Privacy Policy

1. Who we are

BeanSight is an ML-powered sales forecasting platform for independent UK cafes, accessible at beansight.co.uk. For any privacy-related questions, contact us at hello@beansight.co.uk.

2. What data we collect

We collect the following data when you interact with our website:

• Email address — when you sign up for early access or submit our survey
• Survey responses — your answers about how you run your cafe (forecasting methods, staff count, POS system, operational challenges, and feature preferences)
• Usage data — basic analytics about how you interact with the site

We do not collect payment information, sensitive personal data, or any data from minors.

3. How we use your data

We use the data we collect for the following purposes:

• To contact you about early access to BeanSight
• To understand the needs of independent cafe owners and shape our product
• To send you relevant updates about BeanSight (you can unsubscribe at any time)
• To improve our website and services

We will never use your data for automated decision-making that significantly affects you, or for purposes incompatible with those listed above.

4. Legal basis for processing

We process your data under the following legal bases as defined by UK GDPR:

• Consent — you have given us explicit consent by ticking the consent checkbox on our form
• Legitimate interests — to improve our product and communicate with potential users

5. How we store your data

Your data is stored securely in a PostgreSQL database hosted on Supabase, with servers located in London, United Kingdom. All data remains within the UK and is fully subject to UK data protection law.

Our backend API is hosted on Railway but processes data in transit only — no personal data is stored on Railway infrastructure. All data at rest is held exclusively on UK-based servers.

We retain your data for as long as necessary to fulfil the purposes outlined in this policy, or until you request deletion.

6. Who we share your data with

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share your data with the following service providers:

• Supabase — our UK-based database hosting provider (London, United Kingdom)
• Railway — our API backend hosting provider (data in transit only, not stored)
• Netlify — our website hosting provider
• Brevo — our email sending provider, used to send you updates

All third-party providers are bound by data processing agreements and comply with applicable data protection laws.

7. Your rights

Under UK GDPR, you have the following rights:

• Right to access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data at any time
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to withdraw consent — you can withdraw consent at any time without affecting prior processing
• Right to complain — you can lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, email us at hello@beansight.co.uk and we will respond within 30 days.

8. Cookies

Our website uses minimal cookies. We do not use tracking cookies or advertising cookies. Basic session cookies may be set by our hosting providers to ensure the site functions correctly.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any significant changes by email if you have provided your email address. The date at the top of this page indicates when the policy was last updated.

10. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us:

• Email: hello@beansight.co.uk
• Website: beansight.co.uk