Privacy Policy.

Atrani Reserve is run by one person, Tanay Patel. There is no company entity, no team, and no data department. If you have a question about your data, you are emailing the person who wrote the code: tanayp.sprezza@gmail.com.

Only what the product needs to work. Specifically:

• Account details — your email address, and a password that is hashed by Firebase Authentication. We never see your password. If you sign in with Google, we receive your name, email address and profile image from Google instead.
• Your business profile — business name, type, location, estimated monthly customers, average transaction value, named competitors, top sellers, underperformers, your stated biggest challenge, and any notes you add.
• Generated reports — the reports the AI produces for you, and a snapshot of the inputs used to produce each one.
• Contact form submissions — your name, email address, business name and message, if you use the form on the homepage.
• Basic usage analytics — page views and referrers, collected without cookies and without any cross-site identifier.

We do not ask for, and do not want, payment card details, customer lists, employee records, or anything else not listed above.

This is the part most policies bury, so it is near the top here. When you generate a report, the contents of your business profile are sent to Google's Gemini API so the model can write your report. That means the business details you enter leave our systems and are processed by Google under their API terms.

If there is something you would not want sent to a third-party AI provider, do not put it in your profile or notes.

We use a small number of providers. Each one only receives what it needs to do its job.

• Google (Firebase) — authentication and database storage for your account, profile and reports.
• Google (Gemini API) — generates your report from your business profile, as described above.
• Vercel — hosts the site, keeps short-lived server logs, and provides the cookieless analytics.
• Resend — delivers contact form submissions to our inbox.

We do not sell your data, rent it, or share it with advertisers. There is no ad network on this site.

One cookie, and it is strictly necessary: a session cookie that keeps you signed in after you log in. Without it the dashboard cannot tell who you are.

We do not use tracking or advertising cookies. Our analytics are cookieless and do not build a profile of you across sites. That is why you are not being shown a cookie consent banner — under the ePrivacy rules, a strictly necessary sign-in cookie does not require one, and we have nothing else to ask you about.

Your account, profile and reports stay until you ask for them to be deleted. Contact form emails stay in our inbox. Server logs are short-lived and handled by Vercel.

You can ask for a copy of your data, ask for it to be corrected, or ask for the whole account to be deleted. Email tanayp.sprezza@gmail.com and it will be handled by hand — there is no automated deletion tool yet, which means it may take a few days rather than a few seconds.

Depending on where you live, you may have additional rights under the GDPR, UK GDPR or CCPA. Exercise them the same way: email us.

Traffic is served over HTTPS, passwords are hashed by Firebase, and database access is restricted per account so one user cannot read another's data. That said, this is a pre-launch product built by one person — it has not had an external security audit. Treat it accordingly.

This is a tool for business owners. It is not intended for anyone under 16, and we do not knowingly collect their data.

If this policy changes in a way that matters, the date at the top changes and material changes will be communicated to account holders by email.

Questions, deletion requests, or anything else: tanayp.sprezza@gmail.com. See also our Terms of Service.