Skip to main content

Privacy Policy

1. Data Controller

Juncu.ai is the data controller for personal data processed through this platform. Contact us through the support form in your account area, or via email at: support@juncu.ai.

2. Data We Collect

  • Account information (name, email, phone)
  • Booking history and preferences
  • Payment information (processed securely via Stripe — we do not store card numbers)
  • Messages you exchange with businesses through the platform, including their content
  • Usage data (pages visited, interactions)

3. How We Use Your Data

  • To process and manage your bookings
  • To communicate booking confirmations, changes, and reminders
  • To process payments and refunds
  • To improve our services and user experience
  • To comply with legal obligations
  • To answer your questions on a business's behalf, including with an automated assistant
  • To handle disputes relating to bookings and messages

4. Legal Basis (GDPR Art. 6)

  • Contract performance: Processing bookings and payments
  • Legitimate interest: Improving services, fraud prevention
  • Legal obligation: Tax and regulatory compliance
  • Consent: Where specifically requested (e.g., marketing)

5. AI and Automated Processing

We use AI-assisted processing (Google Gemini) to facilitate communication between users and providers. This includes automated booking request routing, provider notifications, intent detection in provider messages and, where the provider enables it, generating automated replies to the messages you send them. When a provider enables the assistant, the content of your messages is sent to Google Gemini to find an answer among the information that provider has published: the questions they have already answered, their listing, the details of your own booking and, for a restaurant, their published menu. The assistant answers only from those: it does not generate information of its own, never states availability, and does not make decisions about your booking. It may quote a price only where the business has published one — a dish on the menu. Where you ask what a dish contains, the reply naming the allergens the restaurant has declared for that dish is written by our system from those declarations, not by the model, and it states only what is present: it never says that a dish is free of anything, and a question the declarations do not answer goes to a person. You are always told when you are talking to an automated assistant, and you can ask to speak to the provider at any time. If the assistant cannot answer, your question is passed to a person. If your messages include health information — for example allergies, intolerances, accessibility needs or medical conditions — it is processed to answer your request on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give by sending the message after reading the notice shown above the send button and which you can withdraw by contacting us. No fully automated decision with legal or similarly significant effects is made about you.

6. Data Sharing

We share your data with:

  • Service providers: Name and booking details for fulfillment
  • Google Maps Platform: Map rendering and address lookup
  • Stripe: Payment processing
  • Supabase: Database hosting (EU region)
  • Vercel: Application hosting
  • Twilio: SMS/WhatsApp notifications
  • Sentry: Error monitoring (EU region; IP addresses suppressed)
  • Google Gemini: Generating automated replies to messages (where the provider enables it), translating messages when the user's and the provider's languages differ or when a reader asks for it, and intent detection. Content is processed in the United States under Standard Contractual Clauses (SCCs)
  • Resend: Sending transactional email and delivering messages to providers

7. Data Retention

We retain your personal data for as long as your account is active. Booking records are kept for 10 years for tax compliance (Art. 2220 Italian Civil Code). You can request deletion of your account at any time. Messages exchanged on the platform are kept for 24 months from the last interaction. Where a dispute arises, they may be kept for as long as is necessary to establish or defend a legal claim.

8. Your Rights (GDPR Art. 15-22)

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Lodge a complaint with the Garante per la protezione dei dati personali

9. Contact

For privacy inquiries, contact us through the support form in your account area, or via email at support@juncu.ai.