Privacy Policy

Depending on how you use TastyMetrics, we handle:

• Account and workspace information, such as your name, email address, authentication identifiers, organization membership, invitations, and role.
• Restaurant information you enter or upload, including business and location settings, orders, items, transactions, timesheets, employee names or identifiers, roles, wage information, and notes.
• Trial and plan information, including trial dates and Gross Sales totals used to determine plan eligibility.
• Messages and other information you provide when contacting us.
• Usage and diagnostic information, including pages and features used, performance data, pseudonymous identifiers, technical errors, and masked session replay when an unexpected error occurs.

Our hosting, authentication, and backend providers may also process basic request, device, and security information when you use the service.

We use information to provide and secure TastyMetrics, authenticate users, manage workspace access, process imports, calculate metrics and plan eligibility, apply trial and import rules, troubleshoot the service, understand whether key workflows are useful, improve reliability, and respond to support or privacy requests. We do not sell personal information or use it for advertising.

Authorized members of your TastyMetrics workspace can see information available to their role.

We use Vercel to host the website and application, Clerk for authentication and organization access, and Convex for application data and file storage. These providers process information as needed to provide their services.

We use PostHog's European Union service for product analytics, performance measurement, error tracking, and error-triggered session replay. Recorded text and inputs are masked.

Dodo Payments acts as the reseller and Merchant of Record for paid billing and handles checkout, payment collection, subscription billing, invoices, and applicable taxes. Supafusion Labs Inc. may provide Dodo with account and business identifiers, contact information, country and currency, selected-plan information, and billing context. Dodo may return customer and subscription identifiers, payment status, and billing dates. Supafusion Labs Inc. does not receive or store complete payment-card or bank-account details entered through Dodo.

We may also disclose information when required by law or to protect rights or safety.

The service uses functional cookies and browser storage for sign-in, security, and preferences such as sidebar state, active location, and recent category selections. PostHog keeps its browser identifier in memory rather than cookies or local storage. After sign-in, events use a pseudonymous account identifier.

We honor the browser's Do Not Track signal for PostHog browser analytics, performance measurement, session replay, and browser error reporting. Backend operational error reporting may continue to help us diagnose and secure the service.

We keep information while needed to provide the service and for legitimate security, audit, billing, or legal purposes. Deleting an import removes its stored file and related normalized records, although limited import history may remain. Other deletion requests can be made using the contact below and will be handled subject to applicable law and necessary record-keeping requirements.

PostHog analytics data is retained for up to one year. Error and replay data may be retained for shorter periods.

Our providers operate in multiple countries, so information may be processed outside the province, state, or country where you live and may be subject to the laws of those places.

The service uses organization-based roles and access controls designed to limit workspace information to authorized users. No online service can guarantee absolute security.

Depending on applicable law, you may ask to access, correct, or delete your personal information, withdraw consent where applicable, or raise a privacy complaint. We may need to verify your identity and authority before completing a request.

Send privacy questions, requests, or complaints to the Privacy Officer at privacy@tastymetrics.com. If you are not satisfied with our response, you may contact the privacy regulator that applies where you live.

We will post changes to this policy on this page and update the date above. We will provide additional notice of material changes where required by law.