Privacy Policy

Last updated October 13, 2026

Summary

RestaurantOpsApp is business software sold to restaurants. We collect the minimum needed to run it: who you are, what you pay, and the operational data you choose to enter. We do not sell personal information, we do not run advertising trackers, and we do not use your cost or vendor data for any purpose other than providing the service to you. Our public website uses Google Analytics to understand traffic and improve the site; see "Website analytics" below for what that does and does not collect, and how to decline it.

Who we are

RestaurantOpsApp operates the software at restaurantopsapp.com and is the controller of the personal information described here. Contact us at support@restaurantopsapp.com.

What we collect

Account information. Your name, email address, hashed password, the company you belong to, and your role in it. If you sign in with Google we receive your name, email address, and Google account identifier. We never receive your Google password.

Business data you enter. Ingredients, suppliers, prices, recipes, menu items, invoices and invoice images you upload, inventory counts, and outlet or location details. This is your operational data. It usually contains no personal information, though supplier documents may include a contact name.

Billing information. Your subscription plan, its status, renewal dates, and the customer and subscription identifiers issued by Stripe. Card numbers are entered on Stripe's own checkout and are never sent to or stored on our servers.

Technical information. Standard server logs such as IP address, browser type, timestamps, and errors, used to keep the service secure and to diagnose faults.

Website analytics

The public marketing site (pages like the homepage, pricing, and the walkthrough), the sign in and sign up screens, and the checkout flow use Google Analytics 4 to understand which pages and buttons visitors use, so we can see what is working and improve the site. This does not run on the product itself, meaning it never sees your ingredients, recipes, invoices, prices, or any other business data you enter after you sign in.

What it collects: pages viewed, and a small set of named actions such as starting a trial, viewing pricing, watching the walkthrough, signing in or up, starting checkout, and completing a subscription. It never receives your name, email address, phone number, password, form contents, invoice or payment data, or account identifiers.

Google Analytics only runs after you choose Accept analytics on the notice shown the first time you visit. Choosing Decline keeps it off. Either way your choice is remembered in your browser so the notice does not ask again. To change your mind, clear this site's data in your browser settings, or email support@restaurantopsapp.com and we will point you to how.

What we do not do

We do not sell or rent personal information. We do not share it with advertising networks or data brokers. We do not run third-party advertising or cross-site tracking cookies. We do not use your cost, vendor, or recipe data to train models used for other customers.

Why we process it

To create and secure your account, to provide the features you use, to take payment and manage your subscription, to give support when you ask for it, to send service messages such as trial expiry and payment failures, and to meet legal and accounting obligations. Where the law requires a legal basis, we rely on performance of our contract with you, our legitimate interest in operating and securing the service, and compliance with legal obligations.

Processors we use

Stripe for payments and subscription management. Render for application hosting and the hosted database. Google for optional sign-in and, on the public website only, Google Analytics (see "Website analytics" above). Invoice images you upload are sent to Google (its Gemini image-reading service) so that line items can be read from them. If that service is unavailable, the image is read on our own server instead.

Each is engaged to process data on our instructions in order to deliver the service, not for their own purposes.

Invoice images

When you upload or photograph a supplier invoice, the image is stored in your company's account and processed to extract line items. To read the image we send it to Google's Gemini service, and we fall back to reading it on our own server if that service is unavailable. Inside RestaurantOpsApp, the image is visible only to users of your company account. You can delete an invoice and its image at any time.

Separation between companies

Every record is scoped to the company that created it. Users can only read and write data belonging to their own company. Company data is never pooled, benchmarked, or exposed to another customer.

Retention

We keep your account and business data for as long as your account exists, including while a subscription is cancelled, so nothing is lost if you return. Ask us to delete your account and we will delete your business data within 30 days, apart from records we must keep for tax and accounting purposes, such as invoices and payment records.

Security

Traffic is encrypted in transit with TLS. Passwords are stored hashed, never in readable form. Access to production systems is restricted. No system is perfectly secure, so if a breach affects your personal information we will notify affected account administrators without undue delay.

Your rights

You can ask us to give you a copy of your personal information, correct it, delete it, or restrict how we use it. Depending on where you live you may also have the right to object to processing, to receive your data in a portable format, or to complain to a data protection authority. Email support@restaurantopsapp.com and we will respond within 30 days.

Service emails about your account, trial, and billing are part of the service and cannot be turned off while your account is open.

Cookies

We use cookies and local browser storage needed to keep you signed in, remember interface preferences, hold work in progress so it survives a lost connection, and remember your analytics choice. If you accept analytics on the public website, Google Analytics sets its own cookies there to distinguish visits; if you decline, it does not. We do not use advertising cookies or any cookie that tracks you across other websites.

Children

The service is sold to businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Changes

If we make a material change to this policy we will notify account administrators by email or in the app before it takes effect, and we will update the date at the top of this page.