Privacy Policy

1 Information We Collect

We collect information you provide directly to us and information generated through your use of the Service:

• Restaurant Information: Business name, address, phone number, email address, business type, and other details you provide during registration and account setup.
• Account Credentials: Email address and hashed password for authentication. We never store your password in plain text.
• Billing Information: Payment card details are processed directly by Stripe and are never stored on our servers. We retain billing address and transaction records.
• Order Data: Customer orders, menu items, pricing, modifiers, and transaction records generated through your use of the POS and online ordering features.
• Customer Data (Your Customers): Name, contact information, and order history of your restaurant's customers that you enter or that is collected through online ordering.
• Usage Data: Log files, IP addresses, browser type, device information, pages visited, features used, and timestamps of activity within the platform.
• Communications: Messages and requests you send to our support team.

2 How We Use Information

We use the information we collect to:

• Provide the Service: Operate, maintain, and deliver the FornoCloud platform and its features to you.
• Process Payments: Facilitate billing and subscription management through Stripe.
• Send Communications: Deliver transactional emails (receipts, account alerts, password resets) and, with your consent, product updates and announcements via Resend.
• Improve the Product: Analyze usage patterns to enhance features, fix bugs, and develop new functionality. This analysis uses aggregated, anonymized data where possible.
• Customer Support: Respond to your inquiries and resolve issues with your account or the Service.
• Fraud Prevention: Detect, investigate, and prevent fraudulent transactions, abuse, and violations of our Terms of Service.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.

We do not sell your personal information to third parties. We do not use your data for advertising purposes unrelated to FornoCloud.

3 Data Storage

Your data is stored on servers located in the United States, operated by DigitalOcean. All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher.

We implement access controls, monitoring, and regular security assessments to protect your data. Only authorized FornoCloud personnel with a legitimate business need may access your data, and such access is logged and audited.

4 Third-Party Services

FornoCloud integrates with the following third-party service providers to deliver our platform. Each provider has its own privacy policy governing their handling of your data:

We share your data with these providers only to the extent necessary to deliver the Service. We do not authorize them to use your data for their own independent purposes.

5 Cookies

FornoCloud uses a minimal set of cookies necessary to operate the Service:

• Session Cookies: Used for authentication to keep you logged in during your session. These are essential and cannot be disabled without logging out.
• Preference Cookies: Store your language and interface preferences for a better experience.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies that monitor your behavior across websites. We do not use Google Analytics or similar cross-site trackers.

You can configure your browser to refuse all cookies, but this may prevent you from logging in or using certain features of the Service.

6 Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Active Accounts: All account data is retained for the duration of your subscription.
• After Cancellation: Account data, including your menu, order history, customer records, and settings, is retained for 90 days after account cancellation. This allows you to export your data or reactivate your account.
• Permanent Deletion: After 90 days, all your data is permanently and irreversibly deleted from our systems, including backups.
• Billing Records: Transaction records are retained for 7 years as required by tax and financial regulations.

7 Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data about you.
• Export: Request an export of your data in a machine-readable format (CSV, JSON) through your account settings or by contacting us.
• Deletion: Request deletion of your personal data, subject to our legal retention obligations.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to our processing of your data for certain purposes.

To exercise these rights, contact us at hello@fornocloud.com. We will respond within 30 days. We may need to verify your identity before processing your request.

8 CCPA Compliance — California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we collect, the sources, business purposes, and third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out: FornoCloud does not sell personal information, so there is no opt-out required. If this changes, we will update this policy and provide an opt-out mechanism.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at hello@fornocloud.com with the subject line "CCPA Request." We will respond within 45 days.

9 Children

FornoCloud is a business software platform intended for use by restaurant owners and operators. Our Service is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at hello@fornocloud.com and we will promptly delete such information.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Send an email notification to the email address associated with your account at least 30 days before the changes take effect
• Post the updated Privacy Policy on this page with a new "Last updated" date
• Display a prominent notice within the FornoCloud platform

We encourage you to review this policy periodically. Your continued use of FornoCloud after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

For non-material changes (such as clarifications or corrections), we may update this policy without prior notice and the changes will take effect immediately upon posting.