Privacy Policy

Lightbulb Solutions (“Lightbulb,” “we,” “us,” or “our”) provides profitability and economic intelligence software for restaurant operators that sell through delivery marketplaces.

For questions about Lightbulb or this Privacy Policy, contact us at solutions.lightbulb@gmail.com.

This policy explains how we handle information we receive from delivery marketplaces, including Uber Eats, when a restaurant merchant authorizes us to access it, as well as information merchants provide directly to us.

This policy primarily covers business information about restaurant merchants and their marketplace storefronts. The consumer information Lightbulb does not seek to collect is described in Information we do not seek to collect below.

With a merchant’s authorisation, we may receive:

• Store and location information, including store and location identifiers, store names, and the merchant's own business address.
• Brand and storefront information, including brand names, the marketplaces a brand sells on, and marketplace-assigned external store identifiers.
• Marketplace reporting data for a store and reporting period, including gross sales, marketplace fees and commissions, marketing and promotion amounts, advertising spend where the marketplace reports it separately, platform adjustments, and net payout.
• Order-level transaction and operational records associated with merchant activity, where marketplace reports contain them.
• Order volume figures for a reporting period, including order counts and, where a marketplace reports it, an aggregate count of customers. These are totals only; they do not identify anyone.
• Merchant-provided operating information, such as cost and labour figures a merchant chooses to supply.
• Records identifying the source document a figure came from, so a merchant can trace any number back to the report it was derived from.

Marketplace reports may contain order-level transaction and operational records associated with merchant activity. Lightbulb does not seek to collect the following, including through the Uber Eats Reporting API:

• Consumer names, email addresses, phone numbers, or delivery addresses.
• Payment card numbers or any other payment instrument details. We do not process payments.

Merchants may provide marketplace reports and exports to us directly, or authorize Lightbulb to retrieve reports through supported marketplace reporting APIs.

Lightbulb may connect to the Uber Eats Reporting API to retrieve marketplace reports for restaurant locations that have authorized Lightbulb to access their reporting data. We use this information to provide marketplace performance, financial, and operational analytics to those merchants. This policy will be updated if the nature of the data we receive changes.

We use the information described above to:

• Calculate sales, marketplace costs, gross contribution, contribution margin, order volume, and average order value for a merchant's brands and storefronts.
• Present those figures to the merchant and help them understand what is driving their results.
• Reconcile calculated figures against the source reports they came from, so the merchant can verify them.
• Operate, maintain, troubleshoot, and improve the service.
• Develop features and products, and create and share information as described under Aggregated and derived information and Sharing and disclosure below.

We do not use it for advertising.

Subject to applicable law and applicable third-party marketplace or data-provider restrictions, we may create and use aggregated, de-identified, normalized, transformed, analytical, and derived information for operating and improving the service, analytics, benchmarking, developing features and products, understanding platform performance, supporting business operations, and creating data products.

We use third-party providers to operate the service. They process information on our behalf and for no other purpose:

• Supabase — database hosting and storage.
• Vercel — application hosting.

If we add or change a provider that processes merchant data, we will update this policy.

Within Lightbulb, access to merchant data is limited to personnel who need it to build, operate, and support the service.

We may disclose or make available information processed through the service to service providers, business partners, delivery marketplaces and other integration providers, affiliates, customers, other merchants, or other third parties where reasonably necessary to operate, support, secure, develop, improve, or provide the service and related products; to create or provide analytics, benchmarks, aggregated or de-identified information, or other data products; to support integrations and business operations; where required by law; or where otherwise permitted by applicable law, our agreements, and applicable third-party marketplace or data-provider restrictions.

Where appropriate, information shared for analytics, benchmarking, or data-product purposes may be aggregated, de-identified, transformed, or derived before disclosure. Any disclosure of identifiable merchant data or personal information remains subject to applicable law, contractual restrictions, applicable marketplace or data-provider restrictions, the merchant’s authorization where required, and this policy.

We use technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or loss. Credentials used to access our systems are not published in the application or source code accessible to users.

No method of transmission or storage is completely secure, and we do not claim any security certification or independent audit.

We retain information for as long as is reasonably necessary to provide the service and to meet legitimate operational and legal requirements.

A merchant may request deletion of their data by contacting us at the address below. We will act on those requests subject to applicable legal, security, backup, and operational requirements — for example, copies may persist in routine backups for a period after deletion from the live service.

A merchant may revoke Lightbulb’s authorisation to access their marketplace data at any time, through the marketplace that granted it. Revoking authorisation stops further access; it does not by itself delete information we have already received, which a merchant may request separately.

Merchants may also ask us what information we hold about their business, ask us to correct it, or request a copy of it.

We may update this policy as the service develops — including when our marketplace integrations or service providers change. When we do, we will revise the effective date at the top of this page.

Questions about this policy, or requests relating to your business’s data, can be sent to solutions.lightbulb@gmail.com.