Privacy Policy
This Privacy Notice describes how Garcon Labs LLC ("Garcon," "we," "us," or "our") collects, uses, and shares your personal information when you use the Garcon mobile application and the website at usegarcon.com (the "Services"). Questions? Contact us at privacy@usegarcon.com.
1. What information do we collect?
In Short: We collect personal information that you provide to us and certain information automatically when you use the Services.
Information you provide. Depending on how you use the Services, this may include:
- email addresses
- passwords and authentication data
- display name and home city
- content you submit, such as messages to the AI assistant, dining experiences you log, restaurants you save, and taste preferences
Information collected automatically. We automatically collect certain information when you use the Services, including usage and log data, device and operating system information, IP address, and diagnostic (crash) data.
Location information. If you grant permission, we collect your device's location while you are using the app to show nearby restaurants. You can disable this in your device settings at any time.
Google Calendar data. If you choose to connect Google Calendar, we access your calendar event data on a read-only basis to detect dining reservations. We do not modify your calendar, and you can disconnect it at any time. Our access to and use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.
Sensitive information. We do not process sensitive information, and we ask that you not include it in messages to the assistant.
2. How do we process your information?
In Short: We process your information to provide, improve, and secure the Services, and to comply with law.
We use the information we collect to operate and personalize the Services and our recommendations, run the AI assistant, detect reservations from a connected calendar, send notifications you enable, authenticate you and keep your account secure, diagnose problems and improve the product, and comply with legal obligations.
3. Do we offer AI-based products?
In Short: Yes. We offer features powered by artificial intelligence.
The Garcon assistant is powered by third-party AI service providers, including Amazon Web Services (AWS). When you interact with the assistant, your messages and relevant context are processed by these providers to generate a response, in line with this notice and our agreements with them; your content is not used to train their foundation models. AI output can be inaccurate — please verify hours, availability, prices, and reservations directly with the restaurant or booking platform.
4. When and with whom do we share your information?
In Short: We do not sell your personal information. We share it with service providers and as required by law.
We share personal information with third-party vendors and service providers who perform services for us, such as cloud hosting, authentication, AI processing, crash diagnostics, and push-notification delivery. We may also share information to comply with law or protect rights and safety, or in connection with a business transfer such as a merger or acquisition.
Google. We use Google services for sign-in/authorization, the Google Calendar API, and restaurant photos via Google Places. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Booking platforms. When you tap a reservation link (such as Resy, Tock, or OpenTable), you leave Garcon for that platform; information you provide there is governed by its own privacy policy.
5. How long do we keep your information?
In Short: We keep your information only as long as necessary.
We retain your personal information for as long as your account is active or as needed to provide the Services, and otherwise as required or permitted by law. When you delete your account, we delete your associated personal information except where we must retain limited records to comply with legal obligations.
6. How do we keep your information safe?
In Short: We use appropriate technical and organizational safeguards.
We protect your information using measures such as encryption in transit and at rest, managed authentication, and access controls. No method of transmission or storage is perfectly secure, but we work to safeguard your data.
7. Do we collect information from minors?
In Short: No. The Services are intended for users 18 and older.
We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
8. What are your privacy rights?
In Short: You may review, update, or delete your information, and you may have additional rights depending on where you live.
You can review and edit your profile in the app, and delete your account and associated data at any time from Settings → Delete Account. You control location, calendar, and notification permissions in your device settings and the app's Connections screen, and can disconnect Google Calendar at any time. Depending on your location (for example, the EEA/UK under GDPR or California under the CCPA/CPRA), you may have additional rights to access, correct, delete, port, or restrict processing of your information. To make a request, email privacy@usegarcon.com.
9. Do we make updates to this notice?
In Short: Yes. We will update this notice as needed to stay compliant.
We may update this notice from time to time. The updated version is indicated by the "Last updated" date above and is effective when accessible.
10. How can you contact us?
If you have questions or requests about this notice, email privacy@usegarcon.com.