Legal & Trust Center

Privacy Policy

What we collect. Account details you provide (name, email, company), operational data you connect (POS transactions, payroll registers, bank deposit feeds), and standard usage telemetry. We collect the minimum needed to run the service.

How we use it. To operate your workspace, generate AI insights, reconcile payments and deposits, and improve reliability. We do not sell personal information. We do not use your business data to benefit competitors.

Your ownership. Your customer lists, sales history, and operational data belong to you. Export them at any time; deletion requests are honored within 30 days.

Processors. We use vetted sub-processors (hosting, email, analytics) under data-processing agreements. A current list is available on request at privacy@restaurantmanager.com.

Terms of Service

The agreement. By creating an account or using the demo you accept these terms on behalf of your business. Plans are month-to-month unless your order form says otherwise; you may cancel at the end of any billing period.

No lock-in. There are no early-termination penalties on standard plans. On cancellation you retain export access to your data for 60 days.

Fair use. You agree not to resell the service, probe its security, or upload unlawful content. We may suspend accounts that put other customers at risk, with notice where practicable.

Changes. We will notify you at least 30 days before material changes to these terms take effect.

Cookie Policy

Essential cookies keep you signed in and remember preferences like language (EN/ES/FR). The site works without any marketing cookies.

Analytics are aggregate and privacy-respecting; we use them to understand which features help owners most. You can opt out in account settings without losing functionality.

No ad tracking. We do not run third-party advertising pixels on the product.

Accessibility Statement

We target WCAG 2.1 AA: semantic markup, keyboard navigability, visible focus, sufficient contrast, and reduced-motion support are part of our design system.

Found a barrier? Email accessibility@restaurantmanager.com — accessibility reports are triaged like production bugs.

Intellectual Property & Trademarks

RestaurantManager™, Own Your Customers™, Command Center™, Business Health™, Supplier Hub™, Operations Center™, Presentation Studio™, and RestaurantManager OS™ are trademarks or trademark claims of RestaurantManager. "Helping You Better Control Your Business®" is a registered mark.

Third-party names (Toast, Square, Clover, DoorDash, Uber Eats, Sysco, US Foods, and others) are used solely to indicate compatibility and remain the property of their respective owners. No affiliation or endorsement is implied.

AI Disclaimer

Decision support, not advice. AI-generated insights, forecasts, and recommendations are produced from your data plus statistical models. They can be wrong. They are not financial, legal, tax, or employment advice.

Human in the loop. Actions with real-world impact — payroll approval, purchase orders, price changes — always require your explicit confirmation.

Your data trains your workspace. Models are tuned per-account; your data is never used to advise other restaurants.

Security

Encryption in transit (TLS 1.2+) and at rest (AES-256). Role-based access, audit logs, and SSO for enterprise plans. Card data is handled by PCI-DSS-compliant processors — we never store full card numbers.

Report vulnerabilities to security@restaurantmanager.com. Good-faith research is welcome; we commit to acknowledgment within 48 hours. A SOC 2 Type II audit is underway.

GDPR (EU/EEA Users)

Where GDPR applies, RestaurantManager acts as processor for your restaurant's customer data and controller for your account data. Legal bases: contract performance and legitimate interest.

You may exercise access, rectification, erasure, portability, and objection rights via privacy@restaurantmanager.com. Standard Contractual Clauses govern any transfer outside the EEA. A signed DPA is available for all paid plans.

CCPA / CPRA (California)

California residents may request to know, delete, or correct personal information, and to opt out of "sharing" as defined by the CPRA. We do not sell personal information.

Submit requests to privacy@restaurantmanager.com with subject "California Privacy Request". We verify and respond within 45 days and never discriminate for exercising rights.

Acceptable Use Policy

Don't use the platform to break the law, infringe others' rights, send spam, host malware, or attempt unauthorized access to systems or data (yours excepted — export away).

Payroll and labor features must be used consistently with applicable employment law; you remain the employer of record.

Payments Terms — ProcesaYa

ProcesaYa Payments is optional — the platform is processor-agnostic. If you choose ProcesaYa: transparent flat pricing disclosed before signature, next-business-day funding on eligible batches, and no exclusivity requirement.

Processing is subject to underwriting, card-network rules, and a separate merchant agreement. Reserves, if ever required, are disclosed in writing first.

Limitation of Liability

The service is provided "as is". To the maximum extent permitted by law, our aggregate liability is capped at fees paid in the 12 months before the claim, and neither party is liable for indirect or consequential damages.

Nothing limits liability for fraud, willful misconduct, or anything that cannot be limited by law.

Third-Party Notices

Integrations (POS, delivery, payroll, banking, supplier catalogs) are governed by each provider's own terms; connecting them authorizes the data exchange you configure. We are not responsible for third-party outages, but we surface their status honestly in your workspace.

Open-source components are listed with their licenses; a current attribution list is available on request at legal@restaurantmanager.com.