Privacy Policy

Effective date: 2026-11-04
This Privacy Policy explains how Humoo collects, uses, shares and protects personal information when you use the Humoo website and app.
Humoo is operated by Alexander Santiago Castillo in Charlotte, North Carolina, United States. Questions and requests about this policy can be sent to santiagoca1202@gmail.com.

Information we collect

Depending on how you use Humoo, we collect:
  • Account information: your name, your email address and the credentials managed by Humoo's authentication system. Passwords are stored only as secure hashes.
  • Workspace information: the workspaces you create or join, their members and roles, and the culinary operations content you add, such as tasks, recipes and menus when those features are available.
  • BEO documents: the original event contracts (Banquet Event Orders) you upload and what Humoo records from them. They can include your clients' names and contact details, prices, dates and other confidential terms.
  • Chat content: the messages and instructions you send to Humoo and the responses it produces.
  • Notification information: your notification preferences (which categories reach you by push or email), quiet hours, time zone and the language Humoo uses for your notifications; the reminders you create (their title, note and schedule); the notifications Humoo sends you and whether you have read or archived them; and, if you turn on push notifications, a push token or browser subscription for each device, with its platform.
  • Technical and security information needed to run sessions, handle requests and prevent abuse, such as session records, IP address, browser or device information, request identifiers and audit records of changes made in a workspace.
  • Information you choose to send when you contact us for support or with a question.

How we use information

We use this information to:
  • create and maintain accounts;
  • provide Humoo's features;
  • carry out the operations you request;
  • send you the notifications and reminders you choose, in the app, by push and by email;
  • provide AI features;
  • authenticate users, protect security and prevent abuse;
  • troubleshoot problems and provide support;
  • keep audit records and operational integrity;
  • comply with legal obligations.

AI features and OpenAI

Humoo's AI features use the OpenAI API. To carry out a request, Humoo sends OpenAI the prompts, instructions, context and results needed for that request, which can include chat content and workspace information.
Humoo asks OpenAI not to store the responses to these requests.
Under OpenAI's API data usage policies, data sent through the API is not used to train OpenAI's models by default, unless the customer opts in, and OpenAI may retain it for a limited time under its own policies, including for abuse monitoring.
Humoo stores your chat history so you can continue your conversations. Your chats are private to you within your workspace.

Your workspace data belongs to you

The content of a workspace, including its BEO documents, belongs to that workspace, never to Humoo. You and your team decide what to put in it and can delete it.
Only members of a workspace can reach its content, according to their roles and permissions. No other workspace can see it.
Humoo personnel do not open workspace content. Technical access to Humoo's database is limited to operating the service: responding to incidents, protecting security and meeting legal obligations. Humoo has no feature that lets its personnel view a workspace as one of its members.
Humoo never sells workspace content or personal information, never uses them for advertising, never uses them to train AI models and never shares them between workspaces.
A workspace may hold information about other people, such as its clients' contacts or the names printed in a BEO. The workspace is responsible for having the right to add that information; Humoo processes it only to provide the service.

How information is shared

Humoo shares personal information only:
  • with members of your workspaces: content you add to a shared workspace is available to its members according to their roles and permissions, while your chats remain private to you;
  • with OpenAI, as described above, to provide AI features;
  • with Resend, which sends Humoo's account emails (email confirmation, password reset and account deletion) and the notification emails you choose to receive, and receives your email address and the content of those emails;
  • with Expo, and through it with Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging), to deliver push notifications to the Humoo apps for iOS and Android: they receive your device's push token and the notification's short text;
  • with your browser's push service (such as Google, Mozilla, Microsoft or Apple), to deliver push notifications on the web: it receives your browser's subscription and an encrypted notification that only your browser can read;
  • with DigitalOcean, which hosts Humoo's servers and database in the United States and stores all of Humoo's data, including backups, on Humoo's behalf;
  • with applications you choose to connect: if you authorize an application to access your Humoo account, it can read your workspace data within the permissions you approve;
  • when required by law, or when reasonably necessary to protect the security of Humoo or its users.
Humoo does not sell personal information and does not share it for cross-context behavioral advertising.

Cookies and local storage

Humoo uses only essential cookies, which are needed to keep you signed in and to protect your session. It also stores your appearance and language preferences on your device. The Humoo apps for iOS and Android keep your session in the device's secure storage instead of a cookie. If you turn on push notifications on the web, your browser also keeps a push subscription and Humoo's service worker, which only displays notifications and stores nothing else.
  • better-auth.session_token: keeps you signed in and protects your session. It lasts up to 7 days and is renewed while you keep using Humoo; signing out deletes it.
Humoo does not use analytics, advertising, tracking or any other non-essential cookies, so it asks for no cookie consent. This policy will be updated, and your consent asked, before any of them is introduced.
Humoo does not track you across websites. It therefore does not change its behavior in response to browser "Do Not Track" signals: there is no tracking for them to turn off.

Notifications

Push notifications are off until you turn them on from Humoo and your device or browser allows them; you can turn them off at any time in Humoo or in your device's settings. Signing out stops push notifications on that device.
Push notifications show only a short, generic text (for example "New task assigned"), except reminders, which show the title you wrote; the details open in Humoo after you sign in.
Email notifications are sent only for the categories you choose, are never marketing, and can be changed from the link in each email.
Quiet hours hold push and email notifications, except urgent ones, until they end.

How long we keep information

Humoo keeps personal information and workspace content only as long as needed to provide and maintain the service, keep your account and workspaces, protect security and prevent abuse, maintain audit records and operational integrity, provide support and resolve disputes, and meet legal obligations. Notifications are deleted 90 days after they are sent, or 30 days after you archive them, whichever comes first; a device's push registration is deleted 30 days after it stops being used or is turned off.

Your privacy rights and account deletion

Every Humoo user, wherever they live, can ask to know and access the personal information Humoo holds about them, to correct it and to delete it. Humoo does not sell or share personal information for advertising, so there is nothing to opt out of, and Humoo will not treat you differently for exercising these rights.
You can change your name and preferences in your Profile and delete your account yourself in Profile → Security. For any other request or privacy question, write to santiagoca1202@gmail.com. Humoo may verify your identity before acting on a request and answers within 45 days.
Deleting your account is confirmed by a link Humoo emails to you. Once you confirm, Humoo immediately deletes your account and the personal information directly linked to it: your profile, sessions, connected applications, your private conversations, your notification settings, reminders and push registrations, and your acceptance records. If you are the only owner of a workspace, you must hand it over to another member or delete it before deleting your account.
An owner can delete a whole workspace from its settings. Humoo then immediately deletes everything in it, including its BEO documents, conversations and history, keeping only a record that the workspace was deleted, without its name or content.
Backups may keep deleted information for up to 90 days while they rotate or are overwritten. That information is not restored to the active service except for legitimate system recovery.
Humoo may keep the minimum information reasonably necessary for longer to meet legal obligations, protect security, prevent fraud and abuse, resolve disputes, enforce the Terms of Service and preserve the integrity of audit records.
Deleting your personal account does not delete business content you added to a workspace that other members keep using: that content belongs to the workspace and stays with it, no longer linked to your name or email.
Depending on where you live, you may have additional privacy rights under local law.

Security

Humoo uses reasonable technical measures to protect information, such as hashed passwords, protected sessions, access controlled by workspace permissions, BEO originals that open only through links that expire in 5 minutes, and audit records. No method of transmission or storage is completely secure, and Humoo cannot guarantee absolute security.
If a security incident affects your personal information, Humoo will notify you and the authorities as required by applicable state breach-notification laws, including North Carolina's Identity Theft Protection Act.

Where information is processed

Humoo is operated from the United States. If you use Humoo from another country, your information is transferred to and processed in the United States, and the information sent to OpenAI is processed under OpenAI's own terms.

Children

Humoo is not directed to anyone under 18 and may not be used by anyone under 18. If you believe that a person under 18 has provided personal information, contact santiagoca1202@gmail.com so it can be deleted.

Changes to this policy

When Humoo updates this policy, it publishes the new version on this page with its effective date and asks you to accept it before you continue using Humoo. The policy will be updated before Humoo introduces payments, analytics, non-essential cookies or new service providers that receive personal information.