Foodime

PRIVACY POLICY + DPA + AI COMPLIANCE

Foodime
Last updated: December 28, 2025

1. Roles Under GDPR

• Customer: Data Controller
• Foodime: Data Processor

Foodime processes personal data solely on documented instructions from the customer.

2. Categories of Data Processed

Foodime may process:
• Business contact details
• Call metadata (timestamps, duration)
• Audio recordings and transcripts (if enabled)
• Order-related metadata. No data is sold or used for advertising.

3. AI Processing & Automation

Foodime uses AI models to:
• Transcribe speech
• Interpret orders
• Route information to systems AI processing is used only to deliver the contracted service.

Foodime does not use customer data to train generalized AI models unless explicitly agreed.

4. Customer Responsibilities (GDPR & AI)

The customer is solely responsible for:
• Informing end users of call recording or AI use • Obtaining any required consent
• Lawful basis for processing
• Compliance with national call recording laws

5. Data Retention

Data is retained only for:

• Service delivery
• Legal and contractual obligations
• Quality assurance (limited retention)

6. Security Measures

Foodime implements appropriate:

• Access controls
• Encryption
• Logging and monitoring
• Incident response procedures

7. Subprocessors

Foodime may use subprocessors (hosting, AI, telecom).
An updated list is available upon request.

8. EU AI Act – Compliance Statement

Foodime classifies its AI systems as limited-risk AI systems under the EU AI Act. Foodime

• Provides transparency regarding AI use
• Does not perform biometric identification
• Does not make legally binding decisions
• Keeps a human-in-the-loop model The customer remains responsible for operational decisions.

9. Data Subject Rights

Requests regarding personal data may be sent to:
📧 privacy@foodime.com

10. Changes

These policies may be updated periodically.