1. Who We Are

TEIBOL LLC ("TEIBOL," "we," "us," or "our") operates the TEIBOL platform — a real-time service request system for restaurants, bars, hotels, and venues. Our principal place of business is in Puerto Rico, United States.

This Privacy Policy explains how we collect, use, disclose, and protect information when you use our platform, including the web application available at teibol.com and app.teibol.com.

2. Information We Collect

2.1 Venue Operators and Staff (Account Users)

• Account registration: Name, email address, password (hashed), business name, business address, phone number.
• Payment information: Processed securely through Stripe and PayPal. TEIBOL does not store full card numbers or bank account details.
• Usage data: Login times, features used, service requests managed, response times, and performance metrics.
• Device information: Browser type, device type, IP address, operating system (for security and compatibility purposes).

2.2 Guests (QR Code Users)

TEIBOL is designed with guest privacy as a priority. When a guest scans a QR code:

• We do not require guests to create an account.
• We do not collect names, emails, or phone numbers from guests.
• We collect the table identifier and request type (e.g., "Call Waiter", "Request Check") to route the request to venue staff.
• We collect a temporary session identifier that expires when the session ends.
• We may collect the guest's browser type and device type for compatibility purposes only.

2.3 Automatically Collected Information

• Log data (server logs, error logs)
• Analytics data (page views, feature usage, aggregate performance metrics)
• Cookies and similar technologies (see Section 6)

3. How We Use Your Information

Purpose	Legal Basis
Providing and operating the TEIBOL platform	Contract performance
Processing payments and managing subscriptions	Contract performance
Sending service notifications and alerts	Contract performance
Improving platform features and performance	Legitimate interest
Fraud prevention and security	Legitimate interest
Customer support and troubleshooting	Contract performance
Compliance with legal obligations	Legal obligation
Marketing communications (with consent)	Consent

4. How We Share Your Information

We do not sell personal information to third parties. We may share information with:

• Service providers: Stripe (payments), PayPal (payments), cloud hosting providers, email delivery services — all subject to confidentiality agreements.
• Within your venue: Service requests are shared with your venue's staff accounts so they can respond.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with advance notice.

5. Data Retention

• Account data: Retained for the duration of your subscription plus 90 days after cancellation, unless you request earlier deletion.
• Service request logs: Retained for up to 12 months for analytics and performance improvement, then aggregated or deleted.
• Guest session data: Deleted within 24 hours of the session ending.
• Payment records: Retained as required by applicable tax and accounting laws (typically 7 years).

6. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential cookies: Required for the platform to function (authentication, session management). Cannot be disabled.
• Analytics cookies: Help us understand how the platform is used. You may opt out via your browser settings.
• Preference cookies: Remember your settings (e.g., language preference).

We do not use advertising or tracking cookies. We do not sell data to advertisers.

7. Security

We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Access controls and authentication requirements for staff accounts
• Regular security reviews

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using commercially reasonable means.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data (subject to legal retention obligations).
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: For processing based on consent (e.g., marketing emails).

To exercise any right, contact us at info@teibol.com. We will respond within 30 days.

9. Children's Privacy

The TEIBOL platform is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately at info@teibol.com.

10. International Users

TEIBOL LLC is based in Puerto Rico, United States. If you access the platform from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our platform, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

12. Contact Us — Privacy