Privacy Policy

1. Scope and operator

This Privacy Policy explains how ALWAYSBECOOKING LLP (“alwaysbecooking”, “we”, “us”, or “our”) handles personal data when you use alwaysbecooking.space, any service hosted on an alwaysbecooking.space subdomain, our shared account system, or another alwaysbecooking service that links to this policy (together, the “Services”).

We operate the Services from:

2. Data we collect

Information from Google Sign-In

When you choose Google Sign-In, Google provides the basic account information needed to identify you: your name, email address, profile image, email-verification status, and a Google account identifier. We also process OAuth identifiers and tokens where Google supplies them so that we can complete and secure sign-in.

Account and contact information

We create an internal user ID and may store your mobile number, phone verification status, username, account role, working-group memberships, and whether your account is active. When phone verification is required, you provide a mobile number and a short-lived one-time code.

Service activity and content

Depending on the Service you use, we may process bookings, attendance or calendar information, workspace or community activity, files you upload, messages you send us, and records created while administering the Services. Some Services may clearly identify particular content or files as public before you submit them.

Session and technical information

Our account system processes session tokens, cookie identifiers, IP addresses, browser or device user-agent information, sign-in and expiry times, request paths, response status, and operational diagnostics. We use this information to run, secure, and troubleshoot the Services.

Browser storage

We use an essential authentication cookie to keep you signed in. Our sites may also use local or session storage for settings such as colour theme, interface state, and a limited sign-in-state hint. We do not use these technologies for behavioural advertising.

3. How we use data

We use personal data to:

• create and authenticate one account across connected Services;
• verify a mobile number and complete onboarding;
• provide bookings, memberships, working groups, and other requested features;
• communicate about your account, requests, visits, or community activity;
• protect users, physical spaces, accounts, and systems from misuse or security threats;
• operate, maintain, debug, and improve the Services; and
• meet legal obligations and resolve disputes.

We do not sell personal data, use it for third-party advertising, or use it to train artificial-intelligence models.

4. Google user data

Google Sign-In is used to establish your identity and give you access to a shared alwaysbecooking account. Our current sign-in configuration asks only for basic identity information. It does not request access to your Gmail messages, Google Drive files, Google Calendar, contacts, or similar Google products.

We use Google user data only for authentication, account security, and displaying your account identity within the Services. We do not transfer Google user data for advertising, sell it, or use it to train AI models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

5. How data is shared

We disclose personal data only where needed:

• Service providers. Google supports sign-in; Twilio supports SMS phone verification; and infrastructure providers support hosting, databases, networking, and file storage. They process data on our behalf or under their own applicable terms.
• Authorised team members. People administering alwaysbecooking may access information needed to manage accounts, bookings, groups, safety, and support.
• Other users or the public. We share information when you direct us to do so or when a feature is clearly public. Public uploads may be available to anyone with their URL.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, protect a person or our spaces, investigate misuse, or defend legal rights.
• Organisational changes. Data may be transferred as part of a merger, restructuring, financing, or transfer of the Services, subject to applicable law and continued protection.

6. Retention and deletion

We retain personal data only for as long as it is needed for the purposes described above. Authentication sessions expire or are revoked, and one-time verification codes are short-lived.

An account is inactive when it has no sign-in or meaningful Service activity for 12 consecutive months. After one year of inactivity, we delete or irreversibly anonymise the account and associated personal data. Deactivating an account immediately ends access and revokes its sessions; its remaining data follows the same one-year inactivity schedule.

We may retain limited records for longer where reasonably required by law, accounting obligations, fraud prevention, safety, dispute resolution, or the integrity of shared community records. Where practical, we remove or anonymise personal identifiers in records that must remain. Residual copies may persist temporarily in protected backups until their normal rotation completes.

You may request deletion before the inactivity period ends by emailing wealwaysbecooking@gmail.com. We may need to verify your identity before completing the request.

7. Your choices and rights

Subject to applicable law, you may ask to access, correct, or delete your personal data, withdraw consent, or raise a concern about how it is used. You may deactivate an eligible account from your profile; deactivation is not the same as immediate deletion.

You can disconnect alwaysbecooking from your Google account through your Google Account connections. Disconnecting Google does not by itself delete information already held by alwaysbecooking, so contact us if you also want deletion.

8. Children and young people

The Services are available to people aged 10 and above. Anyone under 18 must use the Services with the consent and supervision of a parent or legal guardian. A parent or guardian may contact us to review, correct, or request deletion of a young person’s data. We may restrict or close an account if the required consent is not available.

9. Security and international processing

We use reasonable administrative and technical safeguards designed to protect personal data, including access controls, encrypted HTTPS connections, expiring sessions, and restricted administrative access. No system is completely secure, so we cannot guarantee absolute security.

Some service providers may process data outside Assam or India. When that occurs, we use the provider for the purposes described in this policy and take reasonable steps to ensure the information remains protected.

10. Changes and contact

We may update this policy when the Services or our data practices change. We will publish the revised policy here and update its effective date. If a change materially affects how existing personal data is used, we will provide additional notice where reasonably possible.

Questions, requests, and privacy concerns can be sent to wealwaysbecooking@gmail.com. Please include enough detail for us to understand and respond to your request.