Privacy Policy

Last updated: September 23, 2025

Welcome to Automenu!

This Privacy Policy explains how Automenu Inc. ("Automenu," "we," "our," or "us") collects, uses, and shares personal information.

This Privacy Policy is a key part of our legal agreement with you. Our Terms of Service govern all use of our Services. By accessing or using our Services, you agree to be bound by both this Privacy Policy and our Terms of Service.

This policy is divided into two main parts to make it clear how your data is handled:

• Part 1: When We Act as a Data Controller. This applies when we collect your personal information for our own purposes.
• Part 2: When We Act as a Data Processor. This applies when we handle personal information on behalf of our Restaurant Partners.

Key Definitions

To help you understand this policy, here are the definitions for the key terms we use:

• Restaurant Partners: Refers to the businesses, such as restaurants, cafes, and other food service providers, that subscribe to and use Automenu's platform to power their own digital services (like their websites and online ordering systems). When you place an order with one of these businesses through a site we power, the Restaurant Partner is the controller of your data.
• Services: Refers to the full range of products, platforms, and interactions related to Automenu. This includes our corporate website, automenu.com, our business products, the platforms we power for our Restaurant Partners, and any communications you have with us.

Part 1: Automenu as a Data Controller

This section applies when you interact directly with Automenu's own corporate website, marketing, sales, and employment activities.

A. Information We Collect

We collect personal information that you provide to us, that we collect automatically, or that we receive from third parties.

• Information You Provide:
  • Business Contact & Account Information: When you inquire about our services or create an Automenu account, we collect your name, email address, phone number, and password.
  • Communications Data: When you contact us for support or other inquiries, we collect the contents of your message and any contact information you provide.
  • Job Application Data: If you apply for a job at Automenu, we collect your resume, cover letter, and contact details.
• Information We Collect Automatically:
  • Usage and Technical Data: When you visit automenu.com, we automatically collect your IP address, browser type, device information, operating system, and information about how you interact with our site (pages visited, links clicked, time spent). We use cookies and similar technologies to collect this data, as detailed in our Cookie Policy.

B. Sensitive and Financial Information

We take your privacy seriously and do not intentionally collect or require sensitive personal information (also known as "special categories of data") to provide our Services.

Specifically, we ask that you do not provide us with information about:

• Your race or ethnic origin
• Political opinions or religious beliefs
• Health, genetic, or biometric data
• Social Security numbers

C. How We Handle Payment Information

We do not directly collect, store, or process your credit card numbers or other financial account details.

All payments made through our Services are securely processed by our third-party payment partner, Stripe. When you make a payment, you provide your financial information directly to Stripe. Your data is protected by their robust security and is subject to Stripe's Privacy Policy. This process ensures your payment information is handled in a secure and PCI-compliant manner.

D. How We Use Your Information

We use the information we collect as a controller for the following purposes:

• To Provide and Improve Our Services: To operate our website, manage restaurant accounts, and analyze usage to enhance our platform.
• To Communicate With You: To respond to your inquiries, send service updates, and provide marketing communications (where we have your consent).
• For Business Operations: To process job applications, maintain security, and for internal analytics.

E. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Performance of a Contract: To provide the services you requested or to manage your account.
• Legitimate Interests: For security, analytics, and improving our services, provided our interests do not override your rights.
• Consent: For sending marketing communications, which you can withdraw at any time.
• Legal Obligation: To comply with applicable laws.

Part 2: Automenu as a Data Processor

This section applies when we process personal information on behalf of our Restaurant Partners. When you place an order, join a loyalty program, or use a website powered by Automenu for one of our partners, the restaurant is the Data Controller. Their privacy policy governs the use of your data. We are the Data Processor, acting on their instructions.

A. Information We Process for Our Partners

On behalf of our Restaurant Partners, we may process the following types of information about you (the restaurant's customer):

• Customer & Order Data: Your name, email, phone number, delivery address, order history, transaction details, and payment information.
• Account & Loyalty Data: Information you provide when creating an account or joining a loyalty program with a restaurant.
• Communication Data: Feedback, reviews, or customer support inquiries you submit to the restaurant through our platform.
• Technical Data: Your IP address, device information, and browsing activity on the restaurant's website or app.
• Third-Party Platform Data: Information from ordering platforms like DoorDash or Uber Eats that is integrated with the restaurant's Automenu account.

B. How We Use This Information

We only use this information as directed by our Restaurant Partners to:

• Facilitate online ordering, payment processing, and delivery.
• Manage the restaurant's customer relationship management (CRM) and loyalty programs.
• Provide the restaurant with analytics about their business.
• Enable the restaurant to send you marketing communications (with your consent, given to them).

Your Automenu Account and Your Data

When you create an Automenu account, we process your personal information in the following ways to provide you with enhanced features:

• Cross-Restaurant Order History: To provide you with a centralized view of your order history, we collect transaction information from each Restaurant Partner you link to your account. In this context, Automenu acts as a Data Controller for the purpose of displaying this consolidated history to you within your account dashboard.
• Information Syncing and Account Linking: You have control over your account connections. You can choose to link your Automenu account to a specific Restaurant Partner to streamline your ordering process. You may also be given the option to sync your information with a Restaurant Partner's systems to enable features such as their loyalty program, quick reordering, using saved payment methods, and receiving their marketing communications. We will only perform this sync with your explicit consent. You can manage these connections and sync preferences from your account settings at any time.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Our Restaurant Partners: We share your customer data with the specific restaurant you are interacting with so they can fulfill your order and manage their business.
• With Service Providers: We use third-party vendors for services like cloud hosting (Google Cloud Platform), payment processing, data analytics (Google Analytics), and security (Cloudflare). These vendors are only permitted to use the information to perform services for us.
  • For more information on how Google handles your data, please see Google's Privacy & Terms. We also encourage you to review Google's policies on Safeguarding your data.
  • For more information on how Cloudflare handles your data, please see Cloudflare's Privacy Policy.
• As Directed by Our Partners: We may share customer data with third parties like delivery services or marketing agencies as instructed by the respective Restaurant Partner.
• For Legal Reasons: We may disclose information if required by law, a valid court order, or to protect the rights, property, or safety of Automenu, our users, or the public.
• In Business Transactions: If Automenu is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred.
• With Your Consent: We may share information for other purposes with your explicit consent.

Your Data Rights and Choices

You have rights regarding your personal information. How you exercise these rights depends on whether Automenu is the controller or processor.

• If We Are the Controller (Your data from automenu.com): You can contact us directly at privacy@automenu.com to exercise your rights.
• If We Are the Processor (Your data as a restaurant customer): You must contact the relevant Restaurant Partner directly to exercise your rights. We will assist them in responding to your request as required by law.

Your rights may include:

• The Right to Access, Correct, or Delete your personal information.
• The Right to Opt-Out of marketing communications by using the "unsubscribe" link in our emails.
• The Right to Data Portability to receive your information in a machine-readable format.
• The Right to Withdraw Consent at any time where we rely on consent to process your information.

Your California Privacy Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• The Right to Know: To request details about the personal information we have collected about you.
• The Right to Delete: To request the deletion of your personal information.
• The Right to Correct: To request correction of inaccurate personal information.
• The Right to Opt-Out of Sale/Sharing: We do not "sell" or "share" your personal information as defined by the CCPA.
• The Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to that which is necessary to perform the services.

To exercise your California rights for data where we are the controller, please contact us at privacy@automenu.com.

Additional Information

Data Security

We implement appropriate technical and organizational measures, such as data encryption and secure cloud infrastructure on Google Cloud Platform, to protect your personal information. However, no method of transmission over the Internet is 100% secure.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. For data we process on behalf of Restaurant Partners, we retain it according to their instructions.

International Data Transfers

Automenu is headquartered in the United States, and your information will be processed in the U.S. and other locations where our service providers operate. For transfers of data from the EEA/UK, we rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses to ensure your data is protected.

Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@automenu.com