Privacy Policy
margherita is a restaurant management platform operated by Boldrope Inc. (incorporation pending in Ontario, Canada) ("we", "us", "our"). This policy explains what personal information we collect, why, who we share it with, and the rights you and the people whose data you bring onto the platform have under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Our two roles
We handle personal information in two distinct capacities:
- As the business you deal with directly — for your account data (email, password, login activity) and demo/lead submissions, we are responsible for the information.
- As a service provider to your restaurant — for the information your business enters about its employees and operations (names, contact details, wages, schedules, hours worked), your restaurant remains accountable under PIPEDA and we process it only to provide the service, on your instructions. Your staff should direct access or correction requests to their employer first; we assist the employer in fulfilling them.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email, hashed password, role, last login | You, at signup/login |
| Employee data | Names, personal emails, hourly wages, shifts, hours, time-off requests | Entered by your restaurant's managers |
| Business records | Supplier invoices, orders, inventory, recipes, sales reports | Uploaded or entered by your team; may incidentally contain personal data (e.g. a supplier rep's name) |
| Connected accounts | Gmail OAuth tokens (read-only invoice/report import), Meta tokens (social posting) | Only if you connect them |
| Technical data | IP address, timestamps, request logs, audit and impersonation logs | Automatic, for security |
| Demo leads | Name, email, restaurant name, IP | The public demo on our website |
We collect only what the service needs (PIPEDA limiting-collection principle). We use no advertising or cross-site tracking cookies — the cookies we do use are described in section 2a below.
2a. Cookies on our public pages
Before you have an account, our landing, demo and legal pages use two kinds of cookie:
- Strictly necessary — session and security cookies (e.g. keeping you logged in, CSRF protection). These are always on and don't require consent under PIPEDA.
- Analytics (visitor journey) — a single
visitor_idcookie, set only if you accept it in the cookie banner, that lets us see the path an anonymous visitor takes (viewed the landing page, clicked "Start free trial", completed or abandoned signup) and which site referred you here (for example a Facebook or Instagram link, including campaign tags in the link itself). It does not carry your name, email, or IP address, expires after 1 year, and is never sold or shared with advertisers. Declining it only turns off this journey view — the site works identically either way.
You can withdraw consent at any time by clearing your browser cookies for margherita or by contacting us (see section 10).
3. Why we use it
- Operating the platform: scheduling, costing, ordering, invoicing, analytics.
- Transactional email (purchase orders to suppliers, schedule notifications, password resets). These identify us as sender, per Canada's Anti-Spam Legislation (CASL).
- AI-assisted extraction: invoices and sales reports you upload are processed by Anthropic's Claude models to extract line items. They are used only to produce your results and are not used by us to train models.
- Security: rate limiting, audit logging of administrative actions (including any platform-staff impersonation of accounts, which is recorded).
- We do not sell or rent personal information, and we do not use it for third-party advertising.
4. Service providers (subprocessors)
We use a small set of providers to run the service. Some are located in the United States, which means information may be processed outside Canada and be subject to the laws of those jurisdictions:
| Provider | Purpose | Location |
|---|---|---|
| Render | Application hosting | USA |
| Supabase | Database & file storage | USA |
| Anthropic | AI document extraction | USA |
| Resend | Transactional email delivery | USA |
| Sentry | Error monitoring (technical error reports may include the account email of the affected user) | USA |
| Google / Meta | Only if you connect Gmail or social accounts | USA |
Payment processing is not currently integrated. When paid plans launch, the provider (e.g. Stripe) will be disclosed here and in the Terms.
5. Google API data
Our use of data obtained from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements:
- We request Gmail read-only scope solely to import vendor invoice attachments and POS reports you've configured rules for.
- We do not transfer Google user data to third parties except as necessary to provide the service, and never for advertising.
- You can revoke access at any time from your Google Account or from the platform's Settings page.
6. Retention and deletion
- We keep your data while your subscription or trial is active.
- After an account is closed, data is retained for 90 days (so you can change your mind or export), then deleted from production systems; encrypted backups age out on a rolling schedule thereafter.
- Records we are legally required to keep (e.g. tax records, where applicable under Canadian law) are retained for the required period.
7. Your rights
Under PIPEDA you may request access to, correction of, or deletion of your personal information, withdraw consent (which may limit the service we can provide), and ask questions about our practices. We respond within 30 days. Restaurant owners can also request a full export of their company's data or its deletion. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.
8. Security and breach notification
Passwords are hashed, connections are encrypted (HTTPS), administrative access is logged, and tenant data is isolated per company. If a breach of security safeguards creates a real risk of significant harm, we will notify the Privacy Commissioner and affected individuals as required by PIPEDA.
9. Changes
We will post updates here with a new date and version, and notify account owners by email of material changes at least 30 days before they take effect.
10. Privacy Officer & contact
Boldrope Inc. has designated a Privacy Officer responsible for PIPEDA compliance. For privacy questions, access requests, or complaints: privacy@boldrope.com.
← Terms & overview