Legal

Privacy Policy

Last updated: June 2026

Who we are

CulinHub is a South African digital intelligence platform for the restaurant industry. We build and maintain a Digital Twin for each restaurant — a verified, continuously updated knowledge base that powers smarter decisions and better customer communication.

CulinHub operates in accordance with the Protection of Personal Information Act, 2013 (POPIA) and is the responsible party for personal information collected through this platform.

What we collect

We collect and store the following categories of information:

  • Account information — your email address and the password you create. Used to authenticate your account.
  • Restaurant facts — information you enter manually or that we retrieve via connected sources (Google Business Profile, your website). This is the content of your Digital Twin. It belongs to you.
  • Connector credentials — OAuth tokens for third-party integrations (e.g. Google Business Profile). Stored encrypted. Used only to retrieve data on your behalf.
  • Usage data — which features you use, when you last signed in, and anonymised performance metrics. Used to improve the platform. Not sold or shared.

How we use your information

  • To operate and maintain your Digital Twin
  • To power the AI Advisor — your restaurant facts are included in prompts sent to Anthropic's Claude API. No personal customer data is sent; only the facts your Twin contains.
  • To retrieve and display your Google Business Profile data when you connect that integration
  • To send you product updates and service communications (you can opt out at any time)
  • To detect and prevent fraud or misuse

Third parties

We share data with the following sub-processors, strictly as needed to deliver the service:

  • Supabase — database and authentication provider. Your data is stored on Supabase-managed PostgreSQL infrastructure. Row-level security ensures one restaurant's data is never accessible to another.
  • Anthropic — AI provider. Restaurant Twin content is sent to Anthropic's Claude API to generate Advisor responses and marketing copy. Anthropic's API usage policy governs how this data is handled on their side.
  • Google — when you connect Google Business Profile, we communicate with Google's APIs using the permissions you grant during OAuth. We do not share your data with Google beyond what OAuth requires.
  • Vercel — hosting provider. Application code and serverless functions run on Vercel infrastructure.

We do not sell your personal information to any third party.

Your data is yours

The facts in your Digital Twin belong to your restaurant. If you cancel your account, you can request a full export of your Twin data before deletion. We will provide it within 10 business days.

We do not use your restaurant's proprietary information to train AI models or build aggregate insights that could identify your business individually. Any aggregate platform intelligence (e.g. industry benchmarks) is derived from anonymised data only.

Your rights under POPIA

As a data subject under POPIA, you have the right to:

  • Know what personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Object to the processing of your personal information
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at hello@culinhub.com. We will respond within 30 days.

Data retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal information within 30 days, except where we are required by law to retain it for longer.

Anonymised, aggregated data (e.g. platform-level usage statistics) may be retained indefinitely.

Security

We use row-level security in our database to enforce tenant isolation — your data is inaccessible to other accounts at the database layer, not just the application layer. Connector credentials are stored encrypted. All data is transmitted over TLS.

No system is perfectly secure. If you discover a security issue, please disclose it responsibly to hello@culinhub.com.

Changes to this policy

We may update this policy as the platform evolves. If we make material changes, we will notify you by email before the change takes effect. Continued use of CulinHub after notification constitutes acceptance.

Contact

For any privacy-related queries, data access requests, or complaints: hello@culinhub.com