Privacy policy

1. Who we are

Bountiflow (“Bountiflow”, “we”, “us”) provides restaurants with online storefronts, order management, menu tools and customer messaging features. Our contact details are:

2. Who this policy covers

This policy explains how we handle personal information about:

• Restaurants and their staff who create a Bountiflow account and use our merchant app (“merchants”).
• Customers who browse a restaurant’s Bountiflow storefront, place orders, or message a restaurant through a WhatsApp number connected to Bountiflow.
• Visitors to bountiflow.com.

For merchant accounts and our own website, we decide how and why personal information is used. For customer orders and messages, we act on behalf of the restaurant the customer is ordering from or messaging: the restaurant decides how it uses its customers’ information, and we process it to provide our service to that restaurant.

3. Information we collect

Merchants and staff

• Account details: your name, email address and password (stored only as an Argon2 hash), or your Google account identifier and email if you sign in with Google.
• Restaurant details: restaurant and branch names, addresses, phone and WhatsApp numbers, opening hours, delivery areas and fees, menus, prices, photos, logos and brand settings.
• Bank details you add for a branch, so customers know where to pay. Account numbers are encrypted, and only the last four digits are shown in the app.
• Staff and invitations: the names, email addresses and roles of people you invite.
• Activity in the merchant app, such as order status changes and settings updates, kept as an audit trail for your restaurant.

Customers

• Order details: your name, phone number, the items you order and any kitchen notes, and for deliveries your delivery area and address.
• A cookie with a random identifier, so the storefront can link your orders to your device without an account. Your cart, saved items and the name and phone number you entered are kept in your browser’s storage on your device.
• If you turn on notifications, a push notification token for your device and the restaurants you subscribed to.

WhatsApp Business Platform

When a restaurant connects a WhatsApp Business number to Bountiflow through Meta’s Embedded Signup, we receive and store:

• The restaurant’s WhatsApp Business Account ID, phone number ID and display phone number.
• An access token that lets Bountiflow use the WhatsApp Business Platform for that number. It is encrypted and deleted when the number is disconnected.
• For messages sent to or from that number: the customer’s WhatsApp phone number, message identifiers, timestamps, message type, and the text of text messages. We don’t store photos, voice notes, documents or other media content.

Website visitors

bountiflow.com uses Plausible Analytics, which measures visits in aggregate without cookies and without collecting personal information that identifies you. Our website doesn’t set advertising or tracking cookies.

Technical information

Our servers process technical data such as IP addresses, browser type and request times to deliver the service, prevent abuse (for example, limiting repeated sign-in attempts) and fix problems.

4. How we use information

• To provide the service: running storefronts, taking and tracking orders, showing orders to the restaurant, and sending order updates.
• To create and secure accounts, verify email addresses, reset passwords and manage staff access.
• To send notifications that customers have opted in to, such as order updates and a restaurant’s promotions.
• To send merchants service emails, such as account verification, invitations and notices about their storefront address.
• To operate WhatsApp features for restaurants that connect a number (see the next section).
• To keep the service safe and reliable, prevent fraud and abuse, and meet our legal obligations.
• To understand, in aggregate, how the service and our website are used so we can improve them.

We use information because it is necessary to provide the service you asked for, because we have a legitimate interest in running and securing it, because you consented (for example, to push notifications), or because the law requires it. We do not sell personal information, and we do not use it for third-party advertising.

5. How we use WhatsApp data

WhatsApp data is used only to provide Bountiflow’s features to the restaurant that connected the number: matching messages to that restaurant’s orders, and helping the restaurant keep its customers’ order status up to date.

• To work out whether a message is about an order and what it says (for example, “your food is on the way”), we send the message text to our language-interpretation provider, TypeSafe. The text is used only to answer that request.
• Message text is deleted automatically 30 days after the message was sent. The message’s identifiers, time and the order it was matched to are kept with the order record.
• Records of how a message was interpreted are deleted after 180 days. Raw notifications received from Meta are deleted 14 days after they are processed.
• We don’t use WhatsApp data for advertising, we don’t sell it or share it with data brokers, and we don’t use it to train AI models.
• We don’t send marketing messages to customers on WhatsApp.

Our use of the WhatsApp Business Platform is also subject to Meta’s terms and policies. Restaurants can disconnect their number at any time; see Data deletion.

6. Who we share information with

We share personal information only as needed to provide the service:

• The restaurant you order from or message. It sees your order and contact details so it can prepare and deliver your order.
• Service providers that process data on our behalf under contract:

We may also disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business, in which case this policy will continue to apply.

7. How long we keep information

• Merchant account and restaurant information: for as long as the account is open, then deleted or anonymised within 90 days of the account being closed, unless we need to keep it to meet a legal obligation.
• Orders: for as long as the restaurant’s account is open, so the restaurant can keep its records.
• WhatsApp message text: 30 days. Interpretation records: 180 days. Raw Meta notifications: 14 days after processing.
• Sign-in sessions, verification links and checkout quotes expire automatically.
• Push notification tokens: until notifications are turned off or the token stops working.

8. How we protect information

We use encryption in transit (HTTPS) for all traffic, encrypt sensitive values such as WhatsApp access tokens and bank account numbers at rest (AES-256-GCM), store passwords only as secure hashes, limit access by role within each restaurant, and keep an audit trail of important changes. No system is perfectly secure, but we work to protect your information and will notify affected users and regulators of a breach where the law requires.

9. Your rights

Depending on where you live, including under Nigeria’s Data Protection Act 2023, you may have the right to access the personal information we hold about you, correct it, delete it, object to or restrict how we use it, receive a copy in a portable format, and withdraw consent at any time.

To use these rights, email support@bountiflow.com. We may need to confirm your identity first. If your request is about a restaurant’s customer records, we may pass it to that restaurant, which controls that information. You can also complain to the Nigeria Data Protection Commission or your local data protection authority.

10. International transfers

Some of our service providers process information outside Nigeria. When that happens, we rely on safeguards recognised by applicable data protection law, such as contractual protections, to keep your information protected.

11. Children

Merchant accounts are for adults acting for a business. Our service is not directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the service changes. We will post the new version here with a new “last updated” date, and tell merchants about significant changes by email or in the merchant app.

13. Contact us

Questions about this policy or your information? Email support@bountiflow.com or write to us at 54, Olanrewaju, Ijoko, Ogun State, Nigeria.