Privacy Policy

1. Introduction

Last Updated: July 30, 2026

BentoAI ("we," "our," or "us") is operated by THE I RESEARCH TECHNOLOGIES LIMITED (trading as The I Research), a company registered in the United Kingdom with its place of business in London, United Kingdom. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Please read this Privacy Policy carefully. By accessing or using our service, you acknowledge that you have read, understood, and agree to be bound by all the terms outlined in this policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when using our service, including but not limited to:

  • Contact information (email address)
  • Account identifiers (username, display name)
  • Profile information (bio, profile picture)
  • Authentication data (email verification codes; optional passkeys / WebAuthn credentials)
  • Payment information processed by our payment provider (Stripe) — we do not store full card numbers
  • Communications you send to us

2.2 Usage Information

We automatically collect certain information when you visit, use, or navigate our platform, including:

  • Device information (IP address, browser type and version, operating system)
  • Usage patterns (pages visited, features used, generation activity for billing and usage limits)
  • Approximate location derived from IP (for security and analytics)
  • First-touch attribution: marketing parameters (UTM tags or ad click IDs) when you arrive from a campaign link, or otherwise the domain of the site that referred you (for example google.com — never the full address), stored in your browser and written to your account only if you sign up

3. How We Use Your Information

We use the information we collect for various purposes, including to:

  • Provide, maintain, and improve our services
  • Authenticate you (email one-time codes and optional passkeys)
  • Process transactions and manage your account, usage, and subscriptions
  • Respond to your inquiries and provide customer support
  • Send transactional messages (such as sign-in codes) and, if you opt in, occasional product updates
  • Analyze traffic and acquisition (including Cloudflare Web Analytics and stored UTM attribution)
  • Protect against fraudulent or unauthorized activity
  • Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • With service providers who perform services on our behalf (for example email delivery, payments, hosting, and Cloudflare Web Analytics)
  • To comply with legal obligations or respond to legal requests
  • To protect our rights, privacy, safety, or property
  • In connection with a business transfer, merger, or acquisition
  • With your consent or at your direction

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

  • Access to your personal information
  • Correction of inaccurate or incomplete information (for example profile fields in the app)
  • Deletion of your account and associated data from Settings → Account (active paid subscriptions must be canceled first)
  • Opting out of product/marketing emails from Settings → Preferences (sign-in codes are always sent)
  • Restriction or objection to certain processing activities
  • Data portability
  • Withdrawal of consent where processing is based on consent

To exercise your rights, use the in-app settings where available, or contact us at jl@bentoai.app.

7. Cookies, Local Storage, and Analytics

We use an HTTP-only session cookie to keep you signed in. For each active session we store the browser and operating system, the IP address at sign-in, and the last time it was used, so that you can see where you are signed in and log out devices you don't recognise (Settings → Security). This information is deleted when the session ends or expires (7 days after last use). Separately, so that we can email you when your account is signed in to from a device we haven't seen before, we keep a record of which browser and operating system combinations you have signed in from and when you last used each; a combination not used for 180 days is treated as new again. These records are deleted when you delete your account. We may store first-touch attribution (UTM tags, or the referring site's domain) in your browser's local storage until you create an account. We use Cloudflare Web Analytics (a privacy-oriented traffic measurement script) when configured; we do not use advertising cookies for cross-site tracking. You can manage browser storage and cookie preferences through your browser settings.

8. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us to have it removed.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in compliance with applicable laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a revised "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact:

  • THE I RESEARCH TECHNOLOGIES LIMITED (trading as The I Research)
  • London, United Kingdom
  • jl@bentoai.app