1. Introduction
This Privacy Policy describes how Kyze Technologies Inc. ("Kyze," "we," "us," or "our") collects, uses, and protects your information when you use our restaurant financial management platform ("Service").
We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to all users of Kyze, including restaurant owners, coffee shop operators, and their authorized staff.
2. Information We Collect
2.1 Information You Provide Directly
Account Information:
- Name, email address, phone number
- Business name and address
- Payment information (processed securely through third-party providers)
- Profile preferences and settings
Business Data:
- Menu items, recipes, and ingredient information
- Supplier details and pricing data
- Sales figures and transaction data
- Expense records and financial information
- Inventory and usage tracking data
Communications:
- Support requests and correspondence
- Feedback and survey responses
- Marketing communication preferences
2.2 Information Collected Automatically
Usage Data:
- Pages visited and features used
- Time spent on different sections
- Click patterns and navigation paths
- Device and browser information
Technical Data:
- IP address and location data
- Device identifiers and specifications
- Browser type and version
- Operating system information
- Cookies and similar tracking technologies
2.3 Information from Third Parties
POS System Integration:
- Sales data and transaction records
- Customer order information
- Payment processing data
- Inventory movements
Business Partners:
- Supplier pricing information
- Market data and benchmarks
- Integration service data
3. How We Use Your Information
3.1 Service Provision
- Calculate food costs and menu pricing
- Generate financial dashboards and reports
- Provide AI-powered business insights
- Sync data with POS systems
- Track usage and waste patterns
3.2 Account Management
- Create and maintain your account
- Process payments and billing
- Provide customer support
- Send service-related notifications
3.3 Service Improvement
- Analyze usage patterns to improve features
- Develop new tools and capabilities
- Conduct research and analytics
- Test new features and functionality
3.4 Communication
- Send important service updates
- Provide customer support responses
- Share relevant business insights
- Marketing communications (with consent)
3.5 Legal and Security
- Comply with legal obligations
- Protect against fraud and abuse
- Enforce our Terms of Service
- Maintain service security and integrity
4. Information Sharing and Disclosure
4.1 We Do Not Sell Your Data
We do not sell, rent, or trade your personal information or business data to third parties for marketing purposes.
4.2 Service Providers
We may share information with trusted third parties who help us operate our Service:
- Payment processors (Stripe, PayPal)
- Cloud hosting providers (AWS, Google Cloud)
- Analytics services (Google Analytics)
- Customer support tools
- Email service providers
4.3 Business Transfers
If we are acquired or merge with another company, your information may be transferred as part of that transaction.
4.4 Legal Requirements
We may disclose information when required by law or to:
- Comply with legal processes
- Protect our rights and property
- Ensure user safety
- Investigate fraud or security issues
4.5 Aggregated Data
We may share anonymized, aggregated data that cannot identify you or your business for:
- Industry benchmarking
- Market research
- Service improvement
- Public reporting
5. Data Security
5.1 Security Measures
We implement industry-standard security practices:
- Encryption of data in transit and at rest
- Regular security audits and assessments
- Access controls and authentication
- Secure data centers and infrastructure
- Employee security training
5.2 Data Breach Response
In the event of a data breach:
- We will investigate immediately
- Affected users will be notified promptly
- We will take steps to prevent future incidents
- We will comply with applicable breach notification laws
5.3 Your Responsibility
You can help protect your data by:
- Using strong, unique passwords
- Keeping login credentials confidential
- Logging out of shared devices
- Reporting suspicious activity immediately
6. Data Retention
6.1 Active Accounts
We retain your information while your account is active and as needed to provide services.
6.2 Closed Accounts
After account closure:
- Personal data is deleted within 30 days
- Business data may be retained for up to 7 years for legal/tax purposes
- Aggregated, anonymized data may be retained indefinitely
6.3 Legal Requirements
Some data may be retained longer to comply with legal obligations, resolve disputes, or enforce agreements.
7. Your Privacy Rights
7.1 Access and Portability
- Request copies of your personal data
- Export your business data in standard formats
- Receive information about our data practices
7.2 Correction and Updates
- Update your account information anytime
- Correct inaccurate personal data
- Modify privacy preferences
7.3 Deletion
- Delete your account and associated data
- Request removal of specific information
- Opt out of marketing communications
7.4 Restriction and Objection
- Limit how we process your data
- Object to certain data processing activities
- Withdraw consent for optional data uses
8. Cookies and Tracking
8.1 Types of Cookies
Essential Cookies: Required for basic service functionality
Analytics Cookies: Help us understand how you use our Service
Preference Cookies: Remember your settings and preferences
Marketing Cookies: Used for targeted advertising (with consent)
8.2 Cookie Management
You can control cookies through:
- Browser settings and preferences
- Our cookie consent manager
- Third-party opt-out tools
- Privacy settings in your account
9. International Data Transfers
9.1 Global Service
Kyze operates globally, and your data may be processed in countries other than where you reside.
9.2 Transfer Safeguards
When transferring data internationally, we ensure:
- Adequate protection through legal frameworks
- Contractual safeguards with service providers
- Compliance with applicable data protection laws
10. Children's Privacy
Kyze is not intended for individuals under 18. We do not knowingly collect personal information from children. If we discover we have collected such information, we will delete it immediately.
11. California Privacy Rights (CCPA)
California residents have additional rights:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt out of sale (we don't sell data)
- Right to non-discrimination for exercising privacy rights
12. European Privacy Rights (GDPR)
EU residents have additional rights under GDPR:
- Lawful basis for processing personal data
- Right to data portability
- Right to object to processing
- Right to lodge complaints with supervisory authorities
13. Changes to This Policy
13.1 Updates
We may update this Privacy Policy to reflect:
- Changes in our practices
- New legal requirements
- Service improvements
- User feedback
13.2 Notification
Material changes will be communicated through:
- Email notifications
- Service announcements
- Website notices
- Account dashboard alerts
14. Contact Us
14.1 Privacy Questions
For privacy-related questions or requests:
Email: privacy@kyze.com
Address: 1209 Orange Street, Wilmington, DE 19801, United States
Phone: +1 (555) 123-KYZE
14.2 Data Protection Officer
For EU residents, contact our Data Protection Officer:
Email: dpo@kyze.com
14.3 Response Time
We will respond to privacy requests within:
- 30 days for general inquiries
- 72 hours for urgent security matters
- As required by applicable law
This Privacy Policy is effective as of the date listed above and applies to all information collected by Kyze.