Privacy Policy

Effective October 31, 2026

This policy describes how the operator of PlateWize (“we,” “us,” or “PlateWize”) handles information through our website and restaurant management services. For privacy questions or requests, contact support@platewize.com.

1. Information we collect

• Account and organization information: name, email, sign-in identifiers, restaurant details, staff roles, invitations, access permissions, and preferences.
• Content you provide: invoices, supplier catalogs, menus, recipes, photos, documents, forwarded emails and attachments, operational records, and feedback. These may contain supplier or staff contact details and other personal information included by you or your organization.
• Connected-service information: where a connection is available and authorized, the account identifiers, authorization tokens, records, and documents needed for the functionality you select.
• Service and device information: IP addresses, browser and device information, request timestamps, usage and audit events, error details, and security logs.
• Support communications: messages and information you send when requesting help or reporting an issue.

We receive information from you, your organization's authorized users, the services you authorize, and your browser or device. Please avoid including personal or sensitive information that is not needed for the task.

2. How we use information

We use information to create and secure accounts; manage organization access; store and read documents; extract and organize invoice and menu information; calculate costs and provide suggestions; deliver requested integrations; send account and service messages; respond to support requests; investigate errors and abuse; and meet legal obligations. Operational information also helps us understand performance and improve reliability.

Depending on the context and applicable law, we process personal information to provide the requested service, pursue legitimate interests in operating and securing it, meet legal obligations, or act on consent. Where processing depends on consent, you may withdraw it by contacting us or using the relevant provider's controls.

3. AI-assisted processing

PlateWize uses AI providers, including OpenAI and, where configured, Anthropic, to process documents, images, and relevant task inputs. This can include the full document you submit and personal information visible in it, even when the extracted result omits those details. Outputs and corrections are stored as part of your restaurant's records and workflow.

AI outputs may be inaccurate and should be reviewed against the original records. Provider processing and retention depend on the service and configuration used; this policy does not promise zero retention by every provider. Contact us for information about the providers used for your workflow before submitting material with special confidentiality requirements.

4. When information is shared

• Your organization: information is available to authorized users according to their access permissions. Organization administrators manage membership and roles.
• Service providers: we use providers for cloud hosting and storage, sign-in, email delivery, AI processing, and operational monitoring. These include Amazon Web Services for infrastructure and email, Google Firebase for supported sign-in flows, and the AI providers described above. Where configured, Langfuse receives operational tracing metadata.
• Services you authorize: we exchange information needed for the integration or action you request.
• Legal and safety purposes: we may disclose information when required by law or reasonably necessary to protect rights, investigate misuse, or address security threats.
• Business changes: information may be transferred as part of a business transfer or reorganization, subject to applicable privacy obligations and any required notice.

We do not sell personal information or share it for cross-context behavioral advertising. Our public website does not use advertising trackers. Information is shared with service providers for operating the Service, not to make customer documents publicly available.

5. Connected services

When you choose to connect an available third-party service, we access the records and documents needed for the functionality you authorize. The information available depends on the connection and the permissions you grant. Mentioning connected services in this policy does not announce the availability of any particular integration.

We use connected-service information within the permissions and purposes you authorize. PlateWize operates independently of connected-service providers and does not process this information on their behalf. Each provider's handling of information in its own services is governed by its privacy terms.

You may revoke access using the provider's connection controls or contact us for assistance. We will stop access and processing when the applicable authorization is withdrawn, except where legally required. Disconnecting does not itself erase records already imported; email us to request deletion of those records. We do not use information imported from connected services to train shared AI models or create cross-customer supplier-price datasets.

6. Cookies and browser storage

The application and its sign-in providers use cookies or similar storage to maintain authentication, secure sessions, remember preferences, and support workflows. PlateWize also uses local browser storage for settings, navigation, and pending uploads; this can include document names or files awaiting upload. Browser controls can clear or restrict this storage, but doing so may sign you out, reset preferences, or remove pending uploads. Use care on shared devices.

7. Retention, deletion, and security

We retain information as needed to provide the Service, maintain your organization's records, address support and security issues, and comply with legal obligations. Retention depends on the information's purpose, account status, and applicable requirements. Deleting an item in the application may archive it rather than permanently erase every copy.

For account closure, access to your information, or permanent deletion requests, email support@platewize.com. We may verify your identity and authority and coordinate with your organization before acting. Shared business records may be controlled by your organization rather than an individual staff member. Some information may need to be retained for legal obligations or legitimate security needs. Backup copies may remain until they expire or are replaced, subject to applicable deletion requirements.

We use technical and organizational safeguards designed to limit unauthorized access, including access controls and protected communications. No internet transmission or storage system is completely secure.

8. Your choices and privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a copy of personal information, restrict or object to processing, or withdraw consent. Send requests to support@platewize.com. We will respond as required by applicable law. You may also have the right to complain to your local privacy regulator. We do not discriminate against people for exercising applicable privacy rights.

If your employer or restaurant manages your account, contact its administrator about organizational permissions and records. You can also contact us for assistance.

9. International processing and children

Our infrastructure and providers may process information in the United States and other countries, which may have different privacy laws from your location. Where required, transfers must use safeguards recognized by applicable law. Contact us before providing information subject to special regional restrictions.

The Service is intended for adult business users and is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

10. Updates and contact

We may update this policy as our services or practices change. We will post the revised policy and effective date here, and provide additional notice or obtain consent when required. Privacy questions and requests: support@platewize.com.