Legal
Privacy Policy
No cookies. No data selling. Data only moves to power restaurant operations.
Appetier, Inc., a Delaware corporation, is responsible for the information described in this policy. Appetier provides restaurants with a unified operating system for online ordering, loyalty programs, branded mobile apps, menu management, and customer engagement. We are committed to protecting your privacy and collect only the information needed to support restaurant operations.
Last updated:October 2, 2026
Information we collect
When you interact with a restaurant powered by Appetier, we collect only what is needed to fulfill your requests and keep the experience secure.
- Information you provide directly, such as your name, email, and phone number
- Order details, preferences, pickup or delivery choices, and related notes
- Loyalty program enrollment, redemptions, and usage history
- Payment information in tokenized form only (card numbers and full PANs are not stored by Appetier)
- Device and technical information (such as IP address, browser or device type, and basic diagnostic logs) collected for fraud prevention, stability, and performance
- We do not collect precise geolocation, biometric data, or other sensitive categories of personal information
How we use your information
Data is used only to support restaurant operations and improve your experience.
- Process and route orders to restaurants
- Provide receipts, confirmations, and order status updates
- Manage restaurant loyalty programs and rewards
- Prevent fraud and maintain platform security, including a Cloudflare Turnstile check on our forms that tells people from bots
- Improve reliability, performance, and product features
- Provide customer support when needed
No data selling
Your information is not a product.
- We do not sell or rent personal information
- We do not share personal information for cross-site advertising or behavioral ad targeting
- We do not use third-party tracking pixels or ad beacons for advertising
Connected social accounts
A restaurant can connect its social accounts, such as Instagram, Facebook, TikTok, or X, so Appetier publishes the posts it approves. Appetier posts to its own accounts the same way.
- What we store: the account's name and id, and the access and refresh tokens the network issues. The tokens are encrypted in AWS Systems Manager and never shown in the console
- What we do with them: publish the posts the account owner approves, at their scheduled time. We also read each post's public results (views, likes, comments, and shares) to report them to the owner
- What we never do: read direct messages, collect followers' personal information, sell this data, or use it for advertising
- Disconnecting an account in the Appetier console deletes its tokens at once
- Removing Appetier in your Facebook, Instagram, or Threads settings tells Meta to notify us, and we delete that account's tokens
- To delete everything we hold about a connected account, email privacy@appetier.com. We delete it within 30 days
- Posting to YouTube uses YouTube API Services, so YouTube's Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy) also apply. You can revoke Appetier's access at https://myaccount.google.com/permissions
Ordering through an AI assistant
A guest can find a restaurant on Appetier from an AI assistant, build an order there, and pay on the restaurant's own checkout. The assistant never sees a card number or a contact detail.
- What we receive: the menu items an assistant asks about and the cart it builds. We also receive the request's network address and any anonymous user id the assistant sends. We never receive a guest's name, contact details, address, precise location, or payment information from an assistant
- Why we use it: to answer with the restaurant's live menu and prices, and to hand the cart to the restaurant's checkout. The address and user id limit how often one caller can ask, which stops abuse
- Who receives it: the restaurant the order is for, once the guest pays on its checkout. The assistant's provider receives our answers to its requests, under its own privacy policy. We share it with no one else
- How long we keep it: a cart handed to checkout is deleted after 30 minutes. The network address and user id are deleted within 30 days, and usually within an hour. An order the guest places is kept like any other order
- A restaurant can turn off ordering through AI assistants in the Appetier console
Free website audit
Anyone can ask Appetier to audit a restaurant website. Requesting an audit includes agreeing to Appetier marketing email.
- What we collect: your first and last name, work email, role if you give it, the website you enter, and how you found the audit, such as a campaign tag
- Why we use it: to run the audit, email you the report, follow up about Appetier, and send Appetier tips and product news
- Who receives it: Appetier stores it in its own systems. We share it with no one else
- How long we keep it: the audit and its results are deleted after 90 days. Your contact record, with when you agreed to email, stays until you ask us to delete it
- Every marketing email has a one-click unsubscribe link. To delete your contact record, email privacy@appetier.com. We delete it within 30 days
Asking Sous on our website
Sous answers questions on appetier.com from what Appetier publishes. When Sous isn't sure, a person on the Appetier team answers.
- What we collect: the questions you type and the choices you tap, such as your location count and POS. If you ask for a reply by email, also your name, email, and restaurant. If you ask for a call back, also your name and phone number
- Why we use it: to answer you, and to email the answer or a summary or call you back when you ask. We also follow up if you ask, and learn which questions to answer better
- Who receives it: Anthropic, the model provider, processes your question to write an answer. A question Sous can't answer goes to the Appetier team's private chat with any email or phone number removed. If you ask for a reply, Appetier stores your details and the conversation in its own systems
- How long we keep it: the conversation is deleted after 30 days. A contact record you asked for stays until you ask us to delete it
- To delete a conversation or a contact record, email privacy@appetier.com. We delete it within 30 days
Data retention
We keep data only as long as needed to support restaurant operations or as required by law.
- Retention periods vary by data type and applicable legal or regulatory requirements
- Restaurants may retain order history for tax, accounting, or food safety obligations
- You can request deletion of your account data, subject to restaurant and legal obligations
Your choices
- Request access, updates, or deletion of your account data
- Opt out of marketing communications from restaurants where available
- Control device-level settings related to notifications
- Note: Appetier does not use non-essential cookies or trackers for advertising
Security
We use modern security practices to protect data and rely on PCI DSS Level 1 certified partners for payment processing.
- All cardholder data is handled by PCI DSS Level 1 certified payment partners, through secure hosted payment fields online and card readers in person
- Appetier is PCI compliant under SAQ A and does not receive or store raw card numbers
- Card data is tokenized and transmitted directly from the guest’s browser or device to the payment provider
- Data in transit is protected with TLS encryption and data at rest is stored using industry-standard encryption where applicable
- Access to operational systems is restricted and monitored
Contact
For privacy questions or requests, contact privacy@appetier.com.
