Privacy Policy

1. Introduction

Last Updated: July 30, 2026

BentoAI ("we," "our," or "us") is operated by THE I RESEARCH TECHNOLOGIES LIMITED (trading as The I Research), a company registered in the United Kingdom with its place of business in London, United Kingdom. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Please read this Privacy Policy carefully. By accessing or using our service, you acknowledge that you have read, understood, and agree to be bound by all the terms outlined in this policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when using our service, including but not limited to:

  • Contact information (email address)
  • Account identifiers (username, display name)
  • Profile information (bio, profile picture)
  • Authentication data (email verification codes; optional passkeys / WebAuthn credentials)
  • Payment information processed by our payment provider (Stripe) — we do not store full card numbers
  • Communications you send to us

2.2 Usage Information

We automatically collect certain information when you visit, use, or navigate our platform, including:

  • Device information (IP address, browser type and version, operating system)
  • Usage patterns (pages visited, features used, generation activity for billing/credits)
  • Approximate location derived from IP (for security and analytics)
  • First-touch marketing attribution parameters (UTM tags) when you arrive from a campaign link, stored in your browser and written to your account only if you sign up

3. How We Use Your Information

We use the information we collect for various purposes, including to:

  • Provide, maintain, and improve our services
  • Authenticate you (email one-time codes and optional passkeys)
  • Process transactions and manage your account, credits, and subscriptions
  • Respond to your inquiries and provide customer support
  • Send transactional messages (such as sign-in codes) and, if you opt in, occasional product updates
  • Analyze traffic and acquisition (including Cloudflare Web Analytics and stored UTM attribution)
  • Protect against fraudulent or unauthorized activity
  • Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • With service providers who perform services on our behalf (for example email delivery, payments, hosting, and Cloudflare Web Analytics)
  • To comply with legal obligations or respond to legal requests
  • To protect our rights, privacy, safety, or property
  • In connection with a business transfer, merger, or acquisition
  • With your consent or at your direction

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

  • Access to your personal information
  • Correction of inaccurate or incomplete information (for example profile fields in the app)
  • Deletion of your account and associated data from Settings → Account (active paid subscriptions must be canceled first)
  • Opting out of product/marketing emails from Settings → Preferences (sign-in codes are always sent)
  • Restriction or objection to certain processing activities
  • Data portability
  • Withdrawal of consent where processing is based on consent

To exercise your rights, use the in-app settings where available, or contact us at [email protected].

7. Cookies, Local Storage, and Analytics

We use an HTTP-only session cookie to keep you signed in. We may store first-touch UTM attribution in your browser's local storage until you create an account. We use Cloudflare Web Analytics (a privacy-oriented traffic measurement script) when configured; we do not use advertising cookies for cross-site tracking. You can manage browser storage and cookie preferences through your browser settings.

8. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us to have it removed.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in compliance with applicable laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a revised "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact:

  • THE I RESEARCH TECHNOLOGIES LIMITED (trading as The I Research)
  • London, United Kingdom
  • [email protected]