagawe

Pikeun Foodfy for Work (Akun Perusahaan), tanggung jawab ngolah data dibagi:

11.1 Hubungan Data Controller

The enrolling organization (employer) acts as the data controller for employee personal data provided through the Corporate Account. Foodfy acts as a data processor, processing employee data solely as instructed by the employer and in accordance with the Foodfy for Work Data Processing Agreement.

11.2 Data dikumpulkeun

Nami karyawan, alamat email, sareng peran dina Akun Perusahaan (admin, manajer, karyawan).
Departemen, pusat biaya, sareng nomer rujukan karyawan sakumaha anu disayogikeun ku dunungan.
Wallet balance, credit history, spending history, and refund records.
Sajarah pesenan dilakukeun nganggo dompét perusahaan, kalebet barang anu dipesen sareng jumlahna.

11.3 Tanggung jawab dunungan

Dunungan tanggung jawab: (a) gaduh dasar anu sah pikeun ngabagi data karyawan sareng Foodfy; (b) informing karyawan ngeunaan ngolah data ngaliwatan Platform nu; (c) ngaréspon kana pamundut hak data karyawan anu aya hubunganana sareng data anu dikawasa ku dunungan; jeung (d) mastikeun patuh kana pagawean jeung hukum panyalindungan data lumaku.

12. Data Operasional Pangiriman Drone

When drone delivery services are used, the following additional data is processed:

Route and GPS Data: Jalur penerbangan drone, titik relay ngaliwatan lokasi DronePort, koordinat GPS pangiriman, sareng perkiraan waktos kadatangan.
Pangiriman Data Mitra: Pikeun mitra pangiriman anu sanggup drone: lokasi sacara real-time salami pangiriman aktip, statistik pangiriman, sareng log operasional.
Data DronePort: Metrik pamakean DronePort, jadwal pangropéa, sareng status operasional.
Data Pangiriman Palanggan: Precise delivery coordinates required for safe and accurate drone landing, which may be more precise than standard address-based delivery.

Data pangiriman drone diolah dina dasar hukum kinerja kontrak jeung, mana lumaku, kapentingan sah dina ngajaga operasi pangiriman aman tur efisien. Data lokasi real-time tina Mitra Pangiriman diolah ngan nalika pangiriman aktip.

13. Kaamanan Data

Foodfy ngalaksanakeun ukuran téknis sareng organisasi anu komprehensif, ngarah di industri pikeun ngajagi data pribadi anjeun:

13.1 Safeguards Téknis

Énkripsi sadaya data dina transit nganggo TLS 1.2+ (HTTPS dikuatkeun dina sadaya titik tungtung Platform).
Énkripsi data sénsitip dina sésana nganggo énkripsi AES-256.
Web application firewall (WAF) and DDoS protection powered by Cloudflare.
Jaringan pangiriman eusi (CDN) kalayan cache tepi pikeun pagelaran sareng kaamanan.
Pamrosésan pembayaran anu patuh PCI DSS ngaliwatan Stripe, tanpa neundeun nomer kartu pinuh dina server Foodfy.
Two-factor authentication (2FA) available for all accounts and mandatory for privileged accounts.
auténtikasi API ngagunakeun tokens aman kalawan watesan laju sarta deteksi nyiksa.
Regular automated vulnerability scanning and penetration testing.

13.2 Safeguards Organisasi

Role-based access controls ensuring employees can only access data necessary for their function.
Arsitéktur data multi-tenant sareng sharding database khusus nagara, mastikeun data tina yurisdiksi anu béda sacara logis dipisahkeun.
Perjangjian ngolah data sareng sadaya panyadia ladenan pihak katilu.
Regular security awareness training for all personnel with access to personal data.
Prosedur réspon kajadian sareng tim kaamanan khusus.
Prakték ngaminimalkeun data: urang ngan ukur ngumpulkeun data anu dipikabutuh pikeun tujuan anu ditangtukeun.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage all users to take steps to protect their own accounts, including using strong, unique passwords and enabling two-factor authentication.

14. Mindahkeun Data Internasional

Foodfy ngajalankeun sakuliah 250+ nagara ngaliwatan infrastruktur global sarta jaringan Mitra Téritori. Data pribadi anjeun tiasa ditransfer sareng diolah di nagara sanés ti nagara tempat anjeun. Nalika kami nransper data pribadi sacara internasional, kami ngalaksanakeun panjagaan anu pas pikeun mastikeun data anjeun tetep dijagi:

Standard Contractual Clauses (SCCs): Pikeun mindahkeun tina EEA/Inggris ka nagara tanpa kaputusan kacukupan, kami nganggo Klausa Kontrak Standar anu disatujuan Komisi Éropa.
Pasatujuan Ngolah Data: Sadaya panyadia ladenan pihak katilu ngolah data pribadi atas nama urang kabeungkeut ku pasatujuan ngolah data komprehensif nu ngawengku kawajiban panyalindungan data, syarat kaamanan, jeung safeguards mindahkeun cross-wates.
Sharding Data Spésifik Nagara: Arsitéktur multi-tenant kami nganggo shards database khusus nagara, anu hartosna data operasional disimpen sareng diprosés dina atanapi caket daérah géografis Téritori anu relevan, ngaminimalkeun transfer lintas wates pikeun operasi sadinten.
Kaputusan kacukupan: Where available, we rely on adequacy decisions issued by relevant regulatory authorities.
Transfer Impact Assessments: We conduct transfer impact assessments for data transfers to countries without adequate data protection frameworks.

15. Hak Privasi Anjeun

Gumantung kana lokasi anjeun, anjeun gaduh sababaraha hak ngeunaan data pribadi anjeun. Foodfy komitmen pikeun ngahormatan hak-hak ieu pikeun sadaya pangguna sadunya:

15.1 Hak Universal

Regardless of your location, all Foodfy users may:

Aksés: Request a copy of the personal data we hold about you in a structured, commonly used, machine-readable format.
Koréksi: Request correction of inaccurate, incomplete, or outdated personal data. You can update most information directly through your account settings.
Hapusan: Request deletion of your personal data, subject to legitimate retention requirements (legal obligations, dispute resolution, fraud prevention).
Restriction: Request that we restrict the processing of your personal data in certain circumstances.
Bantahan: Obyek kana ngolah data pribadi anjeun pikeun tujuan pamasaran langsung. Urang bakal sasuai jeung sagala requests milih-kaluar promptly.
Withdrawal of Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.
Hapusan Akun: Request complete deletion of your account and associated personal data. Account deletion requests are processed within 30 days.

15.2 Kumaha Ngalaksanakeun Hak Anjeun

You may exercise your rights by:

Ngaksés setélan akun anjeun pikeun ngokolakeun data swalayan, parobahan preferensi, sareng ngahapus akun.
Kirim surélék Patugas Perlindungan Data kami di [email protected] kalayan pamundut anjeun.
Emailing [email protected] pikeun patarosan privasi umum.

We will verify your identity before processing requests and respond within the timeframe required by applicable law (typically 30 days, extendable by an additional 60 days for complex requests with prior notification to you).

16. Hak Privasi Daerah

The following supplemental provisions apply based on your location and the applicable data protection law:

16.1 Wewengkon Ékonomi Éropa jeung Britania Raya (GDPR / UK GDPR)

Upami anjeun aya di EEA atanapi Inggris, anjeun gaduh hak tambahan di handap ieu dina Peraturan Perlindungan Data Umum:

Portability Data: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
Otomatis Putusan-Nyieun: Right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects (GDPR Article 22). See Section 8.2.
Patugas Protection Data: DPO kami tiasa dihontal di [email protected] pikeun patarosan anu aya hubunganana sareng GDPR.

16.2 California, Amérika Sarikat (CCPA / CPRA)

Upami anjeun nyicingan California, anjeun gaduh hak di handap ieu dina Undang-Undang Privasi Konsumen California (sakumaha diralat ku Undang-undang Hak Privasi California):

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources of collection, the business purpose for collecting, and the categories of third parties with whom we share it.
Right to Delete: Request deletion of your personal information, subject to statutory exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing: Foodfy henteu ngajual inpormasi pribadi anjeun. Kami henteu ngabagi inpormasi pribadi pikeun iklan paripolah cross-konteks tanpa idin anjeun.
Right to Limit Use of Sensitive Personal Information: Request limitation of the use and disclosure of sensitive personal information to what is necessary for the purposes specified.
Non-Diskriminasi: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Dina 12 sasih sateuacana, kami henteu acan ngajual inpormasi pribadi sakumaha anu didefinisikeun ku CCPA/CPRA.

16.3 Brazil (LGPD)

Upami anjeun aya di Brazil, anjeun gaduh hak dina Lei Geral de Protecao de Dados (LGPD), kalebet hak pikeun: konfirmasi ngolah, aksés, koreksi, anonimisasi, portabilitas, ngahapus data anu diolah kalayan idin, inpormasi ngeunaan ngabagi, sareng hak pikeun petisi ka Autoridade Nacional de Protecao de Dados (ANPD).

16.4 Asia-Pasifik (PDPA jeung Hukum Sarua)

Upami anjeun aya di yurisdiksi sareng Act Protection Data Pribadi atanapi undang-undang anu sarimbag (kalebet Singapura, Thailand, sareng nagara-nagara Asia-Pasifik sanés), anjeun gaduh hak pikeun ngaksés, koreksi, ngahapus, ngawatesan, sareng portabilitas data pribadi anjeun sakumaha anu disayogikeun ku hukum lokal anu berlaku. Kami ngolah data anjeun saluyu sareng sarat PDPA anu berlaku, kalebet kéngingkeun idin upami diperyogikeun sareng nyayogikeun bewara transparan ngeunaan kagiatan ngolah data.

16.5 Wétan Tengah jeung Afrika Kalér

Pikeun pangguna di UAE, Arab Saudi, sareng yurisdiksi MENA anu sanés, kami sasuai sareng peraturan panyalindungan data anu lumaku kalebet Dekrit Federal UAE ngeunaan Perlindungan Data Pribadi, Hukum Perlindungan Data Pribadi Arab Saudi, sareng kerangka régional anu sami. Ieu ngawengku sarat lokalisasi data mana lumaku.

16.6 Yurisdiksi séjén

Foodfy komitmen pikeun matuh hukum panyalindungan data dina sadaya yurisdiksi dimana urang beroperasi. Upami yurisdiksi anjeun ngagaduhan syarat panyalindungan data khusus anu henteu didaptarkeun di luhur, mangga ngahubungi [email protected] kanggo inpormasi ngeunaan kumaha urang ngajagi hak anjeun dina hukum lokal anjeun.

17. Bewara Pelanggaran Data

Upami aya palanggaran data pribadi anu nyababkeun résiko kana hak sareng kabébasan anjeun, Foodfy bakal:

Béjakeun ka otoritas pengawas anu relevan dina 72 jam saatos sadar kana palanggaran éta, sakumaha anu diwajibkeun ku Pasal 33 GDPR sareng sasadiaan anu sarimbag dina yurisdiksi sanés.
Béjakeun ka jalma anu kapangaruhan tanpa reureuh anu teu pantes nalika palanggaran éta kamungkinan nyababkeun résiko anu luhur pikeun hak sareng kabébasanna, sakumaha anu diwajibkeun ku Pasal 34 GDPR sareng sasadiaan anu sarimbag.
Provide details of the nature of the breach, the categories and approximate number of data subjects and records affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.
Dokuméntasikeun sadaya pelanggaran data pribadi, kalebet kanyataan, épék, sareng tindakan rémédial anu dilaksanakeun, saluyu sareng pendaptaran pelanggaran internal urang.

Upami anjeun yakin yén data anjeun parantos dikompromi, mangga langsung ngahubungi [email protected].

18. Barudak jeung Barudak

The Platform is not intended for use by individuals under the age of 18, or the age of digital consent in their jurisdiction (which may be lower, such as 16 in most EEA countries or 13 in the United States under COPPA). We do not knowingly collect personal information from children below the applicable age threshold.

Upami urang sadar yén kami henteu ngahaja ngumpulkeun data pribadi ti murangkalih sahandapeun ambang umur anu berlaku tanpa idin kolot atanapi wali, kami bakal langsung nyandak léngkah pikeun ngahapus inpormasi éta tina sistem kami. Upami anjeun yakin yén kami parantos ngumpulkeun inpormasi ti murangkalih, mangga ngahubungi kami langsung di [email protected].

19. Tumbu jeung jasa pihak-katilu

The Platform may contain links to third-party websites, applications, and services. This Privacy Policy does not apply to any third-party services, and Foodfy is not responsible for the privacy practices, content, or security of any third party. This includes Business Partner websites built using the Foodfy Website Builder, which may contain additional third-party integrations selected by the Business Partner.

We encourage you to review the privacy policy of every third-party service you interact with.

20. Parobahan kana Kabijakan Privasi Ieu

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes:

We will update the "Last updated" date at the top of this page.
We will provide prominent notice on the Platform.
Pikeun parobahan material anu sacara signifikan mangaruhan kumaha kami ngolah data anjeun, kami bakal ngabéjaan ku email sahenteuna 30 dinten sateuacan parobihan dikuatkeun.
Where required by law, we will obtain your consent to material changes in data processing practices.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

21. Taros Kami

Upami anjeun gaduh patarosan, masalah, atanapi pamundut ngeunaan Kabijakan Privasi ieu, data pribadi anjeun, atanapi prakték panyalindungan data kami, mangga ngahubungi kami ngalangkungan saluran ieu:

Patugas Protection Data: [email protected]
Privacy Inquiries: [email protected]
Security Issues: [email protected]
Rojongan Umum: [email protected]
Website: foodfy.ai

We are committed to resolving any complaints about our collection or use of your personal data. If you have a complaint, please contact us first. If we are unable to resolve your concern, you have the right to lodge a complaint with your local data protection supervisory authority.