Start your free 14-day trial. No credit card required.

Privacy Policy

We are committed to protecting your privacy and handling your personal data with transparency, security, and respect for your rights.

Last updated: 2026-05-17
01

Introduction and Scope

ChefSync SAS ("ChefSync," "we," "us," or "our") is committed to protecting your privacy and the personal data you entrust to us. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you access or use the ChefSync Platform, including our website, mobile applications, APIs, and related services (collectively, the "Services").

This policy applies to all users of the Services, including restaurant owners, managers, staff members, and any other individuals whose personal data we process in connection with the operation of the Platform. By using the Services, you acknowledge that you have read and understood this Privacy Policy.

Our data processing practices are governed by Colombian Law 1581 of 2012 ("Ley de Protección de Datos Personales"), Decree 1377 of 2013, and other applicable regulations issued by the Superintendencia de Industria y Comercio (SIC). Where our processing activities have cross-border implications, we also adhere to internationally recognized data protection principles.

02

Data Controller and Contact

ChefSync SAS is the data controller responsible for the personal data processed through the Services. We determine the purposes and means of processing your personal information.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, you may contact us:

  • Email: hello@chefsync.io
  • Address: ChefSync SAS, Bucaramanga, Santander, Colombia
  • Website: https://chefsync.io

We have designated a Data Protection Officer (DPO) responsible for overseeing our privacy compliance program. The DPO can be reached at the email address above and will respond to all inquiries within two (2) business days.

03

Information We Collect

We collect personal data that is necessary to provide, maintain, and improve the Services. The types of information we collect include:

Account and Registration Information

When you register for an account, we collect your name, email address, phone number, business name, business address, and role within the organization. For paid subscriptions, we also collect billing information, including payment method details processed by our secure payment processors.

Operational Data

As you use the Platform, we process operational data that you input, including order details, inventory records, staff schedules, customer preferences, and reservation information. While much of this data relates to your business operations, it may include personal data of your employees and customers.

Usage and Technical Data

We automatically collect information about how you interact with the Services, including IP addresses, browser type and version, device identifiers, operating system, screen resolution, pages visited, features used, time spent, and referral URLs. This data helps us diagnose issues, prevent fraud, and improve user experience.

Cookies and Similar Technologies

We use cookies, local storage, session storage, and device fingerprinting to authenticate users, maintain sessions, remember preferences, analyze usage, and detect security threats. For detailed information about the cookies we use, please refer to our Cookie Policy.

Communications

When you contact our support team, subscribe to newsletters, or participate in surveys, we collect the content of those communications, including email correspondence, chat transcripts, and feedback submissions.

04

Legal Basis for Processing

Under Colombian Law 1581 of 2012, we process personal data based on one or more of the following legal grounds:

  • Contractual necessity: Processing is necessary to perform our contract with you, including providing the Platform, managing your subscription, and delivering customer support.
  • Consent: For certain processing activities, such as marketing communications and non-essential analytics, we obtain your explicit consent. You may withdraw consent at any time.
  • Legitimate interests: We process data to maintain platform security, prevent fraud, improve our services, and comply with legal obligations, provided that your rights and freedoms are not overridden.
  • Legal obligation: We may process data to comply with applicable laws, regulations, court orders, or requests from government authorities.

We do not process personal data for purposes that are incompatible with those for which it was originally collected, unless we obtain your additional consent or are required by law to do so.

05

How We Use Your Information

We use the personal data we collect for the following purposes:

  • Providing the Services: To create and manage your account, authenticate your identity, process orders, synchronize kitchen operations, and enable the core functionality of the Platform.
  • Improving the Platform: To analyze usage patterns, identify bugs, develop new features, and optimize performance based on aggregated and anonymized data.
  • Customer support: To respond to your inquiries, troubleshoot issues, and provide technical assistance through email, chat, and phone channels.
  • Security and fraud prevention: To detect unauthorized access, prevent account abuse, identify fraudulent trial registrations, and protect the integrity of the Platform.
  • Billing and administration: To process payments, manage subscriptions, send invoices, and handle billing disputes.
  • Communications: To send service-related notifications, security alerts, product updates, and marketing materials (where you have consented).
  • Legal compliance: To comply with data protection laws, tax regulations, and other applicable legal requirements.
06

Data Sharing and Third-Party Services

We do not sell your personal data to third parties. We only share personal data in the following circumstances:

Service Providers

We engage trusted third-party providers to perform functions on our behalf, including cloud hosting, payment processing, email delivery, analytics, and customer support. These providers have access to personal data only to the extent necessary to perform their services and are contractually bound to protect your data in accordance with this Privacy Policy and applicable law.

Integrations

The Platform integrates with third-party services such as point-of-sale (POS) systems, payment gateways, and accounting software. When you connect an integration, data may be shared with the third-party provider subject to their privacy policy. We recommend reviewing the privacy practices of any integrated service before connecting it.

Legal Requirements

We may disclose personal data if required to do so by law, regulation, or legal process, or if we believe in good faith that disclosure is necessary to protect our rights, property, or safety, or that of our users or the public.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, personal data may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal data.

07

Data Storage and Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements.

Active Accounts

While your account is active, we retain your personal data to provide the Services and maintain a complete record of your operations. This includes account information, operational data, and communications history.

Inactive and Closed Accounts

Upon account cancellation or closure, we retain your personal data for a period of thirty (30) days to allow for account recovery and data export. After this period, we securely delete or anonymize your personal data in accordance with our data retention schedule.

Some data may be retained for longer periods where required by law (e.g., tax and accounting records) or for legitimate business purposes (e.g., anonymized analytics data, security logs). Such retained data is isolated and access is restricted to authorized personnel.

Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using TLS 1.3 and at rest using AES-256
  • Role-based access controls and multi-factor authentication (MFA)
  • Regular security audits, vulnerability assessments, and penetration testing
  • Employee training on data protection and confidentiality obligations
  • Incident response procedures compliant with Colombian data protection regulations
08

Your Rights Under Colombian Law

Under Law 1581 of 2012 and related regulations, you have the following rights regarding your personal data:

  • Right of access: You have the right to obtain confirmation of whether we process your personal data, and if so, to access that data and receive a copy.
  • Right to rectification: You may request the correction of inaccurate or incomplete personal data.
  • Right to deletion: You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when processing is unlawful.
  • Right to object: You may object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
  • Right to restrict processing: You may request that we limit the processing of your data while we verify its accuracy or evaluate the legitimacy of processing.
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
  • Right to revoke consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at hello@chefsync.io with the subject line "Data Protection Request." We will respond within ten (10) business days, or fifteen (15) business days if additional verification is required, in accordance with Colombian law.

09

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, maintain security, and analyze usage. These technologies allow us to remember your preferences, authenticate your sessions, detect fraud, and understand how users interact with the Platform.

Cookies are small text files placed on your device when you visit our website or use our applications. We also use local storage, session storage, and device fingerprinting for similar purposes.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may prevent you from accessing certain features of the Platform.

For a comprehensive list of the cookies we use, their purposes, and their retention periods, please refer to our Cookie Policy.

10

International Data Transfers

ChefSync uses cloud infrastructure providers that may store or process personal data in data centers located outside of Colombia, including in the United States and the European Union. By using the Services, you acknowledge and consent to the transfer of your personal data to these jurisdictions.

We ensure that international transfers are protected by appropriate safeguards in accordance with Colombian data protection regulations. These safeguards include:

  • Standard contractual clauses approved by the Superintendencia de Industria y Comercio
  • Data processing agreements with all third-party providers
  • Certifications and compliance frameworks such as SOC 2 and ISO 27001 maintained by our infrastructure partners
  • Regular audits of third-party security and privacy practices

We do not transfer personal data to countries that do not provide an adequate level of data protection unless appropriate safeguards are in place.

11

Children's Privacy

The Platform is intended for business and professional use and is not directed at children under the age of eighteen (18). We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without parental consent, please contact us immediately at hello@chefsync.io, and we will take steps to delete such information.

12

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will notify you by email or through the Platform at least thirty (30) days before the changes take effect.

The "Last updated" date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

13

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact us:

  • Email: hello@chefsync.io
  • Address: ChefSync SAS, Bucaramanga, Santander, Colombia
  • Website: https://chefsync.io

For formal complaints related to data protection, you also have the right to file a complaint with the Superintendencia de Industria y Comercio (SIC) in Colombia.

We are committed to resolving any privacy concerns promptly and transparently. We will acknowledge receipt of your inquiry within two (2) business days and provide a substantive response within ten (10) business days.