AruChat Privacy Policy
Last Updated: October 25, 2026
IMPORTANT: Food Allergy & Dietary Safety Notice
AruChat is an artificial intelligence-powered assistant and is not a substitute for direct communication with restaurant staff regarding food allergies, ingredients, food preparation, or dietary restrictions.
Information provided by AruChat may be incomplete, inaccurate, or outdated. AruChat cannot guarantee the accuracy of allergen information, that any menu item is free from specific allergens, or that food preparation is free from allergen cross-contact.
If you have a food allergy, sensitivity, or dietary restriction, you must consult directly with the restaurant before ordering or consuming any food. Do not rely solely on information provided by AruChat when making allergy-related decisions.
To the fullest extent permitted by applicable law, AruChat disclaims responsibility for inaccuracies in restaurant-provided allergen information or AI-generated responses. Nothing in this notice excludes or limits liability that cannot legally be excluded or limited.
1. Introduction
Welcome to AruChat.
AruChat is an artificial intelligence-powered restaurant assistance service operated by Aru Chat LLC ("AruChat," "we," "our," or "us"), a New Jersey limited liability company.
We respect your privacy and are committed to transparency regarding how personal information is collected, used, stored, and shared.
This Privacy Policy applies to:
Individuals interacting with the AruChat AI assistant on participating restaurant websites.
Restaurant owners and authorized representatives subscribing to or using AruChat's services.
Visitors to our website at https://aru.chat.
Individuals contacting AruChat regarding our services.
This Privacy Policy explains our data practices. Use of AruChat may also be subject to separate Terms and Conditions.
2. Information We Collect
Depending on how you interact with AruChat, we may collect the following information.
A. Information You Voluntarily Provide
When interacting with our AI assistant or communicating with AruChat, you may provide:
Names and contact information, including email addresses and telephone numbers.
Questions, messages, and other information entered into the chatbot.
Restaurant inquiries involving reservations, catering, private events, menus, or other restaurant services.
Dietary preferences, food allergies, or other information voluntarily disclosed during an interaction.
Information submitted through customer service or business inquiries.
We discourage users from submitting sensitive personal information, including payment card numbers, government identification numbers, passwords, confidential medical records, or information unrelated to their restaurant inquiry.
Information concerning allergies or health conditions may be considered sensitive personal information under applicable privacy laws.
B. Technical and Usage Information
Certain technical information may be collected automatically when you use AruChat, including:
Internet Protocol (IP) addresses.
Browser-generated visitor and session identifiers.
Browser and device information available through service requests.
Request timestamps and operational logs.
Information necessary to maintain sessions, enforce usage limits, prevent abuse, and protect service security.
C. Restaurant Subscriber Information
When a restaurant subscribes to AruChat, we may collect:
Restaurant name and business contact information.
Names, email addresses, and telephone numbers of authorized representatives.
Website domains and service configuration information.
Subscription details, payment status, invoices, and billing records.
Communications related to account management and customer support.
Payments are processed through Stripe. AruChat does not store complete payment card numbers on its own application servers.
3. How We Use Your Information
We collect and process information for purposes associated with operating and providing our services, including:
Answering restaurant-related questions using artificial intelligence.
Maintaining conversational context during active chatbot sessions.
Processing restaurant inquiries and helping participating restaurants respond to customers.
Providing information concerning restaurant menus, operating hours, specials, catering, and other services.
Operating, maintaining, troubleshooting, and improving the reliability and security of AruChat.
Preventing spam, abuse, fraud, and unauthorized activity.
Managing restaurant subscriptions, billing, and service-related communications.
Responding to customer support and privacy inquiries.
Complying with applicable legal obligations.
AruChat does not sell personal information to data brokers or use chatbot conversations for targeted advertising.
We do not use chatbot information to make automated decisions producing legal or similarly significant effects concerning individuals.
4. Artificial Intelligence Processing
AruChat uses artificial intelligence technology provided by OpenAI to generate responses to restaurant-related inquiries.
When you interact with the assistant, your messages and relevant conversation context may be transmitted to OpenAI for processing.
OpenAI processes this information in accordance with its applicable service agreements and data handling practices.
OpenAI states that information submitted through its API is not used to train its models by default unless the API customer explicitly opts in.
However, information submitted through the API may be retained for operational, security, abuse-monitoring, or application-related purposes according to the API features and configurations used.
AI-generated responses may occasionally contain errors, outdated information, or incomplete information.
Food allergies, ingredients, dietary restrictions, food preparation methods, and potential allergen cross-contact must always be confirmed directly with restaurant staff.
Users should avoid submitting information they do not want processed by an artificial intelligence service.
5. Information Shared With Participating Restaurants
AruChat provides AI-powered assistance on behalf of participating restaurants.
When you voluntarily submit a restaurant-related inquiry, relevant information may be provided to the restaurant associated with the chatbot.
This information may include:
Your name.
Your email address or telephone number.
The nature of your inquiry.
Reservation, catering, or private event details.
Dietary requests or other information voluntarily included in the inquiry.
Participating restaurants may use this information to respond to inquiries and provide their services.
Restaurants may independently determine how information received from customer inquiries is handled, subject to applicable laws.
AruChat may process certain information on behalf of participating restaurants. Restaurant-specific privacy practices may also be governed by the participating restaurant's own privacy policy.
6. Third-Party Service Providers
AruChat relies on third-party technology and infrastructure providers to operate its services.
These providers include:
OpenAI: Artificial intelligence processing and conversational functionality.
Supabase: Database infrastructure and storage of restaurant information, customer inquiries, and operational records.
Render: Application hosting, backend processing, and operational infrastructure.
Resend: Delivery of administrative emails, service notifications, and restaurant-related inquiry notifications.
Stripe: Subscription billing, payment processing, and related financial records.
Squarespace: Hosting and operation of the AruChat business website.
Information may be disclosed to these providers as reasonably necessary for them to perform services on our behalf.
We may also disclose information when required by applicable law, in response to lawful requests, to protect our rights or security, or as part of a legitimate business transaction, subject to applicable legal requirements.
We do not authorize service providers to use information for unrelated purposes except as permitted by their applicable agreements and law.
7. Browser Storage and Session Information
AruChat uses browser storage and session technologies to provide chatbot functionality.
These may include:
Local Storage
AruChat may store a persistent visitor identifier in your browser to support service continuity, enforce usage limits, and help prevent misuse.
This identifier may remain between visits unless browser data is cleared or the identifier is otherwise reset.
Session Storage
AruChat may maintain a browser-session identifier to support chat interactions and session functionality.
Server-Side Session Information
AruChat may temporarily maintain conversation context to support follow-up questions and provide relevant responses.
Application sessions generally expire after approximately 60 minutes of inactivity.
Expiration of an application session does not necessarily mean that all information previously transmitted to third-party providers or stored in restaurant inquiry records has been deleted.
You may manage or clear browser storage through your browser settings. Doing so may affect certain chatbot features.
Participating restaurant websites may independently use cookies or similar technologies under their own privacy policies.
8. Data Retention
AruChat retains information for periods reasonably necessary to provide its services, fulfill restaurant inquiries, manage business operations, maintain security, and comply with applicable legal obligations.
Retention practices vary depending on the information involved.
Chat Session Information
Active conversational context is generally maintained temporarily during a chatbot session. Application sessions typically expire after approximately 60 minutes of inactivity.
Restaurant Inquiry Records
Information submitted through restaurant inquiries may be stored separately from active chatbot sessions. These records may remain available for restaurant communications, service administration, and related operational purposes until deleted.
Subscription and Billing Information
Restaurant account information, subscription records, and billing-related information may be retained as necessary for accounting, contractual, dispute-resolution, and legal purposes.
Technical and Security Logs
Technical logs and related operational information may be retained according to security needs and the retention practices of applicable infrastructure providers.
AI Processing Records
Information transmitted to OpenAI may be subject to additional retention periods depending on the API features used, applicable settings, and OpenAI's data retention policies.
Some records may remain until explicitly deleted.
Ending a chat session does not automatically guarantee the removal of information previously stored by AruChat, participating restaurants, or third-party service providers.
Individuals may request deletion of personal information as described in Section 10, subject to applicable legal requirements and permissible retention exceptions.
9. Data Security
We use technical and organizational safeguards intended to protect information from unauthorized access, disclosure, modification, loss, and misuse.
Our security practices may include:
Access restrictions for administrative systems.
Secure communications between applications and service providers.
Authentication and access controls.
Abuse prevention and request-rate limitations.
Operational monitoring and appropriate security procedures.
However, no internet-based system, transmission method, or electronic storage environment can guarantee absolute security.
Users should avoid submitting confidential or highly sensitive information through the chatbot.
10. Your Privacy Rights and Choices
Depending on your location and applicable privacy laws, you may have certain rights concerning your personal information.
These may include the right to:
Request access to personal information held about you.
Request correction of inaccurate personal information.
Request deletion of personal information, subject to applicable exceptions.
Object to or restrict certain processing activities where applicable.
Withdraw consent where processing is based on consent, subject to applicable law.
Exercise other privacy rights provided by applicable laws.
Privacy Requests
To submit a privacy-related request, contact:
Please include sufficient information for us to understand your request and identify the relevant records.
We may request additional information reasonably necessary to verify your identity before fulfilling certain requests.
Because AruChat may process information on behalf of participating restaurants, some privacy requests may need to be coordinated with the restaurant involved.
We will review and respond to applicable privacy requests in accordance with relevant laws.
11. Age Restrictions and Children's Privacy
Restaurant Subscribers
Individuals entering into paid subscription agreements with AruChat on behalf of a restaurant must be at least 18 years old and legally authorized to enter into the applicable agreement.
Children Under 13
The AruChat AI assistant is designed for general restaurant-related inquiries and is not intended for children under the age of 13.
Children under 13 should not use the AruChat chatbot or submit personal information through the service.
AruChat does not knowingly solicit personal information from children under 13.
If we become aware that personal information has been collected from a child under 13, we will take appropriate steps to address the information, including stopping further processing and deleting information where required by applicable law.
Privacy Protections for Users Ages 13–17
AruChat may be used by individuals aged 13 through 17 for general restaurant-related inquiries.
We seek to limit the collection and use of personal information to what is reasonably necessary to operate the service, respond to inquiries, maintain security, and comply with legal obligations.
AruChat does not use chatbot conversations for targeted advertising, sell chatbot conversation information, or use personal information to make automated decisions producing legal or similarly significant effects concerning users.
Younger users are encouraged not to share unnecessary personal information, including sensitive medical information, financial information, home addresses, or other confidential details.
Where applicable law requires additional consent or privacy protections for minors, AruChat will comply with those requirements.
Parents and Legal Guardians
Parents and legal guardians may contact AruChat regarding privacy concerns involving a minor, including requests to review or delete personal information where permitted by applicable law.
Requests may be submitted to:
12. Third-Party Websites and Services
AruChat may provide links to restaurant websites, reservation platforms, online ordering services, and other third-party services.
These services operate independently and may have their own privacy policies and terms.
AruChat does not control the data practices of third-party websites or services that it does not operate.
We encourage users to review the applicable privacy policies before submitting information to external services.
13. International Data Processing
AruChat is operated by a business based in the United States.
Personal information may be processed or stored in the United States or in other jurisdictions where our technology and service providers operate.
Depending on your location, applicable privacy laws may provide additional rights or require safeguards concerning international processing and transfers of personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, technology, data processing practices, or applicable legal requirements.
When changes are made, we will revise the "Last Updated" date at the top of this policy.
Where legally required, we will provide additional notice of material changes.
15. Contact Information
If you have questions regarding this Privacy Policy, AruChat's privacy practices, or the handling of personal information, contact:
Aru Chat LLC
Website: https://aru.chat
Email: michael@aru.chat
New Jersey, United States
We will review privacy-related inquiries and respond as appropriate under applicable law.