Privacy Policy

1. Introduction

389 BarKeep ("BarKeep", "we", "us", or "our") is operated by 389 Group Ltd. This Privacy Policy explains how we collect, use, store, and protect personal information when you use the BarKeep web application, Android mobile application, and related services (the "Service").

By creating an account or using the Service, you acknowledge that your information will be handled as described in this policy.

2. Information we collect

We may collect the following categories of information:

• Account information: name, email address, phone number, role, and authentication credentials.
• Business information: bar or organization name, address, logo, theme settings, locations, products, inventory, suppliers, and financial records entered into the Service.
• Customer information: names, contact details, credit status, invoices, payments, and sales history that your organization records in BarKeep.
• Usage information: login activity, audit logs, device/browser data, and actions performed in the application.
• Communications: messages sent through integrated channels such as WhatsApp where enabled by your organization.

3. How we use information

We use collected information to:

• provide, operate, and maintain the Service;
• authenticate users and enforce role-based access controls;
• process sales, inventory, billing, payments, and reporting for your organization;
• send service notifications, receipts, bills, and payment reminders where configured;
• improve security, troubleshoot issues, and prevent fraud or misuse;
• comply with legal obligations and respond to lawful requests.

4. Legal basis and responsibility

For bar staff and organization users, we process account and usage data to perform our contract with your organization. For customer and supplier data entered by your organization, your organization is the data controller and is responsible for ensuring it has a lawful basis to collect and use that information. We act as a processor when handling such data on your organization's instructions.

5. Sharing and disclosure

We do not sell personal information. We may share information only:

• with service providers that help us host, secure, or deliver the Service, under confidentiality obligations;
• with messaging or payment providers where your organization enables those integrations;
• within your organization according to user roles and permissions;
• when required by law, regulation, court order, or to protect rights, safety, and security.

6. Data retention

We retain information for as long as your organization's account is active and as needed to provide the Service, meet legal, tax, and accounting requirements, resolve disputes, and enforce our agreements. Your organization may request deletion or export of data subject to applicable law and operational constraints.

7. Security

We implement reasonable technical and organizational measures to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to request portability where technically feasible. Organization administrators should contact us for account-level requests. Individual users may contact their organization administrator for data held on behalf of that bar.

To request deletion of your personal BarKeep user account (web or Android app), use https://barkeep.389group.ltd/delete-account or email privacy@389group.ltd.

9. Cookies and local storage

The Service uses browser local storage and similar technologies to keep you signed in and remember application preferences. These are necessary for core functionality of the dashboard.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact

For privacy questions or requests, contact 389 Group Ltd at privacy@389group.ltd.