BettyCart Privacy Policy

Effective Date: April 20, 2026 Last Updated: April 20, 2026

This Privacy Policy describes how Reluminate Labs LLC, a Utah limited liability company doing business as BettyCart ("BettyCart," "we," "us," or "our"), collects, uses, and shares information when you use the BettyCart website, applications, and services (the "Service").

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service. Our Terms of Service govern the contractual relationship between us.

1. Who We Are

BettyCart is a U.S.-based AI shopping-assistance service. Our AI assistant, Betty, helps you plan your shopping and builds carts at third-party retailer websites on your behalf. You then complete checkout with the retailer directly. We are the controller of the personal information you provide while using the Service.

The Service is currently offered only to U.S. residents age 18 or older. If we expand to additional regions in the future, we will update this Policy.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, password (hashed), or Google OAuth identifier.
• Profile and preferences: household size, your chosen retailer and store (e.g., a Walmart store by ZIP code), shopping preferences (such as dietary preferences, allergies, or cuisines you like or want to avoid), items to keep on hand ("staples"), and any other preferences you share with Betty.
• Chat and session content: the messages you send Betty, the meal plans and shopping lists generated in response, recipes Betty writes, and shopping reports — stored as Markdown files you can view and edit in the Service.
• Support communications: information you send when you contact us.

2.2 Information Collected Automatically

• Usage data: pages viewed, features used, approximate geographic region, referring URL, device type, browser type, operating system, and timestamps.
• Technical/log data: IP address, session identifiers, and error logs.
• Cookies and similar technologies: see Section 6.

2.3 Information From Third Parties

• Authentication providers: if you sign in with Google, we receive basic profile data (name, email, profile image, Google ID) as authorized by you during OAuth consent.
• Payment processor: Stripe tells us the status of your subscription and a payment-method token, but we do not receive or store your full card number.

2.4 Information We Do Not Collect

• We do not collect, store, or transmit your retailer login credentials (for example, your Walmart username or password). Betty builds a pre-filled cart and hands you a claim link; you log in to the retailer yourself and check out on the retailer's website.
• We do not collect or process payment for the products you buy. Payments for retailer purchases are made by you directly to the retailer at checkout.
• We do not collect children's data. The Service is not directed to anyone under 18. See Section 11.

3. How We Use Your Information

We use your information to:

• Provide the Service: authenticate you, run Betty sessions, generate meal plans and shopping lists, build retailer cart links, deliver notifications, and remember your preferences.
• Process subscriptions and billing: through Stripe (see Section 5).
• Communicate with you: transactional messages such as cart-ready notifications, billing receipts, account and security alerts, and support responses. If you opt in, product updates and marketing.
• Improve the Service: we use aggregated and anonymized information (for example, the average number of items per cart, feature-adoption rates, error rates) to understand usage and improve the product. We do not use your personal chat content, meal plans, preferences, or shopping data to train AI models.
• Keep the Service safe: detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms.
• Comply with law: respond to lawful requests, enforce our rights, and meet legal obligations.

4. Who We Share It With (Subprocessors)

We share the minimum information necessary with trusted service providers who help us operate the Service. These providers are contractually required to protect your information and use it only for the purposes we specify.

We may add or change subprocessors over time. Material changes will be described through the notice process in Section 13.

4.1 Other Disclosures

We may also disclose information:

• In response to lawful requests (subpoenas, court orders, government demands) or to comply with legal obligations.
• To enforce our rights or the Terms of Service, or to protect the safety, rights, or property of BettyCart, our users, or others.
• In connection with a business transaction such as a merger, acquisition, financing, or sale of assets. We will notify you of a material change in controllership through the process in Section 13.

4.2 What We Do Not Do

• We do not sell your personal information for money.
• We do not "share" your personal information for cross-context behavioral advertising (as those terms are defined under California law).
• We do not use your data to train AI models, whether ours or anyone else's.

5. Payment Information

Payments are processed by Stripe, Inc. Stripe receives your payment method and billing information directly; BettyCart does not see or store your full card number. Stripe's handling of your information is governed by Stripe's own privacy policy at stripe.com/privacy.

6. Cookies and Analytics

We use a small number of first-party cookies required to keep you signed in and to remember your session.

For product analytics, we use Vercel Analytics, which is designed to be privacy-friendly and does not use tracking cookies for cross-site advertising. We may also log anonymized usage metrics to understand feature adoption and reliability.

If we add additional analytics or advertising tools in the future, we will update this Policy through the notice process in Section 13, and where required by law, we will seek your consent or provide an opt-out.

Most browsers let you refuse or delete cookies; disabling essential cookies will prevent you from signing in.

7. Data Retention

• Active accounts: we retain your information for as long as your account is active and as needed to provide the Service.
• Account deletion: when you delete your account (or we terminate it), we purge your personal profile, preferences, chat history, meal plans, recipes, and shopping lists within thirty (30) days. The 30-day window is a grace period in case of accidental deletion.
• Legally-required records: we retain a minimal set of billing and tax records (transaction history, invoices) for the period required by applicable law, typically up to seven (7) years.
• Backups: residual copies in encrypted system backups are overwritten on the normal backup rotation.
• Aggregated or anonymized data that can no longer reasonably identify you may be retained indefinitely for product analytics.

8. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect your information, including:

• Encryption in transit (HTTPS/TLS) and at rest for databases and file storage
• Row-level access controls on user data in our database
• Scoped API keys and least-privilege access for subprocessors
• Hashing of passwords (we never store plaintext passwords)
• Regular dependency updates and monitoring

No system is 100% secure. If we become aware of a data breach affecting your information, we will notify you in accordance with applicable law.

9. Your Privacy Rights

We extend the following privacy rights to all U.S. residents, regardless of which state you live in, even when we are not legally required to. If your state grants additional rights, those additional rights also apply.

You have the right to:

• Know / Access: request a copy of the personal information we hold about you.
• Correct: ask us to correct inaccurate information.
• Delete: ask us to delete your account and associated personal information, subject to limited retention for legal purposes.
• Port: receive your information in a portable, machine-readable format.
• Opt out of sale or sharing: although we do not sell or share personal information for cross-context behavioral advertising, you may still submit a request to confirm this.
• Limit use of sensitive information: where applicable.
• Non-discrimination: we will not deny service, charge different prices, or provide a lower quality of service because you exercised your rights.

9.1 How to Exercise Your Rights

Send a request to support@bettycart.com from the email address on your account, or use the in-app controls in your account settings (where available). We will verify your request by confirming ownership of the account. We will respond within the timeframes required by applicable law (typically 45 days under California law, with one 45-day extension where reasonably necessary).

You may designate an authorized agent to make a request on your behalf. We may require the agent to provide written authorization and may verify your identity directly.

9.2 Appeals

If we deny your request, you may appeal by replying to our response. We will review and respond within 45 days.

9.3 California "Shine the Light"

California residents may request a list of the categories of personal information (if any) we have disclosed to third parties for the third parties' direct marketing purposes. We do not currently disclose personal information for third-party direct marketing.

10. Communications

• Transactional emails (cart-ready notifications, billing receipts, password resets, account and security alerts) are a necessary part of the Service and are sent without separate consent.
• Product updates and marketing emails are only sent if you opt in. You can unsubscribe at any time using the link in any such email or by updating your account preferences.
• SMS is not currently offered. If we add SMS in the future, it will require separate, TCPA-compliant opt-in.

11. Children

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact support@bettycart.com and we will delete it promptly.

12. International Users

The Service is currently offered only to U.S. residents, and our servers and subprocessors are primarily located in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

If we begin offering the Service to residents of other regions (including the European Economic Area, the United Kingdom, or Switzerland), we will update this Policy to describe the applicable legal bases, transfer mechanisms, and local rights.

13. Changes to This Policy

We may update this Policy from time to time.

• Material changes (including changes to the categories of information we collect, how we use it, who we share it with, or how we protect it) will be announced by email to your account address and by an in-app banner at least thirty (30) days before the change takes effect.
• Non-material changes (such as clarifications or corrections) will be indicated by updating the "Last Updated" date at the top of this page.

If you do not agree to a material change, you must stop using the Service and may exercise your right to delete your account.

14. Contact Us

Questions, requests, or concerns about your privacy or this Policy?

Reluminate Labs LLC (d/b/a BettyCart) Utah, United States support@bettycart.com