Privacy Policy

1. What data we collect

Orders: your name, phone, email, the items you order, and the pickup time.

Payments: we process payments via ATH Móvil (Evertec) or cash. We do not store card numbers; the payment processor handles that.

Team accounts: for the admin panel we store the authorized owner/employee email (passwordless magic-link login).

Technical data: a session cookie to keep you signed in and basic operational logs.

2. How we use data

To prepare and hand off your order, email your receipt, notify the kitchen, run the business, and meet Puerto Rico legal and tax obligations.

We do not sell your data or use it for third-party advertising.

3. Who we share with

Only with providers that run the service: Resend (email delivery), Telegram (kitchen alerts), ATH Móvil / Evertec (payments), Google Gemini (the panel AI assistant, see section 5), and our hosting and database providers (Vercel and Neon).

We may also disclose data where required by law.

4. Cookies and Do Not Track

We use a session cookie solely for panel login. We do not use advertising trackers.

Do Not Track signals: we use only a session cookie for panel login and do not track your browsing activity across sites, so our site does not respond differently to browser "Do Not Track" (DNT) signals. We also do not allow third parties to collect personally identifiable information about your online activity through our site.

5. Artificial Intelligence and transparency

The business panel includes an AI assistant powered by Google Gemini. It is a tool for the owner and staff: it does not interact with customers or process customer payment data.

What data is sent to the AI: business operations data (sales, costs, products, and employee names and wages entered by the owner). Customer payment data is NOT sent.

Transparency and human control: the AI does not make decisions on its own. Any change it suggests (prices, inventory, hours, taxes, time clock) requires explicit human confirmation before it is applied.

Limits: AI-generated content may contain errors. It is not legal or tax advice; for important decisions consult a Puerto Rico CPA or attorney.

Principles: we aim to use AI responsibly, following principles of transparency, fairness, reliability and safety, privacy and security, inclusiveness, and accountability (Microsoft Responsible AI principles) as well as Google’s AI Principles. Use of Gemini is subject to Google’s generative-AI terms.

6. Retention

We keep orders as long as needed for records and accounting under Puerto Rico law. You can ask us to delete your personal data when it is no longer needed.

7. Your rights

You can request access, correction, or deletion of your personal data by writing to hola@elfogondelamontana.com.

8. Minors

The service is not directed to anyone under 18, and we do not knowingly collect data from minors.

9. Security

We use reasonable measures (encrypted HTTPS connections, restricted access) to protect your data.

Data-breach notification: if unauthorized access to your personal information occurs, we will notify you and report it to the Puerto Rico Department of Consumer Affairs (DACO) as required by Puerto Rico Act No. 111 of 2005, without undue delay.

10. Changes and contact

We may update this policy. Any change will be reflected on this page with a new "last updated" date above, and significant changes will be announced conspicuously on the site. Continued use of the service after a change constitutes acceptance of the updated policy.

Questions: hola@elfogondelamontana.com · El Fogón de la Montaña, Cidra, Puerto Rico 00739.