Privacy Policy
Last updated: April 5, 2026
1. What We Collect
1.1 Restaurant owners: email address, restaurant name, Stripe Connected Account ID, table configuration, server PIN (hashed).
1.2 Diners: display name (not verified, not a real name), claimed items and payment amount, email address (only if voluntarily provided on the success screen).
1.3 We do NOT collect: phone numbers, physical addresses, government IDs, or any payment card data. Card data is handled entirely by Stripe and never touches Bianza servers.
2. How We Use Your Data
2.1 Restaurant data is used to operate the platform, process payments via Stripe, display dashboard analytics, and send operational emails such as settlement summaries and alerts.
2.2 Diner data is used to facilitate bill splitting and payment within a session, and to send a receipt if an email was provided.
2.3 Email addresses are used to send transactional emails (receipts, confirmations) and occasional marketing emails about new features or nearby Bianza restaurants. You can unsubscribe from marketing emails at any time.
2.4 We may use aggregated, anonymized data (no personally identifiable information) to generate insights about dining trends. This data cannot be traced back to any individual.
3. Payment Data
3.1 All payment processing is handled by Stripe. Bianza never stores, transmits, or has access to full credit card numbers, CVVs, or bank account details.
3.2 We store only: Stripe Connected Account IDs (for restaurants), payment amounts, and the last 4 digits of the card used (provided by Stripe for receipt display).
3.3 See Stripe's privacy policy at stripe.com/privacy.
4. Receipt Images
4.1 Receipt photos uploaded for OCR scanning are processed by our AI partner (Anthropic Claude API) and immediately deleted after item extraction.
4.2 We store only the structured data (item names, prices, quantities). The receipt image itself is never stored, shared, or used for any purpose beyond the immediate scanning session.
5. Data Retention
5.1 Session data (items, claims, payment status): retained for 90 days, then automatically deleted.
5.2 Restaurant account data: retained as long as the account is active.
5.3 Diner email addresses: retained until the user unsubscribes or requests deletion.
5.4 Aggregated analytics: retained indefinitely (contains no personal data).
6. Data Sharing
6.1 We do not sell personal data to third parties.
6.2 We share data only with: Stripe (payment processing), Firebase/Google Cloud (data storage), and Anthropic (receipt OCR processing, images only, immediately deleted).
6.3 Restaurant owners can see: session payment totals, participant first names, and payment status for their own restaurant only. They cannot see diner emails, card details, or data from other restaurants.
7. Your Rights
7.1 You can request deletion of your data by emailing privacy@bianza.io.
7.2 You can unsubscribe from marketing emails at any time using the link in any email.
7.3 If you are in the EU/EEA: you have rights under GDPR including access, rectification, erasure, and data portability. Contact privacy@bianza.io for any GDPR requests.
7.4 California residents: you have rights under CCPA. Contact privacy@bianza.io.
8. Cookies
8.1 We use minimal cookies: Firebase authentication session token and Stripe payment session.
8.2 We do not use tracking cookies or third-party advertising cookies.
8.3 If we add analytics in the future, we will update this policy and add a consent mechanism for EU users.
9. Children
9.1 Bianza is not intended for use by anyone under 18. We do not knowingly collect data from minors.
10. Changes to This Policy
10.1 We may update this policy from time to time. Significant changes will be communicated via email to registered restaurant owners.
11. Contact
For privacy questions: privacy@bianza.io
Darajapp LLC, Delaware, USA