Privacy Policy

1. Introduction

Wabiit ("we," "us," or "our") provides software and related services that help restaurants operate branded online ordering experiences, including integrations with payment and delivery partners. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, submit a lead or demo request, or use our services on behalf of a restaurant business.

By using our website or services, you agree to this Privacy Policy. If you do not agree, please do not use our site or services.

2. Information we collect

We may collect the following categories of information:

• Contact and lead information. When you request a demo, contact sales, or submit a business inquiry, we collect details you provide, such as name, restaurant name, email address, phone number, and other notes you choose to include.
• Account and service data. If you or your organization become a customer, we collect information needed to deliver and support the services, which may include business identifiers, configuration data, integration settings, and communications with our team.
• End-customer data (on behalf of restaurants). When customers place orders through a Wabiit-powered storefront, we store on the restaurant's behalf: customer name, phone number, email address, delivery addresses, and order history. This data is used solely to operate the ordering experience for that restaurant.
• Technical and usage data. We may collect IP address, browser type, device information, general location derived from IP, pages viewed, referring URLs, and similar diagnostics to operate and improve our website and services.
• Information from integrations. Where you or your restaurant authorize connections (for example, payment or point-of-sale platforms), we may process data made available through those integrations as described in your agreements with us and as needed to provide the services.

3. What we do not collect — payment card data

Wabiit does not collect, store, or process credit card numbers, CVV codes, bank account numbers, or any other sensitive payment card information on our servers. All payment transactions are processed directly and securely by Square, Inc., a PCI DSS Level 1 certified payment processor — the highest level of certification available in the payments industry.

Loyalty program data, saved payment methods, and related financial information are stored and managed exclusively within Square's PCI-compliant infrastructure. We never have access to raw card data. For more information about how Square handles payment data, please review Square's Privacy Policy at squareup.com.

4. How we use information

We use information for purposes such as:

• Responding to inquiries, scheduling demos, and evaluating commercial opportunities;
• Providing, configuring, securing, and improving our products and services;
• Communicating about onboarding, support, service changes, and relevant business updates;
• Detecting, preventing, and addressing fraud, abuse, or technical issues;
• Complying with legal obligations and enforcing our terms; and
• Aggregating or de-identifying data where permitted for analytics and product development.

5. How we share information

We may share information in these situations:

• Service providers. With vendors who assist us (for example, hosting, analytics, email delivery, or customer support tools), subject to confidentiality and processing terms.
• Integrations you authorize. With third-party platforms you or your restaurant connect to the services, according to your configuration and those parties' policies.
• Legal and safety. When we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Wabiit, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We do not sell your personal information as that term is commonly understood.

6. Retention and data deletion upon offboarding

We retain information for as long as necessary to fulfill the purposes described in this policy, unless a longer period is required or permitted by law. Retention periods may depend on whether you are a prospect, customer, or former customer, and the nature of the data.

When a restaurant permanently offboards from the Wabiit platform, we delete all associated end-customer data — including names, contact information, delivery addresses, and order history — within a reasonable period following termination of service. Restaurant owners may request early deletion by contacting us at hello@wabiit.com.

7. Security

We implement technical and organizational measures designed to protect information against unauthorized access, loss, or alteration. Data is stored on AWS infrastructure with encryption at rest and in transit. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal information, or to object to or limit certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights that apply to you, contact us using the options available on our website (for example, the contact or demo flows). We may need to verify your request before responding.

9. International transfers

We may process information in the United States and other countries where we or our service providers operate. Those locations may have different data protection rules than your country. Where required, we use appropriate safeguards for cross-border transfers.

10. Children's privacy

Our services are directed to businesses and adults. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through additional notice where appropriate.

12. Contact

For privacy-related questions, email us at hello@wabiit.com or reach out through the contact or business inquiry options on our website.