RRA is intended for people who are at least 18 years old and who are business owners or authorized business representatives. RRA is not intended for children.

Account and identity information

We collect information used to create and manage an account, such as name, email address, authentication information, account status, and user role.

Business and operational information

We collect information customers provide about their business, locations, team members, purchased user and location capacity, and operational goals.

Assessment and service information

We collect answers, notes, uploads, progress, reports, recommendations, and other information submitted or generated while using assessments, planning tools, coaching features, training resources, and related services.

Payment and subscription information

RRA receives and stores billing-related information such as plan, subscription status, purchased capacity, payment status, refund status, and transaction identifiers. Payments are processed by Stripe. RRA does not receive or store complete payment-card numbers through its application.

AI-assisted information

Some RRA features use artificial intelligence. Information submitted to those features may include prompts, assessment context, operational information, and instructions. The service may also retain or display the resulting reports, recommendations, or other outputs as part of the customer’s account.

Technical and analytics information

RRA uses Base44’s native analytics and may receive information such as page visits, unique-visitor counts, visit duration, page traffic, referring source, general country, operating system, device category, and login activity. RRA currently has session recording disabled. RRA has not identified Google Analytics, Meta Pixel, Mixpanel, PostHog, Hotjar, or Microsoft Clarity in the current application.

Support and security information

We collect communications sent to support and information reasonably needed to investigate account, billing, security, misuse, or service issues.

RRA uses information to:

• Provide, operate, secure, and improve the service.
• Create and manage accounts, subscriptions, entitlements, and purchased capacity.
• Deliver assessments, reports, recommendations, training resources, and customer support.
• Process payments, cancellations, and refunds.
• Send transactional and service communications, including post-purchase information and secure eBook delivery links.
• Operate AI-assisted features requested by the customer.
• Understand platform usage and diagnose technical or security issues.
• Enforce RRA’s terms, capacity limits, and acceptable-use rules.
• Maintain records reasonably needed for billing, refunds, disputes, security, and legal obligations.

Stripe processes payments for RRA. Payment information submitted during checkout is handled by Stripe under Stripe’s own terms and privacy practices. RRA receives transaction and subscription information needed to provide the purchased service, maintain billing records, and handle cancellations or refunds.

RRA uses Base44 AI integrations. Anthropic is a confirmed provider for some RRA features, including features configured to use a Claude model. For other AI requests, the provider or model may be selected or routed by Base44 and may change.

RRA’s policy is that customer inputs should not be used to train a provider’s general AI models where RRA or the provider offers a relevant control. RRA does not promise that it controls every provider-side setting or retention rule. Provider-controlled processing remains subject to the applicable provider and platform terms.

Customers should avoid submitting information that is not reasonably needed for the requested service, particularly sensitive personal information about other people.

RRA uses service providers to operate the platform. Directly evidenced providers include:

• Base44, for application hosting, authentication, data storage, email delivery, analytics, and platform functions.
• Stripe, for payment processing and subscription transactions.
• Anthropic, for certain AI-assisted features.

Other service providers may process information on RRA’s behalf when necessary to operate, secure, support, or maintain the platform. RRA does not list every company appearing on a vendor’s general subprocessor list unless its processing of RRA production data has been confirmed.

RRA generally intends to retain account-related information for between two and three years after an account ends. The precise duration may depend on operational, billing, refund, security, dispute-resolution, backup, and legal recordkeeping needs.

Some information may be kept for a shorter period when it is no longer needed. Some information may need to be kept longer where reasonably necessary to comply with legal obligations, prevent fraud or misuse, resolve disputes, or maintain accurate transaction records. Provider-controlled backups, logs, AI data, and deleted-account data may follow the provider’s own retention practices.

A user may request access to or correction of account information by emailing support@restaurant-revivalacademy.org. RRA may need to verify the requester’s identity and authority over the relevant business account.

What deletion covers

When your account is deleted:

• Deleted: your account identity and personal app data, including assessments and responses, reading and lesson progress, exercise submissions, roadmaps and action plans, inventory, purchasing, recipes, menu, waste, scheduling, employee, financial snapshot, training, company profile, and newsletter subscriber records.
• Anonymized, not erased: your community discussions and replies remain visible to other users, but your name and email address are permanently removed from them (posts display as “Deleted User”).
• Retained: billing, subscription, entitlement, payment, and refund records are retained where necessary for legal, accounting, tax, fraud-prevention, and audit purposes. These retained records do not provide app access.
• File residuals: records that reference files you uploaded (for example, training materials) are deleted, which removes in-app access to them. The underlying stored files cannot currently be erased by the platform, so residual copies may persist in storage or backups until they expire under provider retention practices.

Deletion may be limited where information must reasonably be retained for billing, refunds, security, fraud prevention, disputes, backups, or legal obligations. RRA will evaluate requests based on the information and systems it controls and will explain material limitations where appropriate.

RRA uses reasonable administrative and technical safeguards intended to protect information, including authenticated access controls and service-provider security features. No online service can guarantee absolute security. Users are responsible for protecting their login credentials and promptly reporting suspected unauthorized access.

Customers should submit only information they are authorized to provide. Business account owners and authorized representatives are responsible for managing team access and for avoiding account sharing beyond purchased user capacity.

RRA’s service providers may store or process information in locations different from the customer’s location. Specific provider regions and transfer arrangements may depend on the provider’s infrastructure and settings. RRA does not make unverified promises about a particular storage country or transfer mechanism.

RRA may update this policy when its services, providers, or practices change. The published policy will show its effective date. Material changes will be communicated through a reasonable method appropriate to the change, such as an updated website notice, account notice, or email.

Privacy questions and requests:

support@restaurant-revivalacademy.org