Privacy Policy

FlipNosh ("we", "us", "our") is a software platform that helps restaurants build and operate branded direct-ordering storefronts and customer engagement tools.

We are committed to being transparent about how we handle data. This Privacy Policy explains what information we collect, why we collect it, and how we use it. By using FlipNosh, you agree to the practices described here.

Restaurant account information

When a restaurant signs up, we collect:

• Business name, email address, and phone number
• Restaurant details (address, description, cuisine type)
• Menu content, pricing, and availability
• Billing information (handled securely via Stripe)

Customer order information

When customers place orders through a restaurant's FlipNosh storefront, we collect:

• Name, email address, and phone number
• Delivery address (where applicable)
• Order contents and special requests

Technical information

We automatically collect standard technical data, including:

• Browser type and device information
• IP address and approximate location
• Usage and analytics data to improve platform performance

We use collected information to:

• Operate and maintain the FlipNosh platform
• Process and facilitate restaurant orders
• Improve features and product functionality
• Provide technical support to restaurants
• Send operational communications (account updates, billing, security)
• Monitor performance, detect fraud, and maintain platform security

We do not use your data for advertising purposes, and we do not sell it to third parties.

Payments are processed securely through Stripe, a leading payment infrastructure provider trusted by millions of businesses worldwide.

FlipNosh does not store full card numbers or sensitive payment credentials. All payment data is handled directly by Stripe in accordance with their PCI-DSS compliance standards.

FlipNosh does not sell customer or restaurant data. We only share data with trusted third parties where necessary to operate the platform:

• Payment processors (Stripe) — to process transactions
• Cloud infrastructure providers — to host and run the platform
• Communication providers — to deliver transactional emails or SMS
• Legal authorities — where required by applicable law

All third-party providers are carefully selected and required to maintain appropriate data protection standards.

FlipNosh uses cookies and analytics tools to understand how the platform is used and to improve the experience for restaurants and their customers.

Essential cookies are required for the platform to function correctly (for example, to keep you logged in). You can manage non-essential cookies through your browser settings, though disabling certain cookies may affect platform functionality.

We retain account and usage data for as long as your account is active or as required for operational and legal purposes.

If you wish to delete your account and associated data, please contact us at legal@flipnosh.com. We will process requests in accordance with applicable law.

We use industry-standard measures to protect data, including encrypted connections (HTTPS), secure cloud infrastructure, and access controls that limit who can access sensitive information.

No online system is completely immune to security risks. While we work hard to protect your data, we cannot guarantee absolute security and encourage restaurants to follow good security practices on their end.

Restaurants that use FlipNosh to collect and manage customer data are acting as data controllers for their own customers. Restaurants are responsible for:

• Handling customer communications appropriately
• Complying with applicable local privacy and data protection laws
• Ensuring compliance with GDPR, where applicable

FlipNosh provides the tools; restaurants are responsible for how they use them in relation to their customers.

FlipNosh is not intended for use by children under the age of 13. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

We may update this Privacy Policy as the platform evolves, to reflect changes in our practices or for legal and operational reasons.

We will notify account holders of significant changes via email. Continued use of the platform after changes take effect constitutes acceptance of the updated policy. The "last updated" date at the top of this page indicates when it was last revised.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please get in touch.