Privacy Policy

Information we collect

When you interact with a restaurant powered by Appetier, we collect only what is needed to fulfill your requests and keep the experience secure.

• Information you provide directly, such as your name, email, and phone number
• Order details, preferences, pickup or delivery choices, and related notes
• Loyalty program enrollment, redemptions, and usage history
• Payment information in tokenized form only (card numbers and full PANs are not stored by Appetier)
• Device and technical information (such as IP address, browser or device type, and basic diagnostic logs) collected for fraud prevention, stability, and performance
• We do not collect precise geolocation, biometric data, or other sensitive categories of personal information

How we use your information

Data is used only to support restaurant operations and improve your experience.

• Process and route orders to restaurants
• Provide receipts, confirmations, and order status updates
• Manage restaurant loyalty programs and rewards
• Prevent fraud and maintain platform security
• Improve reliability, performance, and product features
• Provide customer support when needed

No data selling

Your information is not a product.

• We do not sell or rent personal information
• We do not share personal information for cross-site advertising or behavioral ad targeting
• We do not use third-party tracking pixels or ad beacons for advertising

Data retention

We keep data only as long as needed to support restaurant operations or as required by law.

• Retention periods vary by data type and applicable legal or regulatory requirements
• Restaurants may retain order history for tax, accounting, or food safety obligations
• You can request deletion of your account data, subject to restaurant and legal obligations

Your choices

• Request access, updates, or deletion of your account data
• Opt out of marketing communications from restaurants where available
• Control device-level settings related to notifications
• Note: Appetier does not use non-essential cookies or trackers for advertising

Security

We use modern security practices to protect data and rely on PCI DSS Level 1 certified partners for payment processing.

• All cardholder data is handled by PCI DSS Level 1 certified payment partners via secure hosted payment fields
• Appetier is PCI compliant under SAQ A and does not receive or store raw card numbers
• Card data is tokenized and transmitted directly from the guest’s browser or device to the payment provider
• Data in transit is protected with TLS encryption and data at rest is stored using industry-standard encryption where applicable
• Access to operational systems is restricted and monitored

Contact

For privacy questions or requests, contact privacy@appetier.com.