This Privacy Policy describes how BistroBox / bistroboxvend ("we," "us," or "our") collects, uses, and shares information in connection with the BistroVending Operator mobile application (iOS and Android), Bundle ID / package name com.bistroboxvend.operator (the "App").
BistroVending Operator is a B2B tool for vending machine operators and merchant administrators who already have a business account. It is not a consumer shopping app.
For a short summary of privacy controls, see our User Privacy Choices page.
We operate BistroVending Operator and related BistroBox / bistroboxvend operator services. For privacy requests, contact:
Depending on how you use the App and your organization's account configuration, we may collect:
We only access permission-gated data after you grant the relevant system permission, and typically only when you start the related feature.
We use the information above to:
We do not sell personal information.
We may share information with:
If we engage in a corporate transaction (for example merger or asset sale), information may be transferred as part of that transaction subject to appropriate protections.
Permission prompts on iOS/Android explain why access is needed. You can change permissions later in system Settings. If you deny or revoke a permission, related features may not work until access is restored.
We retain information for as long as your account remains active and as needed to provide the App, for legitimate business purposes (such as security, auditing, and dispute resolution), and to meet legal obligations. When you or your organization request deletion, we will delete or de-identify personal information associated with the request within a reasonable period after verification, subject to legal retention requirements.
We use reasonable technical and organizational measures designed to protect information, including transmitting App traffic over HTTPS. No method of transmission or storage is 100% secure.
Subject to applicable law and your organization's account controls, you may request access to, correction of, or deletion of personal information associated with your operator account by emailing privacy@bistroboxvend.com.
Operators may also ask their back-office administrator to assist with account or data deletion for business accounts managed through your organization's admin tools or processes.
We may need to verify your identity and authority (especially for organization-owned accounts) before fulfilling a request. We aim to respond within 30 days of a verified request, unless a shorter or longer period is required by law.
Additional practical controls are described on our User Privacy Choices page.
The App is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
We may process and store information in the United States and other countries where we or our service providers operate. Those locations may have different data-protection laws than your home country.
We may update this Privacy Policy from time to time. We will revise the effective date above and, where appropriate, provide additional notice in the App or by other reasonable means.
This document is provided for App Store / Google Play transparency and operational alignment. It does not replace advice from legal counsel for your specific jurisdictions.