Privacy

How Foambyte LLC collects, uses, shares, retains, and protects personal information when you use the Foambyte website and web-based brewing software, and the privacy rights available to users in the United States, Canada, and Latin America.

Last Updated: September 25, 2026.

1. Introduction

This Privacy Policy explains how Foambyte LLC (“Foambyte,” “we,” “us,” or “our”) collects, uses, processes, and discloses information, including personal information, in connection with your access to and use of our website, web application, and related services (collectively, the “Service”).

Foambyte LLC is the controller (also called the “responsible party” or controlador under some laws) of the personal information processed through the Service.

The Service is offered to and directed at users in the United States, Canada, and Latin America.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you provide directly to us, including:

  • Name, email address, and other contact information
  • Account credentials and authentication details
  • Payment and billing information, when paid plans are offered: payments are processed by Paddle (paddle.com) as our Merchant of Record. Foambyte never receives or stores full card numbers. We receive only limited payment details from Paddle (such as the last 4 digits, expiration date, and card type) so we can show you your payment method, plus your subscription status, plan, and billing country.
  • Communications with us, including support requests and feedback
  • Content you submit to the Service, such as recipes, production data, notes, or configuration settings
  • Any other information you choose to provide

2.2 Information We Collect Automatically

When you access or use the Service, we may automatically collect certain information, including:

  • Log data (such as IP address, browser type, operating system, access times, and pages viewed)
  • Device and usage information
  • Cookies and similar technologies (described in Section 3, Cookie and Local Storage Policy)
  • Interaction data related to features, performance, and usage patterns

The Foambyte marketing pages you are currently viewing do not currently use first-party analytics cookies or advertising / tracking cookies. The marketing site stores one necessary consent record in your browser’s local storage. This record contains your category choices, the consent-policy version, and the time of your choice; it does not contain your name, email address, or other direct identifiers. It remains until you change your choices, clear the site’s browser data, or a consent-policy version change requires a new choice.

The marketing site uses the following categories:

  • Necessary: stores your privacy choice and supports essential site functionality. This category is always enabled.
  • Preferences: permits storage of non-essential preferences. No service currently uses this category.
  • Analytics: permits anonymous or aggregate measurement if enabled later. No analytics service is currently active on the marketing site.
  • Marketing: permits advertising, remarketing, and promotional tracking. No marketing service is currently active on the marketing site.
  • External media: permits YouTube videos and other externally hosted media to load. YouTube content is not requested until you allow this category and choose to load a video. See YouTube’s privacy information and how Google uses cookies.
  • External services: permits Calendly and similar embedded services to load. The Calendly scheduling script and widget are not requested until you allow this category. See Calendly’s privacy policy and cookie notice.

When you allow and load Calendly or YouTube, those providers may process technical information such as your IP address, browser details, and interactions according to their own policies. You can select Privacy choices in the site footer at any time to review, change, or withdraw your choices. Withdrawing a category prevents the related embed from loading again, but it cannot undo information already received by a provider while that service was enabled. You can also use your browser settings to control or clear cookies, local storage, and other site data. The Foambyte web application and related tools may separately use cookies that are strictly necessary for authentication, security, and core Service functionality.

4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Service
  • Create and manage user accounts
  • Process payments and transactions
  • Respond to inquiries, support requests, and feedback
  • Communicate with you about features, products, or events (you may opt out at any time)
  • Monitor usage, performance, and trends
  • Detect, prevent, and address technical or security issues
  • Comply with legal and regulatory obligations
  • Create de-identified and aggregated data (for example, for benchmarks and product improvement) that does not identify you or your business

We do not use identifiable customer recipes or production data to train third-party AI models.

Service and transactional messages, such as security alerts, billing notices, and legal notices, are part of providing the Service and cannot be opted out of while you have an account. You can opt out of marketing messages at any time. We send marketing emails only with your consent where the law requires it (including under Canada’s Anti-Spam Legislation, CASL), and every marketing email identifies Foambyte and includes a working unsubscribe link.

Some privacy laws, such as Brazil’s General Data Protection Law (LGPD), Canadian privacy laws, and other laws in the countries we serve, require us to have a legal basis or justification for processing personal information. Depending on the activity, we rely on:

  • Performance of a contract: to provide the Service you signed up for, manage your account, and process transactions.
  • Legitimate interests: to secure the Service, prevent fraud and abuse, improve our products, and communicate with business contacts, where those interests are not overridden by your rights.
  • Consent: for optional cookie and local storage categories and embedded services (see Section 3), and for marketing communications where consent is required. You may withdraw consent at any time.
  • Compliance with legal obligations: to meet tax, accounting, and other legal requirements.

6. Information Sharing and Disclosure

We may share your information in the following circumstances:

  • With third-party service providers who perform services on our behalf
  • To comply with legal obligations or lawful requests from authorities
  • In connection with a merger, acquisition, financing, or sale of assets
  • With your consent or at your direction

We do not sell your personal information to third parties.

6.1 Service Providers We Use

We use the following service providers to operate the Service:

We also use providers in the following categories:

On request, we will provide a list of the specific third parties to whom we have disclosed your personal data, as required by the Minnesota Consumer Data Privacy Act. To make this request, contact our Privacy Officer as described in Section 12.

7. Public and Shared Content

If you choose to share or publish recipes, profile information, or other content through the Service, that content may be visible to other users or the public. We cannot control how others use, copy, or redistribute content after you share it, so please consider this before making content public.

8. Business Use of the Service

The Service is currently designed for individual accounts. Each account belongs to one person, who may use the Service for personal brewing or on behalf of a brewery or other business. The Service does not currently offer team, multi-user, or organization accounts.

If you use the Service for a business, the business’s account information (such as the account holder’s name, email address, and billing details) is handled as described in this Privacy Policy. Please avoid including other people’s personal information (for example, the names or contact details of employees, customers, or suppliers) in recipes, notes, or other content unless you have the right to do so. You are responsible for any such information you choose to include.

If we introduce team or multi-user features in the future, we will update this Privacy Policy to explain how we handle information about team members.

9. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. In particular:

  • Account data is kept while your account is active.
  • After your account is deleted, your personal information and User Content are deleted or de-identified within 30 days, except as described below.
  • Billing and tax records are kept for as long as required by law, and may be held by Paddle and/or Foambyte.
  • De-identified and aggregated data that does not identify you or your business may be kept.

10. Account Deletion

You can delete your account through the account settings in the app, if that option is available to you. Otherwise, email info@foambyte.com from the email address associated with your account and ask us to delete it. If you would like a copy of your data before deletion, say so in the same email and we will provide it. Self-service data export and in-app account deletion are currently in development.

11. Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a security incident involving your personal information creates a real risk of significant harm, we will notify affected users and the relevant authorities as required by applicable law (for example, U.S. state breach notification laws, Canada’s PIPEDA and Quebec’s Law 25, and Brazil’s LGPD).

12. Privacy Officer and Contact Channel

Foambyte has designated a Privacy Officer. The Privacy Officer is the person in charge of the protection of personal information (under Quebec’s Law 25) and the point of contact for individuals and data protection authorities (the encarregado and communication channel under Brazil’s LGPD).

You can contact the Privacy Officer by emailing info@foambyte.com with “Privacy” in the subject line, or by mail at the postal address in Section 21 (Contact Us).

13. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including the right to:

  • Access your personal information
  • Correct or update inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to or restrict certain processing activities
  • Withdraw consent where processing is based on consent
  • Opt out of marketing communications
  • Control cookies and tracking technologies through your browser settings

13.1 How to Submit a Request

  • Submitting a request: email our Privacy Officer at info@foambyte.com with “Privacy” in the subject line and describe your request.
  • Identity verification: to protect your information, we may need to verify your identity before acting on a request, for example by asking you to confirm that you control the email address associated with your account.
  • Authorized agents: you may use an authorized agent to submit a request on your behalf. We may require the agent to provide your written permission and may still ask you to verify your identity.
  • Response timing: we will respond within the period required by applicable law.
  • How to appeal: if we deny your request, you may appeal by replying to our response with “Appeal” in the subject line. We will respond to your appeal within the period required by law. If your appeal is denied, you may contact your state Attorney General or the data protection authority listed for your country in Section 17.
  • Universal opt-out signals: we honor Global Privacy Control (GPC) and similar universal opt-out signals where required by law. Because we do not sell personal information, share it for cross-context behavioral advertising, or engage in targeted advertising, these signals currently have no additional effect.

14. Children’s Privacy

The Service is intended only for users who are 18 or older (or the legal drinking age where they live, if that age is higher). We do not knowingly collect personal information from anyone under 18. If you believe we have collected such information, please contact us.

15. International Data Transfers

Your personal information is stored and processed primarily in the United States, and our primary hosting region is the United States. If you live in Canada or Latin America, your information will be transferred to and processed in the United States and in other countries where our service providers operate, which may have data protection laws different from those of your country.

We use contractual and organizational safeguards with our service providers to protect transferred information as required by applicable law, including Quebec’s Law 25 transfer assessments, the LGPD’s international transfer rules, and the transfer requirements of Argentina, Colombia, Mexico, Chile, and Peru.

16. U.S. State Privacy Rights

Depending on the U.S. state in which you reside, you may have additional privacy rights under state law. The rights described below generally apply only to identified residents of the relevant state, and only to the extent permitted by law. We do not sell personal information, and we do not engage in cross-context behavioral advertising or “targeted advertising” as defined under those laws.

16.1 California (CCPA and CPRA)

California residents have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

  • The right to know what personal information we collect, use, disclose, or sell
  • The right to access and obtain a copy of their personal information
  • The right to correct inaccurate personal information
  • The right to request deletion of personal information
  • The right to opt out of the sale or sharing of personal information (we do not sell or share personal information as defined by California law)
  • The right to limit the use of sensitive personal information
  • The right not to receive discriminatory treatment for exercising privacy rights

Calendly’s embedded scheduling widget may collect information that is subject to the CCPA/CPRA; you may exercise rights regarding such information directly with Calendly, as provided in Calendly’s privacy policy at calendly.com/privacy. If our privacy practices change so that we begin to sell or share personal information for cross-context behavioral advertising, we will provide a clear “Do Not Sell or Share My Personal Information” link at that time.

16.2 Other U.S. State Laws

Residents of other U.S. states may have similar rights under their state’s privacy law, which may include:

  • Virginia (Virginia Consumer Data Protection Act — VCDPA)
  • Colorado (Colorado Privacy Act — CPA)
  • Connecticut (Connecticut Data Privacy Act — CTDPA)
  • Utah (Utah Consumer Privacy Act — UCPA)
  • Texas (Texas Data Privacy and Security Act — TDPSA)
  • Oregon (Oregon Consumer Privacy Act — OCPA)
  • Florida (Florida Digital Bill of Rights — FDBR)
  • Montana (Montana Consumer Data Privacy Act — MCDPA)
  • Iowa (Iowa Consumer Data Protection Act — ICDPA)
  • Delaware (Delaware Personal Data Privacy Act — DPDPA)
  • Nebraska (Nebraska Data Privacy Act — NDPA)
  • New Hampshire (New Hampshire Privacy Act — NHPA)
  • New Jersey (New Jersey Data Privacy Act — NJDPA)
  • New York (New York SHIELD Act and forthcoming NY Privacy Act)
  • Minnesota (Minnesota Consumer Data Privacy Act — MCDPA)
  • Tennessee (Tennessee Information Protection Act — TIPA)
  • Indiana (Indiana Consumer Data Protection Act — INCDPA)
  • Kentucky (Kentucky Consumer Data Protection Act — KCDPA)
  • Maryland (Maryland Online Data Privacy Act — MODPA)
  • Rhode Island (Rhode Island Data Transparency and Privacy Protection Act) and other state laws as they become effective

Under these state laws, eligible consumers generally have the right to:

  • Confirm whether we are processing their personal data and access such data
  • Correct inaccuracies in their personal data
  • Delete their personal data, subject to certain exceptions
  • Obtain a copy of the personal data they previously provided to us (data portability)
  • Opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects
  • Opt out of the processing of sensitive data for purposes beyond providing the Service
  • Appeal a decision we make with respect to a privacy rights request

Because we do not sell personal information, do not engage in cross-context behavioral advertising, and do not engage in profiling that produces legal or similarly significant effects, the opt-out rights described above generally do not apply to our current practices. A “Do Not Sell or Share My Personal Information” link or other opt-out mechanism will be provided if and when any of those activities become applicable.

To exercise any of these rights, please contact our Privacy Officer as described in Section 12 and follow the request and appeal process in Section 13.1. We will respond within the timeframes required by the applicable state law (typically 45 days), and we will not discriminate against you for exercising your rights.

17. Canada and Latin America Privacy Rights

Depending on where you live, you may have the rights described below, subject to the conditions and exceptions in the applicable law. To exercise them, contact our Privacy Officer as described in Section 12 and follow the process in Section 13.1.

17.1 Canada (PIPEDA, Quebec Law 25, and Applicable Provincial Laws)

  • You may request access to and correction of your personal information, and you may withdraw your consent, subject to legal or contractual restrictions.
  • If you live in Quebec, you may also request that your personal information be provided to you or to another organization in a structured, commonly used technological format (data portability), and you have the right to be informed about decisions based exclusively on automated processing. We do not currently make decisions based exclusively on automated processing.
  • You may file a complaint with the Office of the Privacy Commissioner of Canada or the applicable provincial regulator, such as the Commission d’accès à l’information du Québec.

17.2 Brazil (LGPD)

Under Article 18 of the LGPD, you have the right to:

  • Confirmation that we process your personal data
  • Access to your personal data
  • Correction of incomplete, inaccurate, or outdated data
  • Anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of the LGPD
  • Portability of your data to another service provider
  • Deletion of personal data processed with your consent
  • Information about the public and private entities with which we share your data
  • Information about the option to refuse consent and the consequences of refusing
  • Withdrawal of consent

You also have the right to petition the National Data Protection Authority (ANPD).

17.3 Mexico

Under the Federal Law on Protection of Personal Data Held by Private Parties, you may exercise your ARCO rights (Access, Rectification, Cancellation, and Opposition) and revoke your consent to the processing of your personal data. You may also go to the competent Mexican data protection authority.

17.4 Other Latin American Countries

Users in Argentina (Law 25,326; Agency for Access to Public Information, AAIP), Colombia (Law 1581 of 2012; Superintendence of Industry and Commerce, SIC), Chile (Law 19,628, as amended by Law 21,719 from its effective date), Peru (Law 29733; National Authority for Personal Data Protection, ANPD), and other countries may have similar rights to access, correct, and delete their personal information and to object to its processing, as well as the right to file a complaint with their national data protection authority.

18. Users Outside Our Target Regions (Including the EU/EEA, UK, and Switzerland)

The Service is currently directed at users in the United States, Canada, and Latin America. It is not currently directed at users in the European Union, European Economic Area, United Kingdom, or Switzerland. If you nonetheless access the Service from those regions, we will respond to requests to access, correct, delete, restrict, or port your personal information, or to object to its processing, and you may have the right to lodge a complaint with your local data protection authority.

Please send any such requests to our Privacy Officer as described in Section 12.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. If we make material changes, we will notify you by email and/or in-app notice before the changes take effect.

20. Jurisdiction and Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States of America and the State of Minnesota, without regard to conflict of law principles, except where the laws of your place of residence grant you rights that cannot be waived by contract.

21. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, or would like to reach our Privacy Officer, please contact us at:

Foambyte LLC, 202 N Cedar Ave Ste 1, Owatonna, MN 55060. Email: info@foambyte.com (please include “Privacy” in the subject line for privacy requests)

Choose which optional services may load. You can change this choice at any time. Read our cookie and privacy policy.

Stores your privacy choice and supports essential site functionality. Always enabled.