Privacy Policy

GrubStack ("we," "our," or "us") is committed to protecting the privacy of our customers and their end users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the GrubStack platform and related services.

1. Information We Collect

We collect information you provide directly to us when you:

• Create a GrubStack account (name, email address, business name)
• Configure your restaurant profile (menu items, pricing, operating hours)
• Contact us for support or request a demo
• Subscribe to a paid plan

We also collect usage data automatically, including pages visited, features used, IP addresses, browser type, and device information. This data is used to improve the platform and diagnose technical issues.

2. How We Use Your Information

We use the information we collect to:

• Provision and maintain your GrubStack account and services
• Process payments and manage your subscription
• Respond to support requests and inquiries
• Send transactional emails (receipts, account notices, order confirmations)
• Improve and develop new features of the platform
• Comply with legal obligations

We do not sell your personal data to third parties.

3. Payment Processing

GrubStack integrates with Stripe and Square to process payments on behalf of restaurants. Payment card data is handled directly by these processors and is never stored on GrubStack servers. Each payment processor operates under its own privacy policy and PCI DSS compliance program.

Your subscription billing is managed through Stripe. By subscribing, you agree to Stripe's Terms of Service and Privacy Policy.

4. Data Storage and Security

GrubStack is hosted on a private Kubernetes infrastructure. Each merchant account is provisioned in an isolated deployment environment — your data is never commingled with other merchants' data. We implement industry-standard security measures including encryption in transit (TLS) and at rest.

While we take reasonable steps to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Cookies

GrubStack uses session cookies necessary for authentication and platform functionality. We do not use third-party advertising cookies or behavioral tracking cookies. You may disable cookies in your browser settings, but doing so may affect your ability to use certain features of the platform.

6. Third-Party Services

We may share data with the following third-party service providers:

• Stripe — subscription billing and payment processing
• Square — point-of-sale and payment processing
• Email service providers — for transactional emails

These providers are contractually bound to use your data only as necessary to deliver their services.

7. Data Retention

We retain your account data for as long as your subscription is active. After cancellation, we retain your data for up to 90 days before permanent deletion, giving you time to export any records you need. You may request immediate deletion by contacting us at contact@grubstack.app.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete the personal data we hold about you. If you are a resident of the European Economic Area (GDPR) or California (CCPA), you may also have additional rights regarding data portability and opting out of certain data uses.

To exercise any of these rights, contact us at contact@grubstack.app. We will respond within 30 days.

9. Children's Privacy

GrubStack is a business-to-business platform not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via email or a notice on the platform. Your continued use of GrubStack after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at contact@grubstack.app.