Privacy Policy

Ray’s Deli and Supplies, Inc., doing business as Bestomer (“Bestomer,” “we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our websites, mobile applications, and services (collectively, the “Services”), including the consumer Bestomer platform and the Bestomer B-Side merchant analytics platform. This policy also covers our use of cookies and similar tracking technologies.

Please read this policy carefully. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

For questions or concerns, contact us at: support@bestomer.com | Ray’s Deli and Supplies, Inc., 38 Keyes Ave, Suite 200, San Francisco, CA.

1. Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

1.1 Information You Provide

Name is optional. Email is required to create an account. Age confirmation is required for all users.

1.2 Information Collected Automatically

When you use the Services, we and our service providers automatically collect:

For full detail on cookies and tracking technologies, see Section 4 below.

1.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email address, and profile picture from Google, subject to your Google account permissions.
• Shopify (B-Side): If you connect a Shopify store, we receive store data including product catalogs, sales data, and integration credentials as permitted by the Shopify API and your authorization.
• Analytics Providers: We use PostHog and DataDog to collect analytics and performance data. These providers may collect information directly through their SDKs integrated into our Services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and operating the Services. To create and manage your account, process requests, display personalized content, and deliver core platform functionality.
• Artificial intelligence and machine learning. We use your information — including User Content, usage behavior, and interaction data — to train, fine-tune, and improve Bestomer’s AI models and deliver personalized AI-powered features such as product matching and personalized recommendation models. Each registered user’s data may contribute to a personalized model unique to that user. By using the Services, you consent to this use.
• Analytics and product improvement. To understand how users interact with the Services, diagnose issues, monitor performance, and improve features and functionality. We use PostHog and DataDog for these purposes.
• Communications. To send transactional emails (account confirmations, password resets, support responses) and, with your consent, marketing communications by email and text message.
• Security and fraud prevention. To detect, investigate, and prevent unauthorized access, abuse, fraud, and violations of our Terms of Service.
• Legal compliance. To comply with applicable laws, respond to legal process, and enforce our legal rights.
• Business operations. To process payments (B-Side subscribers), manage subscriptions, generate invoices, and handle billing inquiries.

3. Artificial Intelligence and Your Data

Bestomer’s core product is AI-powered. We use both proprietary models and third-party AI services. Here is how your data relates to AI:

3.1 Training Data

Your User Content (including photos and text), usage patterns, and interaction signals may be used as training data for Bestomer’s proprietary AI models. This helps improve recommendation quality, image analysis accuracy, and personalization over time.

3.2 Personalized Models

For registered users, Bestomer may maintain a personalized model that reflects your preferences and behavior. This model is used to tailor outputs specifically to you.

3.3 Third-Party Models

We may use third-party AI providers to process inputs. Data shared with third-party AI providers is governed by their privacy and data processing agreements. We take reasonable steps to ensure such providers maintain appropriate data protections.

3.4 No Regulated Data

The Services are not intended to process sensitive categories of data such as health information, financial account numbers, precise geolocation, biometric identifiers, or children’s data. Do not submit such data to the Services.

3.5 Merchant Data (B-Side)

Merchant proprietary data is not used to train shared models made available to other merchants. See Section 6 for B-Side-specific terms.

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognize your device, remember your preferences, and gather information about your interactions. We also use similar technologies including:

• Local storage / session storage: Browser-based storage used to retain data within a session or across sessions.
• Pixel tags / web beacons: Tiny, invisible images embedded in pages or emails used to track whether content was viewed.
• SDKs (mobile): Software development kits embedded in our mobile apps that collect usage data similarly to cookies on the web.
• Server-side logging: Server logs that record device and request information.

All such technologies are referred to collectively as “cookies” in this policy.

4.2 Who Sets Cookies?

• Bestomer (first-party): Cookies set directly by Bestomer for operational and analytics purposes.
• Third-party providers: Cookies or SDKs set by our service providers operating on our behalf, including PostHog and DataDog.

4.3 Categories of Cookies We Use

Strictly Necessary Cookies — Essential for the Services to function; cannot be disabled.

Analytics and Performance Cookies — Collect information about how users interact with the Services.

PostHog collects behavioral and event data via a JavaScript snippet and/or mobile SDK. Learn more: posthog.com/privacy. DataDog collects application performance data and error logs via its monitoring SDK. Learn more: datadoghq.com/legal/privacy.

Functional / Preference Cookies — Enable enhanced functionality and personalization.

Marketing and Communications Cookies — We do not currently use third-party advertising networks or retargeting pixels. If you have opted into marketing communications, we may use tracking pixels in marketing emails to confirm delivery and open rates.

4.4 Cookies in Our Mobile Applications

Our iOS and Android applications use mobile SDKs that perform functions equivalent to cookies, including:

• PostHog mobile SDK: Tracks in-app events and user behavior.
• DataDog mobile SDK: Monitors performance and captures error reports.
• Device identifiers: We may use mobile advertising identifiers (IDFA on iOS, AAID on Android) for analytics purposes, subject to your device-level permissions.

You can limit mobile tracking through your device’s privacy settings (e.g., “Limit Ad Tracking” on iOS or “Opt out of Ads Personalization” on Android).

4.5 Managing Cookie Preferences

Browser settings: Most browsers allow you to block or delete cookies through their settings:

• Chrome: Settings > Privacy and Security > Cookies
• Safari: Preferences > Privacy
• Firefox: Options > Privacy & Security

Disabling essential or functional cookies may prevent certain features from working correctly.

Opt-out tools for analytics providers:

• PostHog: posthog.com/privacy — PostHog honors “Do Not Track” browser signals.
• DataDog: Contact legal@bestomer.com to request DataDog data opt-out.

Email tracking: You can disable email images in your email client to prevent email tracking pixels from loading.

4.6 Do Not Track

Some browsers transmit a “Do Not Track” (DNT) signal. PostHog is configured to honor DNT signals. The Bestomer platform does not currently respond to DNT signals separately from PostHog’s implementation. We will update this section as practices evolve.

4.7 Cookie Retention

• Session cookies: Deleted when you close your browser.
• Persistent cookies: Retained for the period noted in Section 4.3, or until you delete them.
• Server-side logs: Retained for a limited period for security and debugging purposes.

5. How We Share Your Information

We do not sell your personal information to third parties. We share information only as described below:

5.1 Service Providers

We share information with vendors and service providers that support the Services, including:

• Cloud hosting and infrastructure providers
• Analytics providers (PostHog, DataDog)
• Payment processors (B-Side)
• AI/ML model providers
• Email and SMS delivery providers

Service providers are contractually bound to use your information only as directed and to maintain appropriate security.

5.2 Business Transfers

In connection with a merger, acquisition, financing, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will provide notice before your information is subject to a materially different privacy policy.

5.3 Legal Requirements

We may disclose information as required by law, court order, or government request; to enforce our Terms; or to protect the rights, property, or safety of Bestomer, our users, or the public.

5.4 With Your Consent

We may share information for purposes not described here with your prior consent.

5.5 Aggregated / Anonymized Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you.

6. B-Side Merchant-Specific Privacy

6.1 Merchant Data

As between Bestomer and the Merchant, the Merchant retains ownership of its customer data, product catalogs, and storefront integration data (“Merchant Data”). We process Merchant Data only to provide the B-Side Service to that Merchant.

6.2 No Cross-Merchant Use of Proprietary Data

We do not share or use one Merchant’s proprietary data to train models used by or made available to other merchants.

6.3 Merchant Responsibilities

Merchants are responsible for ensuring they have the legal right to upload data to the B-Side Service, including compliance with applicable privacy laws with respect to their customer data. Merchants should not upload personal information about their customers beyond what is necessary for the Services.

6.4 Derived Insights

Bestomer retains all derived analytics, scores, embeddings, and model outputs generated through the B-Side Service. These are not considered Merchant Data.

7. Data Retention

We retain your information for as long as your account is active and as needed to provide the Services. Upon account deletion:

• Account data and User Content are deleted or anonymized within a commercially reasonable period, subject to legal hold obligations.
• Aggregated, anonymized, or de-identified data derived from your use may be retained indefinitely.
• Information incorporated into AI model training weights is not separately deletable from the model; however, we will not use identifiable information attributable to you after deletion.
• We retain information as required to comply with legal obligations, resolve disputes, and enforce agreements.

8. Data Security

We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit, access controls, and monitoring. However, no security system is impenetrable, and we cannot guarantee the security of information transmitted to or stored on our systems.

9. Your Rights and Choices

9.1 Access and Correction

You may access and update your account information through your account settings or by contacting support@bestomer.com.

9.2 Account Deletion

You may request deletion of your account by contacting support@bestomer.com. We will process deletion requests within a commercially reasonable time, subject to retention obligations described in Section 7.

9.3 Marketing Opt-Out

You may opt out of marketing emails by clicking “unsubscribe” in any marketing email, or by contacting support@bestomer.com. You may opt out of marketing text messages by replying STOP to any marketing text.

9.4 Cookie Preferences

You may manage cookie preferences as described in Section 4.5.

9.5 California Residents

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, right to delete, and right to opt out of the sale or sharing of personal information. See Section 11 — California Privacy Rights.

9.6 Do Not Track

See Section 4.6.

10. Children’s Privacy

The Services are not directed to individuals under the age of 21. We do not knowingly collect personal information from individuals under 21. If you believe we have inadvertently collected information from a person under 21, please contact us at support@bestomer.com and we will promptly delete such information.

11. California Privacy Rights (CCPA)

To the extent the CCPA applies, California residents have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose, and the categories of third parties with whom we share information.
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell personal information. To the extent we engage in “sharing” of personal information for cross-context behavioral advertising, you may opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact: support@bestomer.com.

We will respond to verified requests within 45 days (extendable by an additional 45 days with notice).

12. International Data Transfers

Bestomer is based in the United States. If you access the Services from outside the United States (e.g., Canada), your information will be transferred to and processed in the United States. By using the Services, you consent to this transfer. We are not targeting EU or UK users and the GDPR and UK GDPR do not apply at launch.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the “Last Updated” date. For material changes, we may also send an email notification to registered users. Your continued use of the Services after the effective date constitutes your acceptance.

14. Contact Us

For questions, concerns, or to exercise your rights:

Email: support@bestomer.com
Legal / Privacy requests: legal@bestomer.com
Mailing address: Ray’s Deli and Supplies, Inc., 38 Keyes Ave, Suite 200, San Francisco, CA.

See also our Terms of Service.