Privacy Policy

Effective date: 3 July 2026

This Privacy Policy explains how BetterSuite handles personal data. It covers the personal data we control: information about the businesses that sign up to use BetterSuite ("operators") and about visitors to our websites.

Two different roles. BetterSuite is white-label software. When an operator runs a branded application on our platform, the operator decides how their end users' data is used — the operator is the data controller for that data, and BetterSuite acts as a processor on the operator's behalf under our Data Processing Agreement. If you are an end user (for example, a rider, driver, shopper, or buyer of a business that uses BetterSuite), please refer to that business's own privacy notice; this policy describes only the data for which BetterSuite is itself responsible.

1. Who is responsible

The controller of the personal data described here is Lume Agency Inc., trading as BetterSuite, registered at 7 Tigranyan Street, Yerevan, Armenia. For any privacy question or request, contact us at [email protected].

2. What we collect

When you sign up and use BetterSuite as an operator:

• Account and contact data — name, business name, email address, phone number, and login credentials (including passkeys and, if you use social sign-in, your Google or Apple account identifier).
• Billing data — subscription plan, billing contact, and payment details. Card details are collected and stored by our payment provider, Stripe; we receive limited information such as the card type and last four digits.
• Configuration and content — the settings, branding, catalogues, and other content you add to run your applications.
• Usage and device data — how you interact with our dashboard and websites, IP address, browser and device information, and diagnostic logs.

When you visit our websites:

• Cookies and similar technologies (see our Cookie Policy), and information from marketing links such as a Google Ads click identifier.
• Information you submit through forms, such as a contact or demo request.

3. How we use personal data

We use personal data to:

• provide, operate, secure, and support the Service;
• set up and manage your account and process billing through Stripe;
• respond to enquiries and provide customer support;
• monitor, debug, and improve the platform, including error monitoring;
• measure and improve our marketing, and understand how our websites are used;
• send service messages and, where permitted, relevant product updates; and
• comply with legal obligations and enforce our Terms of Service.

Legal bases (where the GDPR or similar law applies). We rely on: performance of our contract with you; our legitimate interests in running and improving the Service and marketing it responsibly; your consent where required (for example, certain cookies); and compliance with legal obligations.

4. Cookies and analytics

Our websites use cookies and similar technologies for essential functions (such as keeping you signed in) and for analytics and marketing measurement, including Google Analytics, Google Tag Manager, Google Ads conversion measurement, and error monitoring and session diagnostics through Sentry. You can control cookies through your browser and the options described in our Cookie Policy.

5. Who we share data with

We share personal data with service providers ("subprocessors") that help us run the Service, and only as needed for the purposes above. Our subprocessors include:

A subprocessor list specific to the data we process on operators' behalf is maintained in our Data Processing Agreement.

We may also disclose personal data where required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets. We do not sell your personal data.

6. International transfers

We host the Service in the European Union (Hetzner, Finland). Some of our subprocessors are located outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

7. How long we keep data

We keep personal data for as long as your account is active and as needed to provide the Service, then for as long as required to meet legal, accounting, tax, or dispute-resolution obligations, after which we delete or anonymise it. Retention periods vary by data type and legal requirement.

8. How we protect data

We use technical and organisational measures appropriate to the risk, including encryption of data in transit, encryption of sensitive credentials at rest, access controls, and hosting with a reputable EU provider. No system can be guaranteed completely secure; we work to identify and address risks on an ongoing basis. If a personal-data breach affects you, we will notify you and any regulator as required by law.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal data, to object to certain processing, to data portability, and to withdraw consent. To exercise a right, email [email protected]. You also have the right to complain to your local data-protection authority.

If your request concerns data processed by an operator's application (where you are that business's end user), we will refer you to, or act on the instructions of, that operator as the controller.

10. Children

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children through our own websites.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and, if the change is material, provide additional notice. The "Effective date" above shows when it last changed.

12. Contact

For any privacy question or request, contact [email protected].