Privacy Policy

RestauMate (“we,” “our,” or “us”) operates the RestauMate platform, which provides online ordering, marketing, and restaurant management tools to restaurant operators and their customers. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our platform, whether as a restaurant owner, staff member, or a customer ordering from a restaurant that uses RestauMate.

By using RestauMate you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

Restaurant Account Holders: When you create a RestauMate account we collect your name, email address, phone number, business name, business address, and payment information processed securely through Stripe. We also collect usage data, menu content, order history, and marketing campaign data you create.

Restaurant Customers (End Users): When a customer places an order through a RestauMate-powered ordering page we collect their name, phone number, email address (if provided), order details, and payment information processed by Stripe. This data is collected on behalf of the restaurant and is subject to both this policy and the restaurant’s own privacy practices.

Automatically Collected Data: We automatically collect IP addresses, browser type, device information, pages visited, and time spent on pages through our analytics infrastructure. This data is used to improve our services and diagnose technical issues.

RestauMate enables restaurants to send SMS marketing messages to their customers. We take TCPA (Telephone Consumer Protection Act) compliance seriously.

Consent for SMS Marketing: When a customer provides their phone number during checkout, the restaurant is responsible for obtaining proper consent before sending marketing SMS messages. RestauMate provides the technical infrastructure but the restaurant operator is the sender of record and bears primary TCPA compliance responsibility.

Opt-Out: All SMS messages sent through RestauMate support STOP keyword opt-out. Customers who reply STOP to any SMS message will be immediately removed from future marketing communications from that restaurant. Transactional messages (order confirmations) are separate from marketing messages.

Message Frequency: Message frequency varies by restaurant. Standard message and data rates may apply.

RestauMate enables restaurants to send email marketing campaigns to their customers. All marketing emails sent through our platform include the restaurant’s name as the sender and include an unsubscribe mechanism as required by the CAN-SPAM Act.

Transactional emails such as order confirmations are not subject to the same opt-in requirements but still include restaurant contact information in the footer.

Restaurant operators are responsible for maintaining accurate subscriber lists and honoring unsubscribe requests promptly. RestauMate processes opt-out requests automatically within our platform.

We use collected information to:

• Process and fulfill orders
• Operate and improve the RestauMate platform
• Process payments through Stripe
• Send transactional communications (order confirmations, receipts)
• Enable restaurants to send marketing communications to their opted-in customers
• Provide customer support
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Generate anonymized analytics to improve our service

We do not sell personal information to third parties. We do not use restaurant customer data for cross-restaurant marketing.

All payment processing is handled by Stripe, Inc. RestauMate does not store credit card numbers, CVV codes, or full payment card data on our servers. Payment data is transmitted directly to Stripe using industry-standard TLS encryption.

Stripe’s use of your payment information is governed by Stripe’s own Privacy Policy, available at stripe.com/privacy. RestauMate uses Stripe Connect to facilitate payments between customers and restaurant operators.

Platform fees are deducted automatically from each transaction as disclosed in our pricing.

We share data with the following categories of service providers who process data on our behalf:

• Stripe — Payment processing and restaurant payouts
• Twilio — SMS delivery infrastructure
• Resend — Transactional and marketing email delivery
• Supabase — Database hosting and authentication
• Vercel — Application hosting and edge infrastructure
• Anthropic — AI-powered features including menu extraction and campaign copy generation
• Google (Maps Platform / Places) — Business address lookup during signup and business listing information used by our free restaurant tools
• PostHog — Product analytics
• Sentry — Error monitoring

Each provider is bound by data processing agreements. We do not authorize providers to use your data for their own marketing purposes.

RestauMate uses AI services (powered by Anthropic’s Claude) to generate marketing copy, campaign suggestions, and extract menu data from photos.

When you use AI-powered features, your prompts and context (such as restaurant name and campaign details) may be sent to Anthropic for processing. We do not send personally identifiable customer data to AI services.

AI-generated content is provided as a suggestion only. Restaurant operators are responsible for reviewing and approving all communications before sending.

We retain restaurant account data for the duration of the active subscription plus 90 days after cancellation to allow for account recovery.

Order data is retained for 7 years for tax and accounting compliance purposes.

Menu photos and files you upload. When you import a menu by uploading photos or a PDF, we keep those files for up to 14 days so we can re-read the menu if something was misread, and so you can re-import without uploading again. They are deleted automatically after that, and sooner once an import completes successfully. The menu items themselves stay on your menu — only the uploaded files are removed.

Customer contact data collected for marketing purposes is retained until the customer opts out or the restaurant account is closed.

You may request deletion of your data by contacting us at privacy@restaumate.com. Note that some data may be retained for legal and accounting obligations.

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

• Right to access your data
• Right to correct inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to data portability
• Right to object to processing
• Right to restrict processing

To exercise these rights contact privacy@restaumate.com. We will respond within 30 days.

For Canadian residents, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Canada’s Anti-Spam Legislation (CASL) requires express consent for commercial electronic messages. Restaurant operators using RestauMate to contact Canadian customers must ensure they have obtained CASL-compliant consent before sending marketing emails or SMS messages.

We implement industry-standard security measures including TLS encryption in transit, encrypted data at rest, role-based access controls, and regular security reviews.

However, no method of transmission or storage is 100% secure. While we strive to protect your information we cannot guarantee absolute security. In the event of a data breach we will notify affected parties as required by applicable law.

RestauMate provides technology infrastructure to restaurant operators. Restaurant operators act as independent data controllers for the personal information of their customers.

Restaurant operators are solely responsible for:

• Obtaining proper consent from their customers before sending marketing communications
• Complying with applicable privacy laws in their jurisdiction
• Maintaining their own privacy policy for their customers
• Handling customer data access/deletion requests
• Food safety, order accuracy, and customer service

We offer free tools that anyone can use without creating a RestauMate account — for example, a restaurant health scan or a report on what a delivery platform actually charges you. This section explains what happens to the information involved when you use one. It applies whether or not you ever become a customer.

What we collect. Business identity information about the restaurant being analyzed, including its name, address, and publicly listed business information; content from the restaurant’s own public website, which we read and analyze automatically; contact details you choose to give us, such as an email address or phone number, in order to receive your results; any documents you upload, such as menus or third-party delivery statements, or a link you paste to one of those documents so we can fetch it ourselves, which we treat exactly like a file you sent us directly; and any content you paste for a tool to analyze, such as a customer review you ask our reply assistant to respond to.

Why we use it. To generate the report or result you asked for, and — only if you consent when you request it — to follow up with you about those results and how RestauMate could help. You can withdraw that consent at any time using the unsubscribe link in any message we send.

Uploaded documents. If you upload a third-party delivery statement, we process it only to extract the totals shown in your report, and the file itself is deleted once extraction is complete. We do not retain your statement. Menus you upload are stored in a private location and kept only until you claim the results or request deletion. Content you paste for analysis, such as a customer review, is processed in memory to generate your result and is not retained — neither the content you pasted nor the result we generated.

How long we keep it. If you never become a RestauMate customer, we retain the record created by a free tool for up to 18 months, after which it is deleted. If you do become a customer, the information becomes part of your account and is governed by the retention terms in Section 9 above.

Deleting your information. You may ask us to delete a record created by a free tool at any time, whether or not you ever gave us your contact details. Email privacy@restaumate.com and we will honor the request by removing the record from our systems. We do not require you to have an account to make this request.

For privacy-related questions, data requests, or concerns:

RestauMate Privacy Team
Email: privacy@restaumate.com
Dearborn, Michigan, United States