Privacy Policy

1. Who We Are

Crave Robotics Inc. ("Crave Robotics," "we," "us," or "our") operates automated food vending kiosks (CraveBot) deployed across university campuses, hotels, and corporate venues in Southern California. Our principal place of business is 635 W. Allen Ave., San Dimas, CA 91773, United States.

This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our CraveBot kiosks, mobile applications, website (craverobotics.co), or any other services we offer (collectively, the "Services").

2. Information We Collect

We collect information in the following ways:

Information you provide directly:

• Name and email address (when you contact us or sign up for updates)
• Phone number (when you use SMS-based order support)
• Payment information (processed securely by our payment processor — we do not store full card numbers)
• Inquiry details submitted through our contact form

Information collected automatically when you use CraveBot:

• Order history (items purchased, time, location of kiosk)
• Payment method type (card type, last 4 digits)
• Kiosk interaction data (touchscreen interactions, session duration)
• Device identifiers associated with contactless payment methods

Information collected from our website:

• IP address and browser type
• Pages visited and time spent
• Referring URLs
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your food orders at CraveBot kiosks
• Provide customer and order support
• Send transactional communications (receipts, order confirmations)
• Improve machine performance, menu offerings, and the customer experience
• Monitor kiosk health and inventory remotely via CraveOS
• Respond to inquiries submitted through our website or contact form
• Send marketing communications, where you have opted in
• Comply with legal obligations and enforce our terms
• Detect and prevent fraud or unauthorized activity

4. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Payment processors: to securely process transactions (e.g., credit/debit card payments at kiosks)
• Service providers: companies that help us operate our services, such as cloud hosting, analytics, email delivery, and SMS platforms — these providers are contractually obligated to protect your data
• Venue partners: aggregated, non-identifiable sales data may be shared with campus or venue partners for operational purposes only
• Legal authorities: if required by law, court order, or to protect the rights and safety of Crave Robotics or others
• Business transfers: in connection with a merger, acquisition, or sale of assets, in which case your information may be transferred as a business asset

5. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Order data is retained for up to 3 years for accounting and operational purposes
• Contact form submissions are retained for up to 2 years
• Marketing email lists are retained until you unsubscribe or request deletion

You may request deletion of your data at any time — see Section 8.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or destruction. These include encrypted data transmission (HTTPS), secure cloud infrastructure, and access controls limiting who within our organization can access personal data.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Cookies & Tracking

Our website uses cookies and similar technologies to improve your experience, analyze traffic, and understand how visitors use our site. You can control cookie settings through your browser preferences. Disabling cookies may affect certain website functionality.

We do not use cookies to track you across third-party websites for advertising purposes.

8. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data from our systems
• Opt-out: unsubscribe from marketing communications at any time
• Portability: request your data in a portable format (where applicable)

To exercise any of these rights, please use our Data Deletion Request form or contact us at help@craverobotics.co. We will respond within 30 days.

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to opt out of sale (we do not sell personal information), and the right to non-discrimination for exercising privacy rights.

9. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at help@craverobotics.co and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will provide additional notice where appropriate. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: