Privacy policy

This policy explains how Crema Labs Inc. handles personal information. It covers Remy, our AI analyst for restaurants, and this website.

Who we are

Crema Labs Inc. makes Remy. We are a British Columbia company, based in North Vancouver, Canada. You can reach us about privacy at team@cremalabs.xyz.

Our two roles

We handle personal information in two ways.

For this website and for Remy accounts, we are in charge. We decide how that information is used, and this policy says how.

For data from a restaurant's own systems, the restaurant is in charge. A restaurant group that uses Remy connects its systems, such as its point of sale and its booking tools. We handle that data for the restaurant, as its service provider, under our agreement with it. We use it only to provide Remy to that restaurant. The one exception is anonymised data and usage records, which we explain below.

If you are a guest or an employee of a restaurant that uses Remy, the restaurant is the best place to start with questions about your information. We will help them answer.

What this website collects

Visits. We use Vercel Web Analytics to count visits. It sets no cookies. It records the page you viewed, the page that sent you, your rough location, and your device, operating system and browser. It tells visits apart with a code made from your request, and that code is deleted after 24 hours. It does not record your IP address or anything else that identifies you.

Demo bookings. When you book a demo, you use Cal.com. You give your name, your email and anything else you choose to type. Cal.com keeps this for us. We use it to hold the demo and follow up with you. Cal.com's own privacy policy also applies.

Emails. If you email us, we keep your message and your address so we can reply.

This website has no forms, no advertising trackers and no third-party cookies.

What Remy receives from a restaurant's systems

Remy only reads a restaurant's systems. It does not change them. Depending on which systems a restaurant connects, Remy receives:

• Sales: checks, items sold, prices, discounts, tips and the number of guests on each check.
• Bookings and events: reservations, party sizes, times, status and where each booking came from, plus event dates, headcounts and amounts.
• Labour: staff names, roles, venues, scheduled shifts and hours worked.
• Payroll: only each employee's number, name, preferred name, venue, department and hourly rate.
• Card settlements: card type and amounts, if the restaurant provides them.

Guest details are removed before anything is stored. Guest names, emails, phone numbers, addresses, notes and loyalty numbers are dropped as each booking arrives. They never reach our database, our logs or the AI model.

We keep payroll to a minimum. We do not take social insurance numbers, bank details or home addresses. Restaurants agree not to send us these, or card numbers or health information.

Your Remy account

When a restaurant gives you a Remy account, we keep your name, your email, your role and the venues you can see. If you sign in with Google or Microsoft, they give us your name and email.

When you ask Remy a question, we keep the question, the request Remy chose to answer it, the answer and the AI model used. These are linked to your account so you can see your history and we can check Remy's answers.

How we use information

We use personal information to:

• run Remy for the restaurant: work out its figures, answer its team's questions and send its briefs;
• give support, keep Remy secure and fix problems;
• improve Remy and train AI models, as the next section explains;
• arrange demos and talk with people who ask about Remy.

We do not sell personal information. We do not use it for advertising.

Anonymised data and usage records

We use two kinds of data to improve Remy and to train, test and fine-tune AI models.

• Usage records show how Remy is used: the questions asked, the requests Remy chose, its answers, the checks it ran, and any corrections and feedback. They do not include your name or email. We keep those separately.
• Anonymised data is made from restaurant data and usage records, and meets the standard below.

Every Remy plan includes this use. We keep this data, and keep using it this way, after a customer leaves.

What we never use this way. We never use guest details, which we don't keep. We never use individual employees' payroll or timesheet records, or your account details. These can appear only inside totals that meet our standard.

Our anonymisation standard.

• No names, contact details, account numbers or user IDs.
• No record about a single guest or a single employee.
• A figure that combines more than one customer's data must include a minimum number of venues and customers, set in our agreements. Smaller groups are left out.
• We review this standard at least once a year.

We will not try to identify any person or restaurant from anonymised data. Anyone we share it with must agree to the same rule and to this standard.

Sharing beyond Remy needs a customer's opt-in. A customer can choose to have its anonymised data included in benchmarks that other Remy customers see. Separately, it can choose to let us license its anonymised data to other companies, including AI companies. A customer can withdraw either choice with 30 days' notice. That stops new data from being added. It does not recall benchmarks or licences already given.

We follow the source systems' rules. If a system's terms do not allow a use, we do not make it.

If a customer's signed agreement with us says something different, that agreement applies to that customer.

Who else handles data

We use these companies to run Remy and this website:

We tell customers at least 30 days before we add or change a company that handles their personal information. A customer can object. If we can't resolve the objection, the customer can end its agreement without penalty. Every company on this list is bound in writing to protect the data at least as well as we do.

Data outside Canada

Remy stores its data in Canada, in Amazon Web Services' Montreal region. Some data is handled in the United States by the companies listed above. While it is there, the laws of that country may allow its authorities to access it.

We may change providers or regions over time. If we do, we will update this page and give customers notice as described above.

How long we keep information

• Restaurant data: for as long as the customer's agreement lasts. The customer can export it during the agreement and for 30 days after it ends. We delete it within 30 days after the agreement ends, or return it first if the customer asks. Database backups are kept for 14 days. Deleted files can be recovered for 30 days, then they are gone.
• Usage records and anonymised data: we keep these, under the standard above.
• Website visits: the code that tells visits apart is deleted after 24 hours.
• Demo bookings and emails: you can ask us to delete them at any time.

How we protect information

Remy's data is encrypted when stored and when it moves. Each person sees only what their restaurant lets them see. Our security page explains what we do.

Your rights

Canada's federal privacy law (PIPEDA) and British Columbia's Personal Information Protection Act give you rights over your personal information. You can ask us:

• what personal information we hold about you, how we use it and who we have shared it with;
• to correct it if it is wrong;
• to withdraw your consent, where we rely on it. This may stop us providing some things.

Email team@cremalabs.xyz. We reply within 30 days.

If your request is about data from a restaurant you visited or work for, we will pass it to that restaurant and help it reply.

If you are not happy with our answer, please tell us first. You can also complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

Children

Remy and this website are for businesses. They are not meant for children.

Changes to this policy

When we change this policy, we update the date at the top. If a change matters to customers, we tell them before it takes effect.

Contact

Crema Labs Inc.
4385 Patterdale Drive
North Vancouver, BC V7R 4L6
Canada
team@cremalabs.xyz