Privacy Policy

1. About this policy

Cameron Critique is a service from Cameron that helps restaurants compare submitted dish photos with their own menu standards. This policy covers the Critique website, dashboard, Telegram bot and related support. It explains how we handle information supplied by account owners, their teams and people who contact us.

The restaurant decides which menu, photos, people and locations to add. We process that business content to provide the service. We also handle account, billing, support and security information to operate Cameron Critique.

2. Information we collect

Depending on the features you use, we collect:

• Account and business details: names, email addresses, phone numbers when provided, business and location names, account settings, permissions and login records.
• Menu content: dish names, descriptions, variants, preparation guidance, reference photos and uploaded menu documents. We retain the original uploaded menu file, including when an import fails.
• Plate submissions: dish photos, captions or related messages, submission timestamps, selected restaurant location and the identity of the person submitting the plate.
• Telegram connection details: usernames, Telegram user and chat identifiers, message identifiers and the messages, photos or button selections sent to our bot.
• Results and team context: dish identifications, scores, feedback, saved assessment evidence, kitchen sections, shifts and team assignments. Where staffing features are used, reports can associate results with the people scheduled in a section.
• Billing and service records: package selection, evaluation balances, usage, payment references, diagnostic and security logs, and support or contact messages.

Critique works with photos you submit. Using Critique alone does not connect a camera system or continuously record your restaurant.

3. How we use information

We use this information to identify dishes, compare them with saved references, create results and reports, manage access, link Telegram accounts, send requested notifications or weekly emails, administer payments and evaluation balances, provide support and protect the service.

Account owners and authorised team members can view information according to their location access and permissions. Weekly digest recipients and people receiving an exported report or assessment email receive the content shared with them. You are responsible for choosing recipients appropriately.

We do not sell customer data or use your dish photos, menus or staff reports for third-party advertising.

4. AI processing and service providers

We use service providers for hosting, storage, email delivery, security and AI processing. Dish identification and grading may send the submitted photo, relevant menu text and saved reference photos to the AI provider used for that assessment. Menu imports and description processing may send relevant document content or menu text to an AI provider.

Providers receive information needed for their part of the service. Their processing and retention also depend on the applicable service agreements and provider policies. Contact us if you need information about the providers currently used for your account.

Some providers may process information outside your country. Where applicable, international transfers must meet the safeguards or other lawful conditions required by data protection law.

5. Telegram

When you interact with the Critique Telegram bot, Telegram transmits your messages, photos and relevant account identifiers to Cameron so we can link your person record, route the photo to a permitted location and process it. Telegram also handles information through its own service.

Telegram's handling of your account and chat data is governed by Telegram's Privacy Policy. Deleting a record or account in Cameron does not automatically delete messages or copies held in Telegram, a recipient's email or a downloaded export.

6. How long we keep information

• Submitted photos: location photo retention currently defaults to 365 days. Older or specifically configured locations may use a different period. Photos are removed when they become eligible for cleanup.
• Reference photos: current menu references and photos needed for retained assessment evidence can be kept longer. Replacing or removing a dish does not immediately erase the references used by its historical assessments.
• Unfinished uploads and drafts: abandoned photo uploads normally expire after 24 hours; saved reference drafts normally expire after 30 days.
• Menus, original menu uploads and results: we retain these with the account to support your menu, assessment history and reports. Scores and other history may remain after the corresponding photo has expired. Report date limits are not a promise that older records have been deleted.
• Account, billing and security records: we keep these for account administration and for applicable legal, tax, dispute and security requirements.

Legal holds can delay deletion. Cleanup is a background process, so an expiry date is not a guarantee of deletion at that exact instant.

7. Access, correction, export and deletion

Authorised account managers can manage people, permissions, locations and menu data. Account tools support data export and account deletion. An export can include available photos if you choose that option. Removing a menu item preserves its assessment history.

You may contact us to request access to, correction of or deletion of your personal information, or to raise an objection where applicable law allows it. We may need to verify your identity and authority. For information held in your employer's restaurant account, we may need to work with that account's authorised manager.

Account deletion removes operational data and available stored objects through our deletion process, subject to legal holds and records we must lawfully retain. Backup or log copies may remain until their normal rotation. Copies already shared with others are outside that deletion process.

8. Security and website use

We use access controls, protected account credentials, encryption in transit and other safeguards designed to protect the service. No system can be guaranteed completely secure. Keep account credentials and Telegram access private, and remove permissions when a person leaves your team.

The dashboard uses cookies and similar storage for sign-in, security and essential preferences. Website requests may produce technical logs such as IP addresses and browser information. These marketing pages load fonts from Google Fonts, which receives the browser requests needed to serve those fonts; see Google's Privacy Policy.

9. Restaurant and staff privacy

You must have the necessary rights and lawful basis to supply menu content, photos and staff information. Give staff the notices required for their details, schedules and performance-related reports. Avoid including diners, payment details or other unnecessary personal information in plate photos and menu documents.

Critique reports reflect submitted samples and saved team assignments. They should be reviewed in context and should not be the sole basis for significant decisions about a person. The service is intended for businesses and is not directed at children.

10. Changes and contact

We may update this policy as the service changes. We will update the date above and provide notice of material changes where appropriate.

For privacy questions or requests, use the Cameron Critique contact form or contact us through your existing support channel. Please describe the request without sending passwords or unnecessary sensitive information.