Privacy Notice
Last updated 13 November 2026
Who is responsible
Cardzo Entertainment LLP, a limited liability partnership registered in India under the LLP Act, 2008 (LLPIN: ACI-2549), registered office No. 4/14th Street, Brodipet, Guntur, Andhra Pradesh 522002, India, contact hello@cardzo.co.in, decides how your personal data is used in BiteReel (the "controller").
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Your email address and Google account ID, from Google sign-in | To create and secure your account | Contract |
| Restaurant details you enter (name, location label, timezone, currency, colour, call to action, link) | To make your reels | Contract |
| Dish photos you upload, dish names, prices and offer details | To make, store and deliver your reels | Contract |
| Reels, covers and captions we make for you | To let you review and download them | Contract |
| Purchase records (plan, amount, date, Stripe reference) | To provide credits, keep accounts and meet tax law | Contract; legal obligation |
| Technical logs (time, page, error codes) | To keep the service secure and working | Legitimate interests |
We remove location and camera data (EXIF) from photos when you upload them. Please do not upload photos showing people. Card details are entered on Stripe's page and handled by Stripe; we never see or store them.
Cookies and analytics
We use one essential cookie (__session) to keep you signed in. We do not use Google Analytics or advertising cookies. If we ever add analytics, it will only load after you agree, and it will not receive anything you type into the app.
Who we share data with
- Google Cloud and Firebase (Google LLC): sign-in, hosting, database and file storage, in the London (europe-west2) region.
- Stripe: payments.
- Replicate: only if you choose AI effects once they are available, to make that clip.
We do not sell your data or use it for advertising. Some of these providers may process data outside your country under their standard contractual safeguards.
How long we keep it
- Your account, restaurant details, dishes and reels: while your account is open.
- A photo you delete: hidden at once and permanently removed from storage within 7 days.
- Purchase records: up to 8 years, as tax and accounting law requires.
- When you close your account, we delete your content and account data within 30 days, apart from records we must keep by law.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, by emailing hello@cardzo.co.in. We will reply within 30 days. You can also complain to your data protection authority: in the UK the Information Commissioner's Office (ico.org.uk), in India the Data Protection Board of India.
Security
Your files are stored privately and can only be opened by your account or through short-lived signed links. Data is encrypted in transit, and secrets are kept in Google Secret Manager.
Changes
We will update this notice when what we do changes, and tell you about important changes.