Privacy Policy

1. Information We Collect

We collect information you provide and information generated through your use of the Services, including:

• Account and profile data: name, email, phone number, password (stored as a hash), role/permissions.
• Employee and operational data: employee names/IDs, schedules, payout rules, approvals.
• Transaction and payout data: tips, gratuities, sales totals, payout amounts, and payout status.
• Payment and banking data: limited payment method details and payout status; Stripe handles sensitive data.
• Communications: support requests, invitations, and password reset requests.
• Technical data: IP address, device/browser data, timestamps, and usage logs.
• Local storage: identifiers and preferences stored in your browser (such as user ID and restaurant key).

2. Sources of Information

We receive information:

• Directly from you or your employer/Customer.
• From integrations and third-party services (such as Stripe).
• From systems or data imports provided by the Customer (such as time entries and tip data).

3. How We Use Information

We use information to:

• Provide, maintain, and improve the Services.
• Process payouts and support approvals and reporting.
• Send transactional and administrative communications.
• Provide customer support and troubleshoot issues.
• Monitor security, prevent fraud, and enforce our Terms.
• Comply with legal obligations.

4. How We Share Information

We may share information with:

• Service providers, such as Stripe for payment processing and SendGrid for email delivery.
• Customers/employers, where you are an employee or invited user.
• Legal and compliance authorities when required by law or to protect rights and safety.
• Business transfers in connection with a merger, acquisition, or asset sale.

5. Data Retention

We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

6. Security

We use reasonable administrative, technical, and physical safeguards to protect information. No system is completely secure; you are responsible for safeguarding your account credentials.

7. Your Choices and Rights

You may request access, correction, or deletion of your information by contacting us. If your account is managed by a Customer (for example, your employer), direct requests may need to be handled through that Customer.

8. Children's Privacy

The Services are not directed to individuals under 13, and we do not knowingly collect personal information from children.

9. International Transfers

If you access the Services from outside the United States, your information may be processed in the United States or other jurisdictions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will provide notice of material changes.

11. Contact