Effective Date: 01/01/26

brd BOT (“brd BOT,” “we,” “us”) operates robotic food vending machines and a rewards/account web app (together, the “Services”). This Privacy Policy explains how we collect, use, share, and protect information when you use our machines, website, and rewards/account features.

1) Information We Collect

A. Information you provide

Phone number (used to identify your rewards account and to send one-time passcodes (OTP) for login/verification if you use the rewards web app).

Account/rewards details you choose to provide (for example: optional profile info, if added in the future).

Support communications (messages you send us for help with an order, refund issues, etc.).

B. Information collected automatically

Order and rewards activity (e.g., purchases, stamps earned, rewards applied, discounts issued).

Device and usage data when you use our web app (e.g., IP address, device type, browser, timestamps, pages viewed, and basic analytics).

Machine session data (e.g., when a phone number is entered on the machine to look up rewards availability, and actions taken during that session).

Approximate location (inferred from IP address on the web app) and/or the machine location you used (since each machine is installed at a venue).

C. Payment information

Payments are processed by third-party payment providers. We do not store your full payment card number. We may receive limited payment-related information such as confirmation

of payment and transaction identifiers.

2) How We Use Information

We use information to:

Provide the Services, including processing orders and managing rewards (stamps, discounts, free orders).

Authenticate you and help secure your account (e.g., sending OTP codes to verify login).

Apply rewards and discounts you’ve earned and track program rules (e.g., “after 9 paid orders, the 10th is free,” and discounts earned via spins).

Operate and improve our machines, web app, and customer experience (analytics, debugging, reliability).

Prevent fraud and misuse, including detecting suspicious activity or attempts to redeem rewards without authorization.

Provide customer support and respond to requests.

3) SMS/Text Messages and Consent

If you provide your phone number, we may send texts such as:

Verification/authentication messages (OTP codes to log into the rewards web app).

Account and rewards messages (e.g., confirmations, rewards status, or important service updates).

Marketing/promotional messages only if you opt in (e.g., deals or special offers).

Opt out: You can opt out of marketing texts at any time by replying STOP. You may receive a confirmation text. For help, reply HELP or contact us using the information below.

Message frequency varies. Message and data rates may apply.

Important: SMS consent is not sold, shared, or transferred to third parties or affiliates for marketing purposes.

4) How We Share Information

We may share information with:

Service providers that help us operate the Services (e.g., SMS delivery providers, hosting providers, analytics tools, customer support tools).

Payment processors to process transactions.

Vendors and contractors who need information to perform services for us (subject to confidentiality and security obligations).

Legal and safety reasons: if required by law, subpoena, or to protect the rights, safety, and security of brd BOT, our customers, and others.

Business transfers: if we’re involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information.

5) Rewards Program and Machine “Lookup” Sessions

If you enter your phone number on a brd BOT machine:

The machine may use your phone number to look up whether your account has eligible rewards.

The machine is intended for temporary session use—account information is displayed only during your active ordering session and is cleared when the session ends.

We recommend using the rewards web app login (OTP verification) for account management features.

6) Data Retention

We keep personal information as long as needed to:

provide the Services,

maintain required business records (e.g., transactions),

resolve disputes,

enforce our agreements, and

comply with legal obligations.

Retention periods may vary depending on the data type and purpose.

7) Security

We use reasonable administrative, technical, and physical safeguards to protect information. No system is 100% secure, and we cannot guarantee absolute security.

8) Your Choices and Rights

Depending on your location and applicable law, you may have rights to:

request access to or a copy of your personal information,

request correction or deletion,

object to or restrict certain processing.

To make a request, contact us using the information below.

9) Children’s Privacy

Our Services are not intended for children under 13, and we do not knowingly collect personal information from children under 13.

10) Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Effective date” above. Continued use of the Services after changes means you accept the updated policy.

11) Contact Us

brd BOT
Email: support@brdbot.com