Privacy Policy

Last updated: April 13, 2026

posdoo ("we", "us", or "our") operates a restaurant management platform accessible at this domain. This Privacy Policy explains how we collect, use, and protect information when you use our service.

1. Information We Collect

Account information: email address, name, and password when you register.
Business data: orders, inventory records, schedules, supplier information, and sales data that you enter into the platform.
Google account data: if you connect a Gmail account via OAuth, we request read-only access to that inbox solely to import vendor invoices and sales reports. We do not read, store, or share any email content beyond what is needed for that import.
Usage data: basic server logs (IP address, timestamps) for security and debugging purposes.

2. How We Use Your Information

To provide and operate the posdoo platform.
To send transactional emails (purchase orders to suppliers, employee login credentials).
To import sales and invoice data from connected Gmail accounts, only with your explicit authorization.
We do not sell, rent, or share your data with third parties for marketing purposes.

3. Google API Data

posdoo's use of data obtained from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only request Gmail read-only scope and only for the purpose of importing vendor invoice attachments.
We do not transfer Google user data to third parties except as necessary to provide the service.
We do not use Google user data for advertising.
You can revoke Gmail access at any time from your Google Account settings or from within posdoo's Settings page.

4. Data Storage and Security

Your data is stored on secure servers (Render.com infrastructure). We use industry-standard measures including encrypted connections (HTTPS) and hashed passwords. No method of transmission over the internet is 100% secure, but we take all reasonable precautions.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated data by contacting us.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at ristolab.orders@gmail.com.

7. Third-Party Services

We use the following third-party services: Google (Gmail OAuth, Fonts), Render.com (hosting), and Anthropic (AI-assisted data extraction from PDF invoices). Each service has its own privacy policy.

8. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes by posting the new policy on this page with an updated date.

9. Contact

For privacy-related questions, contact us at ristolab.orders@gmail.com.

← Back to posdoo