Privacy Policy

Effective date: May 1, 2026

This Privacy Policy describes how ServePoint ("we", "us", or "our") collects, uses, and protects information when you use our restaurant point-of-sale platform, including our web admin portal, online ordering site, mobile applications, and supporting APIs (collectively, the "Services").

1. Information We Collect

Account information. Name, email, phone number, job title, and authentication credentials for restaurant staff and administrators who use the Services.
Customer / guest information. When restaurants using our Services accept orders, we process customer names, contact details, delivery addresses, and order history on the restaurant's behalf.
Payment information. Payment card data is collected and processed by our PCI-DSS-compliant payment processors (e.g., Stripe). We do not store full card numbers on our servers.
Operational data. Menu items, orders, employee schedules, time clock entries, sales reports, and other business data created by restaurants using the Services.
Technical data. Device identifiers, IP addresses, browser type, operating system, log files, and diagnostic telemetry used to operate, secure, and improve the Services.

2. How We Use Information

To provide, maintain, and improve the Services.
To process orders, payments, and payroll on behalf of our customers.
To authenticate users and protect accounts.
To detect, prevent, and respond to fraud, abuse, and security incidents.
To communicate with users about service updates, security alerts, and support requests.
To comply with legal obligations and enforce our terms of service.

3. How We Share Information

We do not sell personal information. We share information only as follows:

With service providers who process data on our behalf under contractual confidentiality and security obligations (hosting, payments, email delivery, analytics, error monitoring).
With third-party integrations that a restaurant explicitly enables (e.g., delivery marketplaces, accounting platforms, loyalty programs). Data shared with these integrations is governed by the third party's own privacy policy.
With law enforcement or regulators when required by applicable law or to protect the rights, property, or safety of ServePoint, our customers, or the public.
In connection with a business transaction such as a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

4. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Restaurants may request deletion of their data through the in-product data management tools or by contacting us at info@servepoint.me.

5. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS) and at rest, role-based access controls, audit logging, and regular security reviews. No system is perfectly secure; we cannot guarantee absolute security but we work continually to protect your data.

6. International Data Transfers

Our Services are hosted in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us at info@servepoint.me. If you are a guest of a restaurant using ServePoint, please contact that restaurant directly first, as they are the data controller of their customer records.

8. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Cookies and Tracking

We use cookies and similar technologies to keep users signed in, remember preferences, and understand how the Services are used. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Services.

10. Third-Party Integrations

When you connect a third-party integration (for example, a delivery marketplace or accounting platform), ServePoint may exchange data with that integration to enable the requested functionality. We share only the data necessary for the integration to operate. The third party's own privacy policy governs how they use any data we share with them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services or by email to account administrators. The "Effective date" at the top of this policy indicates when it was last revised.

12. Contact Us

Questions or concerns about this Privacy Policy may be directed to info@servepoint.me.