Privacy Policy for Zorgo App

1. Introduction

Welcome to Zorgo ("App"), provided by Zorgo Inc ("we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect information in relation to our mobile application, Zorgo, which allows authorized restaurant personnel to view online orders and manage certain restaurant configurations.

This Privacy Policy applies to all users of the Zorgo App (including restaurant staff, managers, and owners – collectively "App Users"). By downloading, accessing, or using the Zorgo App, you agree to the terms of this Privacy Policy.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: clawsorgo@gmail.com.

2. Information We Collect

We collect and process the following types of information:

a. Information You Provide Through Google Sign-In:

When you, as an App User, create an account or log into the Zorgo App using Google Sign-In, we collect personal information from your Google account, including:

• Your Name
• Your Email Address
• Your Profile Picture (if available)
• Your Google Account User ID (UID) This information is used to authenticate you and manage your Zorgo App account.

b. Restaurant Order Information (Accessed from Your Restaurant's System):

Once an authorized App User is logged in, the App accesses and displays information about online orders associated with their designated restaurant. This information originates from your restaurant's online ordering system (e.g., your website) and is stored on our backend servers. This information includes:

• End customer name associated with an order
• End customer phone number associated with an order
• Time the order was placed
• Items ordered
• Price of the order
• Order status

c. Printer Information (for Order Printing Feature):

If you use the feature to print orders to a kitchen printer, the App will discover compatible Star printers on your local network. For this purpose, the App may access:

• Printer Model Number
• Printer LAN IP Address This information is collected using Star Printer Discovery technology and is used ephemerally (temporarily) within the App to facilitate printing.

d. Restaurant Configuration Information (for Owners):

If you are a restaurant owner, you may use the Zorgo App to modify certain configurations for your restaurant, such as available items, item modifications, and promotions. This information is submitted through the App and stored on our backend.

We do not knowingly collect information from App Users that is typically considered sensitive (e.g., health information, biometric data) beyond what is listed above. The App does not collect automated crash reports or diagnostic data that is transmitted to Zorgo Inc; any operational logs are for local console display during development or testing only.

3. Mobile Numbers and SMS Messaging

Zorgo Inc operates an SMS notification program, Zorgo Staff Alerts, for authorized restaurant personnel. This section describes how we handle mobile numbers and SMS consent. The full program terms are available at zorgotech.com/tc.

a. When We Collect a Mobile Number:

We collect a mobile number only when an App User voluntarily enters one in their Zorgo account notification settings and explicitly checks a consent box agreeing to receive text messages. The consent checkbox is never pre-selected. We then send a one-time verification code to that number and record consent only after the code is entered correctly, which confirms the number belongs to the person enrolling it.

Providing a mobile number is optional. It is not required to create or use a Zorgo account, and it is not a condition of employment or of any purchase.

When an App User opts in, we store:

• The verified mobile number
• Whether SMS consent is currently granted or withdrawn
• The date and time consent was granted, and the date and time it was withdrawn, if applicable
• The locations the App User has chosen to receive alerts about

b. How We Use Mobile Numbers:

We use a verified mobile number solely to send the operational, account-related messages the App User asked for:

• Alerts that a catering order has been placed, changed, or cancelled at a location the App User selected
• One-time verification codes used to confirm ownership of the number
• Confirmation messages when the App User opts in or opts out

We do not send marketing or promotional text messages, and we do not use mobile numbers for advertising, profiling, or any purpose other than the program described above.

c. Sharing of Mobile Information:

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We share mobile numbers with our SMS delivery provider, Twilio Inc., only to the extent necessary to deliver the messages an App User has requested. We do not sell mobile numbers.

d. Opting Out:

An App User can withdraw SMS consent at any time by replying STOP to any message from the program, or by turning alerts off in their Zorgo notification settings. Replying STOP sends one confirmation message and ends all further messages in the program. Replying HELP returns our support contact information.

Withdrawing SMS consent does not affect the App User's Zorgo account, their access to the platform, or any email notifications they have enabled.

e. Retention of Mobile Information:

A verified mobile number is retained for as long as the App User's account is active or until the App User removes it. The consent record — that consent was granted, when, and when it was withdrawn — is retained after opt-out as a compliance audit record, as we are required to be able to demonstrate that consent was obtained and honored.

f. End Customer Phone Numbers Are Separate:

The end customer phone numbers described in Section 2(b) are collected as part of restaurant order records. They are not enrolled in Zorgo Staff Alerts and are never used to send messages under this program.

4. How We Use Your Information

We use the information we collect and access for the following purposes:

To Provide and Manage the App:

• To authenticate App Users and create/manage their Zorgo App accounts using Google Sign-In information.
• To allow App Users (staff/managers) to view relevant online order details for their designated restaurant.
• To allow App Users (staff/managers) to print orders to compatible kitchen printers using the printer information discovered.
• To allow App Users with owner permissions to modify restaurant configurations (e.g., menu items, promotions) through the App.
• To ensure App Users only access data for their specific restaurant, enforced by Row Level Security on our backend.

To Improve Our Services:

• Anonymized information regarding app usage patterns may be used to improve app stability and functionality.

For Zorgo Inc's Internal Analytics and Business Purposes:

• We use historical order data (which includes end customer personal information) stored on our backend systems for our own internal analytics and business intelligence, such as tracking revenue and understanding service usage patterns.

To Communicate With You:

• We may use your email address (obtained via Google Sign-In) to communicate with you about your account, service updates, or respond to your inquiries.

5. How We Share Your Information

We do not sell your personal information. We may share information under the following circumstances:

With Your Restaurant's System (Our Backend):

• Information collected (like Google UID for authentication) and information generated through the App (like configuration changes made by owners) is processed and stored on our backend systems, which also house the order data accessed by the App.

With Service Providers:

We engage third-party companies and individuals to facilitate our App and provide services on our behalf. These service providers process your information only on our instructions and for the purposes outlined in this Privacy Policy. Our service providers include:

• Google LLC: For Google Sign-In authentication.
• Vercel Inc.: Hosts our backend application.
• Amazon Web Services (AWS) (via Supabase Inc.): Supabase provides our database hosting, which is built on AWS infrastructure. These systems store the information we collect and process.
• Twilio Inc.: Delivers the text messages described in Section 3 to App Users who have opted in, and delivers the one-time codes used to verify a mobile number. Twilio receives a mobile number only for the purpose of delivering those messages.

These providers have access to your information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

For Analytics Viewed by Restaurant Owners (Aggregated Data):

• The Zorgo App transmits aggregated financial data (e.g., total revenue) derived from order information to our backend. Restaurant owners can then view these aggregated analytics for their specific restaurant on a separate website owned and operated by Zorgo Inc. This analytics view on the separate website does not display personal information of end customers.

For Legal Reasons:

• We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud, act in urgent circumstances to protect the personal safety of users of the App or the public, or protect against legal liability.

In Connection with a Business Transfer:

• We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. We will notify you before your Personal Information is transferred and becomes subject to a different Privacy Policy.

6. Data Security

We are committed to protecting the security of your information. We use a variety of security technologies and procedures to help protect your information from unauthorized access, use, or disclosure. These measures include:

• Encryption: We use HTTPS to encrypt data transmitted between the App and our backend. Our database, hosted via Supabase, provides encryption at rest by default.
• Access Controls: We implement Row Level Security on our backend to ensure that App Users can only access data pertaining to their authorized restaurant. Access to our backend systems by Zorgo Inc personnel is protected by two-factor authentication.
• Ephemeral Storage: Printer IP addresses and model numbers are stored ephemerally (temporarily) in the App's memory (Redux state) and are only used during an active printing session. This information is not persistently stored by the App.
• Google Account Security: Google Sign-In is managed by Google's secure authentication mechanisms.

Please be aware that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

7. Data Retention

We retain information as follows:

Google Account Information (Name, Email, Profile Picture, UID) and Restaurant Configurations:

This information associated with your Zorgo App account and any restaurant configurations made by an owner through the App are retained as long as the App User account is active. This information will be deleted upon an App User's request (see "Your Rights and Choices" below).

Historical Order Data (Including End Customer Personal Information):

All historical order data (including end customer name, phone number, items ordered, price, order time) that is processed by our systems and made accessible through the Zorgo App is retained by Zorgo Inc indefinitely on our backend systems. This data is retained for Zorgo Inc's internal analytics and business intelligence purposes, such as tracking revenue and service usage. This order data is not deleted when an App User's account is deleted, nor can it be deleted upon request by an end customer or App User.

Printer Information:

Printer model numbers and LAN IP addresses are used ephemerally for printing and are not retained by the App or our backend systems after the printing session.

8. Your Rights and Choices

We aim to provide you with reasonable control over your personal information.

Access to Your Information:

• App Users: You can access and review your Google Account information (name, email, profile picture) within the App or through your Google account settings. You can view relevant order data for your restaurant and, if you are an owner, your restaurant configurations directly within the Zorgo App.
• End Customers: If you are an end customer whose information is contained within an order processed by a restaurant using Zorgo, you may inquire about your data by contacting Zorgo Inc at clawsorgo@gmail.com.

Correction of Your Information:

• App Users: You can correct your Google Account information through your Google account settings. Restaurant owners can correct their restaurant configurations (e.g., menu items, promotions) directly within the Zorgo App.
• If you believe there is an error in the historical order data displayed in the App, please contact us at clawsorgo@gmail.com to request a correction. We will address such requests in accordance with applicable law.

Deletion of Your Information:

• App User Accounts and Restaurant Configurations: If you are an App User and wish to delete your Zorgo App account (which includes your Google Account link and profile information used by Zorgo) and/or, if you are an owner, your restaurant configurations made through the App, you must email your request to clawsorgo@gmail.com. Upon receiving and verifying your request, we will delete this specific information from our systems.
• Historical Order Data: As stated in the "Data Retention" section, historical order data (containing end customer personal information) is retained indefinitely by Zorgo Inc for its internal analytics purposes and will not be deleted, even if an App User's account is deleted or an end customer makes such a request.

Object to Processing / Withdraw Consent:

• You can withdraw your consent to our processing of your Google Account information and restaurant configuration data by ceasing to use the Zorgo App and requesting the deletion of your App User account as described above.
• You cannot opt-out of the processing of historical order data for Zorgo Inc's internal analytics purposes, as this data is retained and used as described in this policy.

Data Portability:

• We do not offer a data portability service for restaurant order data or configuration data at this time.

To exercise any of these rights (where applicable), please contact us at clawsorgo@gmail.com. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.

9. Children's Privacy

The Zorgo App is not intended for or directed at individuals under the age of 13 (or the relevant age of consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you believe that we might have any information from or about a child under 13, please contact us at clawsorgo@gmail.com.

10. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Our service providers (such as Google, Vercel, and AWS/Supabase) operate globally. If you are located outside the United States and choose to use the Zorgo App, please note that we transfer data, including Personal Data, to the United States and other locations where our service providers operate, for processing. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website where the Zorgo App is promoted or where this policy is typically hosted. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page (or on our website). Your continued use of the App after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact Zorgo Inc at: clawsorgo@gmail.com