This policy explains what information VenueTap ("VenueTap", "we", "us") collects and how we use it across the VenueTap POS services: this website, the web and Windows point-of-sale applications, self-order kiosk and QR guest ordering, and the owner portal (together, the "Service").

Information we collect

Merchant accounts. When a store owner, manager or staff member signs in — with Google or with an email and password — we receive a name and email address, used solely to identify the user and control which store's data they may access.
Business records. The Service stores the operational data of each venue: sales, orders, payments totals, menu, employees, timekeeping and inventory. This data belongs to the venue (the Merchant), and we process it on the Merchant's behalf to provide the Service.
Guest orders (kiosk and QR). When a guest orders through a kiosk or a QR code, we process the order contents, the table or room it belongs to, and a name if the guest chooses to enter one. Card payments are handled by the payment terminal and the venue's payment processor — we do not collect or store full card numbers.
Website inquiries. If you submit the quote or contact form, we receive what you enter (such as name, email, phone and venue details) and use it to respond.
Technical logs. Standard server logs (request time, IP address, user agent) used to operate and secure the Service. The POS applications store settings locally on the device (for example via browser storage) to function; the marketing site does not use advertising trackers.

How we use information

To provide, operate, maintain and secure the Service.
To authenticate users and enforce store-level access control.
To respond to inquiries and provide support.
To maintain and improve the Service, including through aggregated or de-identified usage information.

Google user data

When you sign in with Google, we request only your basic profile (name) and email address, and use them only to verify your identity and manage access. We do not access other Google services or data, and we do not use this information for advertising. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing

We do not sell personal information. We share information only with the service providers that help us run the Service — such as cloud hosting, content delivery, authentication and internal notification tools — for the sole purpose of operating it; with payment processors as needed to complete transactions the Merchant initiates; and where required by law.

Guest data and the venue

For orders placed at a venue, the venue is the business you are buying from and controls its customer records. Guests with questions about an order or a payment should contact the venue first; you can also reach us at the address below.

Retention and security

Information is stored on secured servers with access limited to authorized personnel and authorized store users. Business records are retained while the venue uses the Service and as needed for legitimate business and legal purposes, after which they may be deleted in the ordinary course.

Your choices and rights

Store access is granted and revoked by the venue's administrator. To request access to, correction of, or deletion of your personal information — or to exercise rights under applicable state privacy laws — contact us at [email protected]. We will respond as required by applicable law.

Children

The Service is a business tool and is not directed to children under 13; we do not knowingly collect personal information from them.

Changes

We may update this policy from time to time; material changes are reflected by the "Last updated" date above.

Contact

Questions about this policy: [email protected].

Privacy Policy