Demo Log in Start free

Product

POS & fiscal receiptsTables & floor planKitchen & KDSQR menuReservations & bookingsCustomers & membershipsStock & recipesInvoices & e-FacturaReportsTimesheets & HRMobile appIntegrationsAI assistants

Solutions

Coffee shopBarRestaurant / BistroBeauty salonMedical & clinicsLocal business
Pricing Book a demo
Start free Log in Română

Privacy Policy

Introduction

This privacy policy ("Privacy Policy") describes the collection of personal information by JETFUEL 258 SRL ("JETFUEL 258 SRL", "Company," "we," "us", or "our") from users ("you", "your") of our website at insmart.ro (our "Site") along with our related websites, networks, applications, platforms, and other services provided by us and on which a link to this Privacy Policy is displayed (collectively, our "Service" or "Services"). This Privacy Policy also describes our use and disclosure of such information. This Privacy Policy is incorporated by reference into our Terms and Conditions at Tersms and Conditions.

This Privacy Policy also describes your rights as a data subject to inquire about the personal information that we process and describes certain rights that you, as the data subject, have regarding this information. These rights include your choice to limit the use and disclosure of your information, including where your personal information may be used for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by you. To exercise these rights, you may contact us using the information in the 'Contacting us' section of this Privacy Policy.

For the purposes of EU and UK data protection laws ("Data Protection Legislation"), JETFUEL 258 SRL is a data controller (i.e., the company that is responsible for and controls the processing of your personal information).

Please read this Privacy Policy carefully to understand our practices regarding your personal information and how we will use it. By accepting this Privacy Policy and Terms and Conditions, you agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.

Contacting us If you have any questions or comments about this Privacy Policy, please contact us using the following contact information:

JETFUEL 258 SRL
Strada Moldovei, nr.1, Timisoara, Judetul Timis, Romania
Email: support@insmart.ro

What information do we collect?

We use your personal information to carry out the obligations arising from providing and improving the Service. This section describes the types and categories of personal information we may collect, and how we may use that information.

InSmart use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Information you provide us directly

We collect personal information that you provide when you sign up, enter your information into online forms, or otherwise use the Site and the Services. We use this personal information in a variety of ways, and this personal information includes the following:

  • When you create an account on the Service we collect your first name, last name, and email address
  • When you order or use the Services, we will collect the information necessary to complete billing transactions, including your first name, last name, credit card information, and a billing address, which may be your personal address or the address of the company you are associated with
  • There may be times where certain features and functionality of the Service are invite-only, and as a result, we may collect your first name, last name, email address, the URL of your company or entity you are associated with, links to social media accounts so we may contact you that way, and a mobile phone number we may send scheduling reminders to. We may also collect the email addresses of contacts associated with you that you would like to include in these invitations
  • If you sign up for our mailing lists, provide feedback, or otherwise communicate with us, we may collect contact and business information from you, such as your first and last name, e-mail address, mailing address, one or more phone numbers and the company name with which you are associated with
  • If you apply for a job posting on our careers page, we collect information necessary to process your application, including your name, address, contact information, and details regarding your education and prior employment.

We also collect other types of personal information that you provide to us voluntarily, such as if you contact us via the Site or Service regarding customer support or if you ask other questions regarding the Services.

Information Collected from You About Others

If you decide to invite a third party to create an account, receive an invitation for a demo, or otherwise interact with the Service, we will collect the third party's email addresses in order to send an invitational email to, and follow up with, the third party. You should ensure that you know the third party and they are expecting this invitation. In any case, you and/or the third party may contact us at support@insmart.ro to request the removal of this information from our databases.

Customer End-User Data

Through your use of the Services, you may provide Company with data, including personally identifiable information, you collect from your end-users, customers, prospects, or other users who interact directly with the websites, webpages, applications, landing pages, or any other media provided to or integrated with the Services. This data is processed on your behalf and under your instruction in accordance with our Data Processing Addendum.

How do we use personal information?

We collect personal information when you create an account with the Services, when you update your account information, or otherwise correspond with us. We use your personal information for the following purposes:

  • To facilitate the creation of your account with the Service, to secure and personalize your interaction with the Service, and to provide the Services you have requested
  • To send you a welcome email to verify ownership of the email address provided when your account was created with the Service
  • To send you administrative email notifications, such as security or support and maintenance advisories
  • We may also use the personal information you provide to contact you regarding your use of the Service or to solicit feedback
  • When you communicate with us using one of the methods described in this Privacy Policy, we may also keep a record of the time and date of any correspondence, and also organize this correspondence in one or more of an electronic filing system, an email system, or a customer relationship management system
  • We link this personal information to data about the way you use our Service and the pages you visit to help enhance, improve, operate, and maintain our Service, our platforms, websites, and other systems
  • To prevent fraudulent use of our Service and other systems
  • To prevent or take action against activities that are, or may be, in violation of our Terms and Conditions or applicable law
  • We may also use the personal information you provide for direct marketing of our Services to you. We allow you to opt out from receiving marketing communications from us as described in the "Communication choices" section below, and also at the time you sign up and create an account with the Service. Even if you opt out, we may continue to send you administrative emails, including, for example, periodic updates to this Privacy Policy
  • To display personalized or targeted content to you, and to display targeted advertising on third-party websites
  • For internal product development purposes to develop new products and services, and to improve existing ones
  • To respond to your inquiries related to employment opportunities with us, or other general inquiries

Legal basis for processing in Europe

If you are a resident of the EU, the United Kingdom, or Switzerland, we need to inform you about the legal basis on which we collect and use your personal information. In the EU, the United Kingdom, and Switzerland, the purposes for which we process your personal information are:

  • Where we need to perform the contract we are about to enter into or have entered into with you for the Service
  • For the purposes of legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests
  • When we have your consent to do so. When consent is the legal basis for our processing of your personal data, you may withdraw such consent at any time
  • Where we need to comply with a legal or regulatory obligation

The legal basis depends on the category of personal information being processed, and the purpose for that processing. The following table indicates each category of personal information we process, and the legal bases we rely on to do so. Where legitimate interest has been used as the legal basis for processing, the specific legitimate interest we use has been described.

Please contact us if you need details about the specific legal basis we are relying on to process your personal information where one or more legal bases have been indicated.

Category of Personal Information and Legal Basis for Processing

Contact And Account Information: The performance of a contract and to take steps prior to entering into a contract; Our legitimate interests, namely, administering the Service, for marketing purposes and communicating with users; Where we need to comply with a legal or regulatory obligation.

Payment card information: The performance of a contract and to take steps prior to entering into a contract; Where we need to comply with a legal or regulatory obligation.

Online Inquiries and Correspondence: Legitimate interest, namely for marketing purposes and to respond to inquiries.

Employee candidate information: Legitimate interest, namely for considering your application for employment with us.

When do we share personal information?

Except as described in this Privacy Policy, we will not disclose your personal information that we collect on the Service to third parties without your consent. Even if you provide consent, you have the choice to opt out of this sharing, and you may do so by using the information in the 'Contacting us' section of this Privacy Policy. We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:

  • Service Providers. We may disclose personal information to third-party service providers (e.g., web hosting providers and other SaaS providers) who assist us in our work and who are acting as agents to perform this work on behalf of and under our instructions. We limit the personal information provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such personal information as part of our contractual arrangements with these Service Providers
  • Business Transfers. Information about our users, including personal information, may be disclosed and otherwise transferred to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of company assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets
  • To Protect our Interests. We also disclose personal information if we believe that doing so is legally required, or is in our interest to protect our property or other legal rights (including, but not limited to, enforcement of our agreements), or the rights or property of others, or otherwise to help protect the safety or security of our Service and other users of the Service
  • To Comply with the Law. We may also disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements

AI assistants (Claude, ChatGPT)

You can connect your InSmart account to an AI assistant, such as Claude (Anthropic) or ChatGPT (OpenAI), through the InSmart connector. You start the connection from the assistant you choose and approve it explicitly in InSmart, for one organization.

What data is shared. When you ask the assistant something, InSmart sends it only the data needed for that request, within your account's permissions:

  • catalog and menu data (products, prices, descriptions, categories, photos, nutrition, allergens);
  • stock and warehouses;
  • sales totals and aggregated reports;
  • bookings: the customer's first name, time, party size, status, table and notes. The customer's full name, phone number and e-mail address are only shared when you explicitly ask for them;
  • the connected user's name and e-mail address, and the organization's name.

Purpose. Carrying out your requests (for example, adding a product or showing sales) and showing the result in the conversation.

Recipients. The data goes to the provider of the assistant you chose (Anthropic PBC for Claude, OpenAI for ChatGPT), which processes it under its own privacy policy. InSmart does not sell this data or use it for any other purpose.

What we keep. For the connection we keep a connection identifier and access tokens stored as cryptographic hashes (never in plain text), valid for at most 60 days after last use. Photos uploaded through an assistant are kept like any other product photo. Every change made through an assistant is recorded in the organization's activity log (who, when, what changed), just like changes made directly in InSmart. We do not keep the content of your conversations with the assistant.

Your control. You can disconnect the assistant at any time in Claude's or ChatGPT's settings, or in InSmart → Integrations → AI assistants. Owners and administrators can disconnect any connection in their organization. After disconnecting, the assistant can no longer access your data. To delete connection data or for other data requests: support@insmart.ro. More about the connector: insmart.ro/ai.

Communication choices

If you receive marketing emails from us, you may unsubscribe at any time by following the instructions contained within the email. You may also opt out from receiving marketing emails from us, and any other promotional communications that we may send to you from time to time (e.g., by postal mail) by sending your request to us by email at support@insmart.ro or by writing to us at the address given in the 'Contacting Us' section of this Privacy Policy.

Please be aware that if you opt out of receiving marketing emails from us, it may take up to ten business days for us to process your opt-out request, and you may receive marketing emails from us during that period. Additionally, even after you opt out from receiving marketing messages from us, you will continue to receive administrative and transactional messages from us regarding your use of the Service.

Through your use of the Services, you may have provided us with a mobile telephone number. We may use this telephone number to send automated text/SMS messages, for example, to send you reminders for various events, webinars, and strategy sessions you have signed up for. You may opt out of receiving these messages by replying with a request to opt out. You may also opt out of receiving these messages by sending your request to us by email at support@insmart.ro or by writing to us at the address given in the 'Contacting Us' section of this Privacy Policy.

Rights to access

If you have a user account and profile on our Service, you have the ability to access and update many categories of personal information that you provide to us by logging in to your account and accessing your account settings. If you wish to access or amend any other personal information we hold about you, you may contact us at support@insmart.ro. If you request that we delete your account with our Service, we will do so within a reasonable period of time, but we may need to retain some of your personal information in order to satisfy our legal obligations, or where we reasonably believe that we have a legitimate reason to do so.

How long do we keep your personal information for?

Unless otherwise specifically stated elsewhere in this Privacy Policy, we will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Aggregated and anonymized data that no longer identifies the user of the Service is maintained for the purposes necessary to provide the Service.

EU privacy rights

If you are located in the EU, the United Kingdom, or Switzerland, you have the following Data Subject Access Rights with respect to your personal information that we hold:

  • Right of access. You have the right to access the personal information that we hold about you
  • Right to rectification. You may have the right to require us to correct any inaccurate or incomplete personal information we hold about you
  • Right to erasure. In certain circumstances, you may have the right to the erasure of your personal information we hold about you (for example where it is no longer necessary in relation to the purposes for which it was collected or processed)
  • Right to restriction. You may have the right to request that we restrict the processing of your personal information in certain circumstances (for example where the accuracy of the personal information is contested by you, for a period enabling us to verify the accuracy of that personal information)
  • Right to portability. In some limited circumstances, you may have the right to portability which allows you to move, copy, or transfer personal information from one organization to another
  • Right to object. You have a right to object to us processing your personal information when the processing is based on legitimate interests and also to stop us from sending you direct marketing
  • Rights in relation to automated decision making and profiling. You have the right not to be subject to a decision that affects you based solely on automated processing. We do not perform any automated decision making and profiling

If you wish to exercise one of these rights, please contact us using the information in the 'Contacting us' section of this Privacy Policy.

What is our policy on children?

Children's safety is important to us, and we encourage parents and guardians to take an active interest in the online activities of their children. Our Services are not directed to users under the age of 16, and we do not knowingly collect personal information from children under the age of 16 without obtaining parental consent. If we learn that we have collected personal information from a child under the age of 16 on our Services, we will delete that information as quickly as possible. If you believe that we may have collected any such personal information on our Services, please notify us at support@insmart.ro.

Where do we store and process your personal information?

International Transfers: Our servers and data centers are located in the European Union (EU). If you choose to use the Service from outside the EU, then you should know that you are transferring your personal information outside of your region and into the EU for storage and processing. We may also transfer your data from the EU to other countries or regions in connection with the storage and processing of data, fulfilling your requests, and operating the Service. You should know that each region can have its own privacy and data security laws, some of which may be less stringent as compared to those of your own region.

How do we secure your personal information?

To help protect your data, we use commercially reasonable steps to protect the data that we collect, including your personal information. The reasonable steps include protecting this data against accidental loss, unauthorized use, disclosure, and restricting access to personal information by our staff. The Service is hosted by a third-party hosting company that we have determined maintains adequate security controls and utilizes TLS encryption for all internet communication with the Service. We also require all staff that administer and develop the Service to follow industry-standard controls, including strong passwords, the use of anti-virus and anti-malware software, disk encryption, and other best practices.

We use various 3rd party processors to enable us to provide the Service, and as part of our vendor due-diligence, we review the security controls these processors have in place and ensure they meet industry standards appropriate for the type of data we collect.

You should keep in mind, however, that the Service utilizes software, hardware, and networks, which from time to time require maintenance and experience problems beyond our control. Note that no data transmission over the public internet or encryption method can be guaranteed to be 100% secure. Consequently, we cannot ensure or warrant the security of any information that you provide to us. You transmit information to us at your own risk.

Updates to this Policy

We may occasionally update this Policy. When we do, we will also revise the 'last updated' date at the beginning of the Policy. Your continued use of our Service after such changes will be subject to the then-current policy. If we change this Policy in a manner that is material, we will use reasonable efforts to notify you via the contact methods you have provided of the change prior to applying the change to any personal information that we collected from you prior to the date the change becomes effective. We encourage you to periodically review this Privacy Policy to stay informed about how we collect, use, and disclose personal information.