Privacy Policy for Popcorn

Last updated: August 15, 2026 · Version 1.2 · corrected 2026-09-21

This policy explains how the operator of Popcorn ("we") collects, uses, and protects personal data in connection with the service.

1. Data Controller

For guest feedback, the venue is the data controller. For account data, the operator of Popcorn is responsible. Today those are the same party, because the service is run for businesses that the operator themselves run. Contact: privacy@insightshub.no. Appendix A in the Terms of Service applies only when a business that the operator does not run themselves uses the service.

2. What Data We Collect

We process data for four main categories of users:

1. Restaurant owners (account holders):

2. Anonymous Guests (feedback providers):

Important: Guest feedback is collected anonymously. We do not request names, email addresses, or other directly identifying information from guests in the standard flow. IP addresses are stored temporarily for security purposes. An anonymized, hashed device key is used strictly for device recognition for returning guests.

3. GM Members (Guest Accounts):

GM members can create a profile via email magic link. Data can be deleted at any time through the delete-account flow.

4. Staff (Venue employees):

Staff members log in via PIN to access venue-specific staff views and perform actions.

3. How We Use the Data

• Provide and maintain the Popcorn service
• Send transactional messages (login codes, welcome emails)
• Protect against abuse and spam
• Create anonymized industry insights (aggregated data where no individual can be identified)
• Improve service features and AI models

We never sell personal data to third parties.

4. Sub-processors

We use the following services to provide Popcorn:

All sub-processors are bound by agreements ensuring at least the same level of protection as this policy.

5. Storage and Deletion

• Account data (Owners & GM Members): Stored as long as the account is active. Upon termination or deletion request, data is deleted.
• Guest feedback: Stored as long as the restaurant's account is active. Anonymized, aggregated data may be retained after deletion.
• Guest photos: Stored in Cloudflare R2. Reviewed by the venue before any use, and deleted upon request (see "Your Rights (GDPR)").
• IP addresses: Stored temporarily (max 90 days) for security purposes.

6. Your Rights (GDPR)

As a data subject, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Request deletion ("right to be forgotten") (Art. 17)
• Restrict processing (Art. 18)
• Receive your data in machine-readable format (data portability, Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Lodge a complaint with the supervisory authority (Datatilsynet, datatilsynet.no) if you believe your rights are not being respected (Art. 77, Art. 13(2)(d))

Contact us: privacy@insightshub.no · We respond to requests within 30 days.

7. Security

We protect your data through:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest (database storage)
• Role-based access control
• Rate limiting and abuse prevention
• Regular security review of the codebase

8. Cookies and Tracking

Popcorn does not use third-party cookies or tracking services. We use technically necessary cookies (session cookies) to authenticate logged-in users and a hashed device key to enable recurring guest features safely without tracking identity across sites.

9. External review platforms

After leaving feedback, guests may be shown an optional link to write a review on an external platform (e.g., Google or others depending on the venue's configuration). The link is always optional. The guest's feedback is always submitted directly to the venue regardless of whether the external link is shown or clicked. Popcorn does not restrict or filter who is presented with the link based on their feedback score.

10. Google data

What we read today. When a venue looks up its own place, Popcorn reads Google Places data started by that venue: suggestions as the owner types, a text search, and details for a chosen place id.

What we store. If a place is selected we may store the place id and, when the lookup succeeds, name, address, latitude, longitude, city, region and country. We do not store Google reviews through Places.

What we do not send on. Popcorn does not write to Google Business Profile and does not sync opening hours. A later model may let the venue connect its own profile and approve each intended change. That is not in place today. Places data and Business Profile data are covered by separate terms at Google. Gemini is listed under sub-processors for AI processing; that is a different use than Places.

11. Changes to This Policy

We may update this policy. Material changes are communicated via email at least 30 days in advance.

12. Contact

The operator of the Popcorn service
General contact: support@insightshub.no
Privacy inquiries: privacy@insightshub.no