Greetly AI
Greetly AI · 036 Labs
Privacy Policy
Draft for review. Highlighted items are being confirmed by 036 Labs and will be filled in before this page goes live.
Last updated: EFFECTIVE DATE
This policy explains what information Greetly AI collects, why, who we share it with, and the choices you have. Greetly AI is provided by LEGAL ENTITY NAME ("036 Labs", "we", "us").
1. Who this applies to
- Venue owners, managers and staff who use Greetly AI.
- Guests who add a message or photo through a link or QR code shared by a venue.
- Visitors to our website.
2. What we collect
From venue staff
- Sign-in details. If you sign in with Telegram: your Telegram user ID, username and display name. If your venue sets you up with a staff account instead: your display name, role, and a PIN, which we store only in scrambled (hashed) form.
- Venue and role. The venue you belong to and your role there.
- Your activity. The messages you write, the photos you upload, the visuals you create, and what was sent to which screen.
- Admin activity. Changes to venue settings, staff and credits are logged for security and auditing.
From guests
If a venue shares a link with you, we collect what you choose to submit: a message, and optionally a photo. We don't ask guests for a name, email address or account.
Billing information
Payments are processed by Stripe. We receive details about your plan, purchases and payment status. We never see or store full card numbers.
From devices and systems
- Technical data: IP address, browser and device type, and session information.
- Venue hardware. The Greetly Bridge and Greetly Player report device identifiers, network status, health and diagnostic logs so we can manage and support them remotely. They have no cameras or microphones and don't record the venue.
From website visitors
Information you submit through our contact form: your name, venue name, email, phone and message.
3. How we use it
- To generate visuals and deliver them to venue screens
- To manage accounts, staff access, plans and credits
- To screen submitted text and photos for content that breaks our rules
- To provide support and respond to enquiries
- To keep the service secure and prevent fraud and misuse
- To maintain and improve the service
We don't sell personal information, and we don't use it for advertising.
4. Automated screening and AI processing
To create a visual, the text and any photo you submit are sent to AI service providers that interpret the message, check it against our content rules, and generate the image. Submitted content may also be checked by automated moderation tools. These providers process it only to perform those tasks for us.
Guest submissions are also reviewed by venue staff before anything is shown on a screen.
5. Who we share it with
Only the service providers needed to run Greetly AI:
| Provider | Purpose |
|---|---|
| Stripe | Payments and billing |
| OpenAI | Understanding messages and content moderation |
| Ideogram | Generating visuals |
| Cloudinary | Storing and processing images |
| Replit | Hosting the app and its database |
| Vultr | Hosting our automation systems |
| Cloudflare | Secure network connections |
| balena | Managing venue hardware remotely |
| Telegram | Sign-in, for staff who use it |
We may also disclose information if required by law, to protect people's safety or our rights, or as part of a merger or sale of our business, in which case this policy continues to apply to it.
Venues can see what's submitted to them. A message or photo a guest submits is visible to that venue's staff, and a visual that's sent to a screen is displayed publicly at the venue.
6. How long we keep it
- Unfinished guest and staff submissions expire after a period set by the venue — usually one shift, and never more than 24 hours. When they expire, their uploaded photos are deleted.
- Visuals and generation history are kept while the venue's account is active, so staff can send them again.
- Billing records are kept as long as the law requires.
- Other account data is kept while the account is active, then deleted or anonymised within a reasonable period, unless we need to keep it for legal, security or billing reasons.
7. Security
We use HTTPS encryption, role-based access controls, hashed PINs and passwords, short-lived single-purpose links for guest submissions, and audit logs of administrative actions. No system is completely secure, but we work to protect your information and fix issues promptly.
8. Your choices and rights
You can ask us to:
- tell you what information we hold about you;
- correct it;
- delete it, or your account; and
- explain how it's used.
Guests can ask us to delete a photo or message they submitted. Email [email protected] with the venue name and roughly when you submitted it.
Depending on where you live, you may have additional rights under local law, including the right to complain to a data protection authority. We'll respond within the time the law requires.
9. Cookies
We use cookies that are necessary to keep you signed in and to protect the app against misuse. [[If the website uses analytics or marketing cookies, describe them here and link to the cookie settings.]]
10. Children
Greetly AI is a business service for venue staff and isn't directed at children. We don't knowingly collect personal information from anyone under 13. If you believe a child has submitted information to us, contact us and we'll delete it.
11. International transfers
We're based in the United States and our providers may process information in the US and other countries. Where required, we use appropriate safeguards for those transfers.
12. Changes to this policy
We may update this policy. We'll post the new version here with a new date, and notify account owners of material changes.
13. Contact
LEGAL ENTITY NAME
BUSINESS ADDRESS
Email: [email protected]
Phone: PHONE