Legal
Privacy policy
How PratoAI handles restaurant data, dish photos and visits to the AR menu.
Who we are
PratoAI is a Gestão Bem product (CNPJ 24.490.987/0001-38). We provide an augmented-reality menu for restaurants: guests see the dish in 3D on the table, in the browser, with no app to install.
Data we collect
On the restaurant account: email, password, menu name and URL, dishes (name, price, description), dish photos and the 3D models built from them, plan status and remaining credits. We do not ask the owner for a tax ID beyond what checkout requires.
Guests who only open the menu
Diners do not create an account. We may record anonymous events (dish opens, AR taps) so the restaurant can see metrics. We do not ask visitors for a name, phone number or payment.
Why we use it
To run the product, build the 3D model from photos, serve the public menu, bill the subscription, meet legal duties and talk to you about the account. We do not sell personal data.
Payments
Subscription charges go through PayFlow (pay.gestaobem.com). PratoAI does not store card numbers.
Sharing
We use providers to host the app, store files (photos and 3D models) and reconstruct the dish in 3D. They see only what that job needs, under contract. We also share what the law requires.
Your rights (LGPD)
We process personal data under Brazil’s General Data Protection Law (LGPD). You may request confirmation of processing, access, correction, deletion, portability and information about sharing. The restaurant is responsible for the photos it uploads — send the dish, not guest faces without a legal basis.
Contact
For privacy questions, use PratoAI WhatsApp or the email on your account. This policy may change; the date at the top is the current version.