This policy covers F&BSG’s digital services and its WhatsApp, Facebook and Instagram integrations. Features may be in testing or unavailable in your location. A privacy page does not mean a feature is open to everyone.
1. Who we are and how to contact us
F&BSG provides a self-service platform for food and beverage business opportunities, buyer briefs, matching, valuation, verification and document workflows. Contact contact@fnbsg.com about your information, this policy or a privacy complaint.
2. Information we process
- Accounts and business requests: your email, profile, country, language, roles, brief or listing details, budgets, chosen currency, preferences and consent records.
- Transactions and service records: payment references and status, reports, verification evidence, agreement details, signatures, signing records, messages and relevant audit events. Stripe processes card payments; F&BSG does not store full card numbers.
- WhatsApp: your phone number and WhatsApp identifier, account-linking information, text you send to the bot, selected language, private draft answers, message identifiers, timestamps and reply/delivery information.
- Authorized Facebook and Instagram connections: connected Page or business-account identifiers, names, usernames, access tokens and content you authorize us to manage. These connections are for authorized business administrators.
- Technical information: IP address, browser/device information, security events and essential session information needed to operate and protect the service.
3. Why we use it
We use information to authenticate accounts, provide requested services, save and review drafts, suggest suitable opportunities, deliver documents and service messages, prevent abuse, resolve support requests, maintain audit records and meet applicable legal obligations. Where consent is required, we request it for the relevant purpose. You can withdraw consent, although a service that needs that information may then be unavailable.
4. WhatsApp linking and private drafts
When available, registered members can link a WhatsApp number through a short-lived challenge started in their signed-in F&BSG account. The bot asks questions and saves a private buyer-brief draft in that account. You must review and submit it on the website before it enters the normal brief or matching workflow. Sending a WhatsApp message does not publish a listing or brief.
The current assistant collects text only. It does not download files or voice notes, import your previous chat history, read your other conversations or access your phone’s address book. Please do not send passwords, payment-card details, identity documents or unnecessary third-party personal information to the bot.
Prompts are available in 18 languages. Answers remain in their original language. The draft-collection flow does not send private messages to Google Translate or an AI model. Type STOP to disconnect an active bot link, or use the website’s disconnect control. Disconnecting does not delete an existing private draft; see the deletion instructions.
5. AI matching and translations
Where you separately choose AI-assisted matching, selected business descriptions, preferences, must-haves and relevant commercial facts are sent to OpenAI to help assess fit and explain suggestions. The matching request excludes account identifiers, contact fields, verification evidence and uploaded files, with checks for obvious contact information in text. Free-text descriptions can still contain identifying details, so include only what is needed. AI suggestions can be wrong and do not guarantee a successful transaction.
Public website text may be translated with Google. That permission does not authorize sending private customer records, messages, evidence or credentials for translation. Any separate private-content translation feature needs its own disclosed handling and authorization.
6. Who receives information
Access is limited to authorized staff and providers supporting the relevant service, and to other participants when the service or your choices require it. Private evidence, account contacts and draft messages are not public listings. Matching introductions and shared agreements follow the relevant access and consent controls.
- Meta/WhatsApp: transports bot messages and supplies authorized Facebook/Instagram integrations, under its own terms and privacy policies.
- Cloudflare and Supabase: hosting, security, authentication, databases and private storage.
- Resend: transactional email delivery.
- Stripe: payments and payment-status processing.
- Cloudmersive: malware scanning of submitted files where uploads are enabled.
- OpenAI: separately authorized AI-assisted matching.
- Google: translation of public website text as described above.
- TradingView: embedded market-price displays; loading a display connects your browser to that provider.
We may disclose necessary information to comply with a lawful request, protect accounts and services, or address fraud and disputes. F&BSG does not sell Meta platform data or use it for unrelated advertising. Provider policies also apply to their own processing; this policy does not promise that their retention practices are identical to ours.
7. Cookies and international processing
Essential cookies and similar storage maintain sign-in, language choices and security. Third-party displays or services can receive browser connection information when used. Our providers may process information outside your country. Transfers are subject to applicable requirements and appropriate safeguards; contact us for questions about a particular service or transfer.
8. Security and retention
We use access controls, private storage, encrypted connections, protected credentials and audit records. No system can guarantee absolute security. Access tokens are kept server-side; saved social-account tokens are encrypted.
We retain information only while needed for the service, security, disputes, required records or applicable law. A WhatsApp linking challenge expires after 10 minutes and a current account link expires after 30 days unless renewed. Expiry prevents use of that link; it is not an automatic promise that every related record has been erased. Private drafts remain until removed through account handling or a verified deletion request. Relevant payment, agreement, security or dispute records may need to be retained longer.
Deletion requests are reviewed and carried out manually where an automated control is unavailable. We explain any information that must be retained and why. Backup copies may remain until the applicable backup cycle completes; they are restricted and are not used to restore a deleted account into normal service.
9. Your choices and rights
You can ask to access or correct your information, withdraw consent, disconnect an integration, or delete eligible information. Other rights may apply depending on your location, including objection, restriction or portability. Contact us first so we can verify ownership and respond securely. See how to request deletion. We may need to retain limited information where permitted or required by law and will explain a relevant refusal or limitation.
10. Adults, changes and other people’s information
F&BSG’s business services are intended for adults aged 18 or over. Submit information about other people only when you have the authority to do so. We update this policy when our handling changes and provide additional notice or obtain consent where required.