Privacy policy

Vaaku exists to run your restaurant's numbers, not to monetize your data. We collect what the product needs to work — your account, your outlets' inventory and sales, and billing details — and we don't sell personal information to anyone, ever.

Account information. Your name, email address, and login credentials (handled by our authentication provider). We use these to identify you and secure your account.

Restaurant operations data. Outlet details, menu items, recipes, inventory levels, suppliers, purchase records, and sales data — including what arrives through your POS integration (Square, Clover, Loyverse, Shopify) or CSV upload. This is the data our agents analyze to produce margin briefings.

Billing information. Processed by Stripe. We see your plan, subscription status, and the last few digits of your payment method; full card numbers never touch our servers.

Technical and diagnostic data. Error reports (via Sentry), rate-limiting metadata, and basic logs needed to keep the service reliable and secure. No advertising trackers, no third-party analytics beacons.

To operate Vaaku: run the scheduled agents (Sentinel, Oracle, Herald, Analyst, Margin), generate your briefings and dashboards, sync your POS data, bill your subscription, and support you when something breaks. We also use aggregated, de-identified data to improve the product — never in a way that identifies your restaurant.

To produce AI briefings, relevant portions of your operations data are sent to our AI inference providers (Groq and NVIDIA). They process it to generate your output and don't train public models on it.

We use a small set of sub-processors, each only for its job:

• Supabase — authentication, database, and hosting
• Stripe — payments and billing
• Groq, NVIDIA — AI inference for agents and chat
• Inngest — scheduled background jobs
• Upstash — rate limiting
• Sentry — error tracking

Each is bound by its own data-processing terms. We don't share your data with anyone else except as required by law.

Data is encrypted in transit (TLS) and at rest. POS credentials are stored encrypted and are write-only — our team can't see the values. Access to production systems is limited to the people who need it. No system is perfect, but this is the bar we hold ourselves to.

We keep your data for as long as your account is active. Cancel, and your data stays available on the free Starter plan. Ask us to delete your account and we'll delete your personal and restaurant data within 30 days, except where we're legally required to keep records (e.g. billing history).

Wherever you are, you can ask us what personal information we hold about you, correct it, or delete it. If you're a California resident, the CCPA/CPRA gives you specific rights, and we honor them:

• Right to know — the categories of personal information we collect and why.
• Right to delete — ask us to delete your personal information, with the legal exceptions above.
• Right to correct — fix inaccurate personal information.
• Right to opt out of sale/sharing— we don't sell or share personal information for cross-context behavioral advertising, so there's nothing to opt out of — but the right stands.
• Right to non-discrimination — exercising these rights never changes your price or service.

To exercise any of these, email privacy@vaaku.ai. We'll verify you're the account holder and respond within 45 days.

Vaaku is a business product for restaurant operators. We don't knowingly collect personal information from children under 13.

If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect. Continued use after the change means you accept it.

Questions about privacy: privacy@vaaku.ai. Vaaku is a product of TwoTwo, Hubballi, Karnataka, India.