TASTLY – PRIVACY POLICY

Tastly Restaurant AI LLC ("Tastly," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our AI-powered restaurant operations platform, our website at tastlyrestaurantai.com, and related applications or services (collectively, the "Service").

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using the Service.

1. Information We Collect

1.1 Personal Information

• First and last name
• Email address
• Restaurant or business name
• Role or job title (e.g., owner, manager, kitchen staff)
• We may also collect a phone number when voluntarily provided for account verification or support purposes.

1.2 Restaurant Operations Data

For registered users and their team members, we store:

• Recipe and menu content uploaded to or created within the platform
• Standard operating procedures (SOPs) and checklists
• Training materials, progress, and completion records
• Menu rollout schedules and documentation
• Team member profiles and organizational structure

1.3 Usage & Device Information

• IP address, device identifiers, user-agent string, time-zone, and connection metadata for security and fraud-prevention purposes.
• Log files relating to site interactions and app performance.
• Language preferences (English or Spanish) and interface settings.

1.4 Cookies & Tracking Technologies

We use first- and third-party cookies (e.g., Google Analytics) to achieve the following:

1. Strictly necessary – maintain your session and language preferences.
2. Analytics – measure aggregated engagement with our platform.
3. Marketing – display relevant ads on external platforms.

When you first visit our site, a cookie-consent banner appears; you can accept all cookies or tailor your preferences. You may change these settings at any time via the "Cookie Preferences" link in the footer.

1.5 Third-Party Integrations

* Each provider receives only the data required to perform its function.

** Card details are stored exclusively by Stripe.

2. Purposes for Processing

• Account management & authentication
• Provision of restaurant operations services including training management, recipe storage, SOP distribution, checklist tracking, menu rollout coordination, and operational documentation
• AI-powered features such as content generation, recipe recommendations, and SOP and training authoring
• Team management including onboarding, progress tracking, and role-based access control
• Communications (administrative, security-related, marketing – opt-out available)
• Internal analytics for product improvement and feature development
• Legal compliance and defense against claims

3. Legal Bases (EEA Users)

We process your data under:

1. Contract performance (Art. 6 (1)(b) GDPR) – delivering the restaurant operations platform and its services
2. Legitimate interest (Art. 6 (1)(f) GDPR) – security, fraud prevention, anonymised analytics
3. Consent (Art. 6 (1)(a) GDPR) – non-essential cookies and marketing emails

You may withdraw consent at any time without affecting prior processing.

4. Privacy Rights

4.1 GDPR Rights (EU/EEA)

• Access, rectification, erasure, restriction, portability, objection
• To exercise these rights, email hello@tastlyrestaurantai.com with proof of identity.

4.2 CCPA Rights (California)

• Right to know the categories of data collected and to request deletion
• We do not "sell" personal information as defined by the CCPA.

4.3 Other Jurisdictions

We will honour equivalent requests in line with applicable local law.

5. Data Retention

• While you hold an active account or subscription
• Inactive users: we delete or anonymise data two (2) months after account closure unless legal retention is required
• Encrypted backups are purged every 90 days
• Restaurant operations data (recipes, SOPs, training records) may be retained in anonymized form for platform improvement purposes

6. International Transfers

Primary servers are in the United States. For EEA data we rely on EU Standard Contractual Clauses or another recognised transfer mechanism.

7. Security

We employ technical and organisational safeguards (TLS 1.3, at-rest encryption, internal MFA, code reviews, regular audits). No system is infallible; if a breach occurs we will notify affected users and regulators within statutory deadlines.

8. Children

The Service is not directed to children under 13. If we learn that we have collected data from a child, we will delete it promptly.

9. Team Member Data

If you are added to the platform by a restaurant owner or manager, your employer or organization administrator is the data controller for your team-related data. Tastly acts as a data processor on behalf of your organization. Your name, role, and training progress may be visible to managers and administrators within your organization. Contact your employer or organization administrator for questions about how your workplace data is handled.

10. AI-Generated Content

Tastly uses artificial intelligence to assist with recipe suggestions, SOP and training authoring, content generation, and other platform features. Data submitted to AI features may be processed by third-party AI providers under strict confidentiality agreements. We do not use your proprietary restaurant data to train general-purpose AI models without your explicit consent.

11. Changes to This Policy

We may update this Policy periodically. Material changes will be emailed to you and posted in your user dashboard. The "Last updated" date reflects the latest revision.

12. Contact

Data Protection Contact

Tastly Restaurant AI LLC

Website: tastlyrestaurantai.com

Email: hello@tastlyrestaurantai.com

Miami, Florida, USA

By continuing to use the Service, you acknowledge that you have read and understood this updated Privacy Policy and agree to our data-handling practices.