01 Who This Policy Covers

This policy applies to three groups of people, and the rules look a little different for each:

• Restaurant managers who create accounts, upload menus, and use the dashboard
• Customers who chat with Smart Waiter through a participating restaurant — no account, no signup, no identity required
• Visitors browsing the public Smart Waiter website

02 What We Collect — and Why

We only collect what's needed to run the Service. Here's exactly what comes in and what each piece is used for.

From Restaurant Managers

• Email and password — needed so you can log in. Passwords are securely hashed before storage; the actual password is never visible to us, even with full database access.
• Restaurant profile (name, hours, location, phone, website, description) — so your customer-facing chat shows the right information to the right people.
• Menu, ingredient, and allergen data you upload — this is the entire purpose of Smart Waiter. The chat can only answer using what you give it.
• Image and logo files — for your profile and customer-facing branding.
• Subscription plan and trial status — to know which features your account has access to.
• Sign-in timestamps and basic technical metadata — to detect suspicious logins and protect your account.

From Customers Using the Chat

When a customer sends a message through a restaurant's Smart Waiter chat, the system records the message, the AI's reply, any items or allergens mentioned in the conversation (extracted automatically so the restaurant can see what's being asked about), and timestamps.

What we do not collect from customers: names, email addresses, phone numbers, payment info, or any identifier. Customers don't sign in. A chat log is just a conversation — there's no person attached to it from our side.

Automatically Collected

• Browser and device type — for performance and compatibility
• IP address — for security, abuse prevention, and rate limiting
• Session cookies — to keep you logged in as a manager

03 Where Your Data Lives

Each restaurant account on Smart Waiter is isolated. Your menus, chat logs, uploaded files, and customer conversations live within your own account space. They are not pooled into a shared database, blended with other restaurants, or used to train or improve other restaurants' chats.

In practice this means:

• Restaurant A cannot see Restaurant B's data — ever.
• We do not aggregate customer chats across restaurants for analysis.
• Your menu data is not used to train AI models or feed any other restaurant's results.

We are a tool that runs your data for you. We are not a data broker, and your information is not the product.

04 How Pie AI Staff Access Your Data

To be straight with you: yes, our Pie AI platform team can access account data when needed — but the access is limited and purposeful, not routine. We do not browse restaurant data out of curiosity.

Staff access happens only when:

• A restaurant requests support and we need to look at their data to help
• We need to investigate a bug, error, or technical issue affecting an account
• We're investigating abuse, security incidents, or violations of our Terms
• A legitimate legal request requires it

We do not read individual customer chats unless one of the situations above applies. We do not sell, share, publish, or monetize account data in any way.

05 Third-Party Services We Use

To run Smart Waiter, we work with a small number of trusted service providers. Each one only sees the slice of data they need to do their job:

• Anthropic (Claude AI) — When a customer sends a chat message, that message and the relevant menu data are sent to Anthropic's API to generate a reply. Per Anthropic's API policy, this content is not used to train their models.
• Supabase — Stores restaurant account credentials and handles login. Supabase does not see chat content or menu data.
• Stripe — When subscription billing is enabled, Stripe will process all payments. Stripe handles payment card data directly; we never see full card numbers.

We do not sell your data. We do not share data with advertisers. We do not use customer chat content for advertising or for training our own models.

06 How We Use the Information We Collect

Here's exactly what we do with the data we have — nothing more, nothing hidden.

• To run your chat — Restaurant menu data plus customer messages produce an AI reply, in real time.
• To populate your dashboard — Each restaurant's manager dashboard shows insights (most-asked items, top allergens, daily chat counts). These insights come from that restaurant's own chat logs and are visible only to that restaurant.
• To bill you — Through Stripe, we'll use your subscription information to process payments.
• To keep accounts secure — Login timestamps and IP addresses help us spot suspicious activity.
• To improve the platform — We may use aggregated, anonymized usage statistics (like "X percent of restaurants use feature Y") to make Smart Waiter better. We do not use individual chat content for this.
• To contact you — If you're a manager, we may email you about service updates, billing, or important changes.

07 Data Retention

We keep data only as long as it serves a purpose:

• Active accounts — Data stays as long as the account is active.
• Closed accounts — After closure, data is retained for a reasonable period (typically up to 90 days) to allow recovery, then permanently removed from active systems.
• Chat logs — Retained inside the restaurant's own account so managers can see trends. Restaurants can request earlier deletion at any time.
• Encrypted backups — Deleted data may persist for a limited period in backups before being permanently removed.

08 Your Rights

If You're a Restaurant Manager

You may at any time:

• Update or correct your information through your dashboard
• Request deletion of your account and all associated data
• Request an export of your data
• Ask questions about what we have stored about your account

To make any of these requests, email support@pie-ai.com.

If You're a Customer Who Used the Chat

Because we don't collect identifying information from customers, we generally cannot link a specific chat to a specific person. Each restaurant controls its own chat logs and can delete them on request.

09 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete it, the right to opt out of the sale of personal information (note: we do not sell personal information), and the right not to be discriminated against for exercising these rights. To exercise any of these rights, contact us at support@pie-ai.com.

10 Children's Privacy

Smart Waiter is not directed at children under 13, and we do not knowingly collect data from them. If you believe we have inadvertently collected information from a child, contact us and we will delete it promptly.

11 Security

We protect your data with hashed password storage, encrypted connections (HTTPS), access controls, and isolated account folders. No system is perfectly secure — we don't pretend otherwise — but we treat your data with the same care we'd want for our own.

12 International Users

Smart Waiter is operated in the United States. If you access the service from outside the U.S., your data will be processed in the U.S.

13 Changes to This Policy

We may update this Privacy Policy as the Service evolves. When changes are material, we'll email account holders. The Effective Date at the top of this page reflects the most recent version.

14 Contact

Questions about this policy, your data, or anything else? Email support@pie-ai.com — our Pie AI platform team reads everything that comes in.