Privacy Policy

1. Who we are and our role

MagnetIQ Marketing Solutions c/o Barraza Professional Services LLC ("PlateLogic", "we", "us") operates the PlateLogic online ordering platform at plate-logic.com and on restaurant domains we host. Our registered address is 18203 Rim Dr 101-1008, San Antonio, TX 78257, USA.

PlateLogic serves two groups. For restaurant subscribers and their staff, we act as the controller of the account, billing and support data we need to run the platform. For diner data submitted through a restaurant's storefront (names, contact details, order contents, delivery addresses), the restaurant is the controller and PlateLogic acts as a processor or service provider that handles that data on the restaurant's instructions.

If you ordered food from a restaurant that uses PlateLogic and want your data changed or deleted, you may contact the restaurant directly or contact us and we will route your request to the correct restaurant.

2. Personal data we collect

Depending on how you use PlateLogic, we may collect:

• Account data: name, business name, email address, phone number, hashed password, role and permissions, staff PIN hashes, and multi-factor authentication settings.
• Order data: items ordered, modifiers, order notes, order totals, pickup/delivery/dine-in method, delivery address, table number, order status timestamps, and cancellation or refund requests.
• Payment data: the last four digits, card brand, and payment/transaction identifiers returned by our payment processor. We never receive or store full card numbers, CVV codes or bank credentials.
• Communication data: emails and SMS messages we send on a restaurant's behalf, delivery/bounce/complaint events, opt-out (STOP) status, and support correspondence.
• Reviews and loyalty data: ratings, review text, loyalty point balances, promotion redemptions and store credit.
• Device and usage data: IP address, browser and device type, pages and menus viewed, embed loads, checkout starts, order completions, push notification tokens, and error diagnostics.
• Location data: a restaurant's business address and geocoded coordinates, and a delivery address that a guest chooses to enter. We do not track a device's background location.

3. How and why we use personal data

We use personal data only for the purposes below, and each purpose has a lawful basis. We describe the GDPR-style basis even though PlateLogic is currently offered to United States businesses.

• Providing the Services — taking and routing orders, kitchen notifications, dispatching delivery, table and reservation management, and account access. Basis: performance of a contract.
• Payments, billing and fraud prevention, including subscription invoicing and refunds. Basis: contract and legitimate interests.
• Transactional messaging — order confirmations, status updates, receipts, password resets and verification. Basis: contract.
• Marketing messaging — promotions, loyalty offers and review requests. Basis: consent, and you can opt out at any time.
• Security, abuse prevention, audit logging and rate limiting. Basis: legitimate interests and legal obligation.
• Product analytics and improvement using aggregated or de-identified data wherever possible. Basis: legitimate interests.
• Legal compliance, tax records, and defending or bringing legal claims. Basis: legal obligation and legitimate interests.

We do not sell personal data, and we do not share personal data for cross-context behavioural advertising. We do not knowingly collect data from children under 13.

4. Service providers and subprocessors

We share personal data only with vendors that process it on our behalf under contract, or where you direct us to send it. Current categories include:

• Cloud hosting, database, authentication and file storage infrastructure.
• Stripe for card processing, Apple Pay and Google Pay, and subscription billing.
• Email delivery for transactional and opt-in messaging from notify.plate-logic.com.
• Twilio for SMS alerts and delivery/reply status events, where a restaurant enables texting.
• DoorDash Drive for courier dispatch, and Uber Eats, Favor and Postmates where a restaurant connects a marketplace.
• Toast, Clover, Square or a generic webhook where a restaurant connects a point-of-sale system.
• Google, Apple Maps, Yelp, Tripadvisor or Facebook, where a restaurant chooses to publish its menu feed. Menu feeds contain business and menu data, not guest data.
• Geocoding and mapping providers used to place a location pin and validate delivery ranges.

We may also disclose data to comply with law, enforce our Terms, protect rights and safety, or in connection with a merger, financing or sale of assets, in which case this policy continues to apply to the transferred data.

5. Cookies, analytics and tracking

We use strictly necessary cookies and local storage for sign-in sessions, cart contents, selected location, CSRF protection and accessibility preferences. We use first-party analytics events (embed loads, checkout starts, order completions) to report performance to restaurants. We do not run third-party advertising networks or cross-site ad trackers on our marketing site or on restaurant storefronts.

You can block or delete cookies in your browser. Blocking strictly necessary cookies will break sign-in and checkout.

6. Your privacy rights

Wherever you live, we honour the following rights on request, subject to verification and legal exceptions:

• Access — a copy of the personal data we hold about you.
• Rectification — correction of inaccurate or incomplete data.
• Erasure — deletion of your data, as described in our Data Deletion Policy.
• Portability — a machine-readable export of data you provided to us.
• Restriction and objection — including objecting to processing based on legitimate interests.
• Withdrawal of consent — for example unsubscribing from marketing email or replying STOP to SMS.
• Non-discrimination — we will not degrade your service for exercising a privacy right.

To exercise a right, email info@plate-logic.com with the email address or phone number used, and the restaurant involved if you are a diner. We respond within 30 days (45 days for California requests where an extension is permitted). If you are an EEA or UK resident you may also complain to your local supervisory authority; if we cannot resolve a California request you may contact the California Privacy Protection Agency.

7. Retention

We keep personal data only as long as needed for the purpose it was collected, then delete or de-identify it. Typical periods: order and receipt records for up to 7 years for tax and dispute purposes; account and staff records for the life of the subscription plus 90 days; messaging delivery logs and suppression records for up to 24 months (suppression/opt-out entries are kept indefinitely so we do not message you again); audit and security logs for up to 24 months; analytics events in aggregated form indefinitely.

8. Security

We use encryption in transit, encrypted storage of integration credentials, row-level database access rules, role-scoped consoles, staff PIN hashing, optional multi-factor authentication for administrators, audit logging and idempotency protection on sensitive endpoints. No system is perfectly secure and we cannot guarantee absolute security. If a breach affecting your personal data occurs, we will notify affected restaurants without undue delay and, where required, the relevant authorities.

9. International data transfers

PlateLogic is operated from the United States and personal data is stored and processed there. If you access the Services from outside the United States, you understand your data will be transferred to the United States. Where a transfer of EEA or UK personal data occurs, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) with our subprocessors.

10. Changes to this policy

We may update this policy. Material changes will be posted here with a new "last updated" date and, for restaurant subscribers, emailed to the account owner. Continued use after the effective date means you accept the updated policy. This policy is effective August 2, 2026.

11. Contact

MagnetIQ Marketing Solutions — 18203 Rim Dr 101-1008, San Antonio, TX 78257, USA. Privacy contact: info@plate-logic.com. This policy is governed by the laws of the State of Texas, and any dispute about it is subject to the state and federal courts located in Bexar County, Texas, as set out in our Terms and Conditions.