Privacy Policy

Who we are

Reco Genie Ltd is a UK-registered company that provides operational intelligence software for restaurants. Our AI voice agent, Morag, handles calls, bookings, and orders while our platform learns what drives revenue.

Contact information:

• Company: Reco Genie Ltd
• Address: 24 Walnuts, Road Orpington, Walnuts Road, Orpington, England, BR6 0RQ, United Kingdom
• Email: hello@recogenie.com

What data we collect

Information you give us directly

When you contact us, join a waitlist, request a free report or create an account, we may collect:

• Your name
• Email address
• Phone number, where requested for an account or service
• Restaurant name (if applicable)
• Companies House number and public company details
• Selected branch name, address, postcode and public location identifier
• Operational figures you enter, such as estimated weekly revenue, order totals, trading hours, delivery mix and staffing
• Your required Free Report Terms acceptance and separate optional marketing choice
• Any information in your messages to us

Information we collect automatically

When you visit our website, we may collect:

• Pages you visit
• Time spent on pages
• Buttons you click
• General location (city/region level, not precise)
• Device type and browser

What we don't collect

• ❌ We don't track you across other websites
• ❌ We don't use advertising cookies
• ❌ We don't collect sensitive personal data
• ❌ We don't sell your data to anyone

How we use your data

We use your information to:

• Respond to your inquiries and provide support
• Send you updates about Reco Genie (only if you opted in)
• Verify a free-report email and create, deliver, secure and resend the requested report
• Apply the company-number free-report restriction and protect the service from repeated or suspicious use
• Understand which features matter most to restaurants
• Improve our website and product messaging
• Provide and improve our services

We do not sell your personal data or use third-party behavioural advertising. If you expressly opt in to Reco Genie marketing, we may use the report’s company, branch and permitted signal context to make our own follow-up messages more relevant. You can withdraw that choice at any time.

Free-report data

Free reports are covered by our Terms. We use information you provide together with permitted public or licensed location signals to supply the requested report.

• Company and authority: We use the Companies House number to retrieve and display the public company record and to enforce the company-number report restriction. A Companies House match does not prove that the requester owns or represents the company.
• Location: We process the selected public restaurant listing, branch name, address, postcode, coordinates and location-provider identifiers to find nearby places and relevant location signals.
• Operational inputs: Revenue, orders, trading hours, delivery mix and staffing values are supplied by the requester and are not independently verified as audited or confirmed actual business results.
• Generated information: We create calculations, scores, narrative, recommendations, a report snapshot, PDF and secure result record.
• Email delivery: We process the verified email, delivery status and provider message identifier to deliver the report and support a requested resend.
• Thirty-day restriction: A successful report starts a 30-day restriction for the same Companies House number. Using another email does not bypass it. A failed generation does not start the restriction.
• Marketing: The optional marketing checkbox is unticked by default. Declining it does not affect generation or transactional report delivery and does not enrol the requester in the free-report nurture campaign.
• Other request records: We may process report status and dates, access or resend activity, consent evidence, browser, device, IP and related security information where necessary.
• Public and third-party sources: Information may come from Companies House, mapping and location services, public business listings, review sources, weather providers, event and sports-data providers and publicly available competitor information.
• Record separation: Free-report inputs are not automatically saved as EOD actuals, Historical Data, paid-dashboard branch records or audited financial information.

We process the request to provide the service you asked for; rely on legitimate interests for proportionate security, misuse prevention and service reliability; comply with legal obligations where applicable; and rely on separate consent for marketing. Withdrawing marketing consent does not stop essential report-delivery or security messages.

Social, competitor and review intelligence

Where a BI Insights owner or admin enables these features, Reco Genie may process information from public posts, public profiles, public reviews and public web discussions to provide performance comparisons, review summaries and area food signals.

• Your connected accounts: We collect account-level Instagram or TikTok information only after an authorised owner/admin chooses and confirms the account as belonging to the business.
• Nearby restaurant comparisons: We use only publicly available posts, profiles and reviews for restaurants an authorised user selects. We do not access private accounts, messages or non-public analytics.
• Area food signals: We may aggregate public food terms and hashtags at postcode-district or city level. These samples are presented as general area context, not as facts about individuals or the whole market.
• Data fields: Depending on the source, processed fields may include a public handle/name, post or review text, URL, publication time, hashtags and public engagement counts.
• Purpose and retention: We use this information to provide the requested intelligence, maintain recent comparisons and improve reliability. We retain only what is reasonably needed for those purposes and apply source, contractual and legal restrictions.

We do not use these features to access private social content, read private messages or infer sensitive personal characteristics. Public-source results may be incomplete or incorrect; customers should verify important decisions independently.

Cookies and website analytics

We use cookies to keep our website running smoothly and to understand how visitors use our site.

We use two types of cookies:

• Essential cookies: Required for the website to function (always on)
• Analytics cookies: Help us understand website usage (optional)

You can control which cookies we use through our cookie banner. For full details, see our Cookie Policy.

Who we share data with

We only share your data with trusted service providers who help us operate:

• Public company sources: To retrieve Companies House records requested through the report flow
• Location, mapping and local-signal providers: To find the selected branch, nearby places, weather, events, public reviews and related report context
• Email services: Resend and related delivery infrastructure for verification, transactional report delivery and opted-in marketing
• Analytics tools: To understand website usage (privacy-focused tools only)
• Cloud hosting, databases and protected file storage: To process requests, create reports, keep security records and operate the website
• Login security and approximate IP-location services: To identify the approximate city, region and country of a login, detect new devices and send account-security alerts; we do not request precise GPS location for this purpose
• AI and report-processing services: To create or validate report narratives and documents using the data permitted for that task
• Payment services: Stripe processes payment information for paid products; payment-card details are not required for a free report

We never sell your data. All service providers are required to protect your data and use it only for specified purposes.

Data security

We take security seriously:

• 🔒 SSL encryption for all data transmission
• 🛡️ Secure cloud infrastructure
• 💳 Payment processing through Stripe (PCI compliant)
• 🔐 Regular security updates and monitoring

While we use industry-standard security measures, no system is 100% secure. We continuously work to protect your data.

Your rights (UK GDPR / EU GDPR)

Under UK and EU data protection law, you have the right to:

• Access: Request a copy of your personal data
• Correction: Ask us to correct inaccurate data
• Deletion: Request deletion of your data
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Objection: Object to how we process your data
• Withdraw consent: Opt out of analytics or marketing

To exercise any of these rights, email us at hello@recogenie.com

Data retention

We keep your data only as long as necessary:

• Contact inquiries: 2 years after last contact
• Waitlist signups: Until you ask us to remove you, or 2 years of inactivity
• Website analytics: Aggregated data kept for up to 26 months
• Free-report contact details, inputs, snapshot and delivery records: Up to 30 days for secure access, support and regeneration, then deleted or minimised unless a legal or security reason requires longer
• Companies House restriction records: The rolling 30-day eligibility period and a limited security audit period of up to 90 days
• Terms, privacy and authorisation evidence: Up to six years to evidence the wording and notice presented for the request
• Marketing consent, withdrawal and suppression records: While current and afterwards as a suppression record for up to six years
• Security and abuse-prevention logs: Normally up to 90 days, unless an incident or legal obligation requires longer
• Customer data: As long as you use our service, plus legal retention periods

Backups may retain deleted records for a limited recovery cycle before automatic overwrite. We delete, aggregate or minimise information when no longer reasonably required.

Children's privacy

Reco Genie is designed for businesses and restaurant owners. We do not knowingly collect data from anyone under 16 years old. If we discover we've collected data from a child, we'll delete it immediately.

International data transfers

Our providers may process data in the UK, European Economic Area, United States or other locations in which they operate. Where personal data is transferred internationally, we use an applicable legal transfer mechanism and provider safeguards, such as an adequacy regulation or approved contractual clauses.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We'll update the "Last updated" date at the top of this page.

For significant changes, we'll notify you via email (if you're a registered user) or through a prominent notice on our website.

Obtain professional legal review before publication.

How to contact us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

• Email: hello@recogenie.com
• Address: Reco Genie Ltd, 24 Walnuts, Road Orpington, Walnuts Road, Orpington, England, BR6 0RQ, United Kingdom

We aim to respond to all inquiries within 48 hours.

You may also complain to the UK Information Commissioner's Office if you are unhappy with how we handle personal data. Visit ico.org.uk/make-a-complaint.