This Privacy Policy describes how TeezByDeez Hospitality Operations, a sole proprietorship doing business as PrimeKitchen OS ("Company," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with PrimeKitchen OS, our restaurant financial operating system accessible at app.primekitchenos.com and primekitchenos.com (collectively, the "Service"). By accessing or using the Service, you agree to this Privacy Policy.

This Policy applies to restaurant operators, their employees, and any other individuals who access or use PrimeKitchen OS. We treat compliance with applicable privacy laws—including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and applicable federal regulations—as a minimum standard, not a ceiling.

1. Information We Collect

1.1 Account and Business Information

When you register for PrimeKitchen OS, we collect:

• Name, email address, and password for account creation and authentication
• Business name, address, and restaurant type
• Billing information including payment method details (processed securely by Stripe; we do not store full card numbers)
• Subscription plan selection and billing history
• Communication preferences and contact information

1.2 Point of Sale (POS) Integration Data

When you connect PrimeKitchen OS to a point of sale system—including Square, Clover, or future supported integrations—we access and process the following data from your POS provider on your behalf:

• Daily net sales figures, gross sales, and transaction counts
• Order-level revenue data for day-of-week trend analysis
• Labor hours and labor cost data where provided by the POS system
• Employee clock-in and clock-out records where provided by the POS system
• Revenue per labor hour (RPLH) data derived from sales and labor records

POS data is accessed solely to provide the financial intelligence and operational analytics features of PrimeKitchen OS. We do not sell, rent, license, or otherwise transfer your POS data to any third party for their independent marketing, advertising, or commercial purposes.

OAuth access tokens provided by Square and Clover are stored securely in encrypted server-side environment variables and are never exposed in our client-side code or transmitted to browsers. Token expiry is detected automatically and users are notified to reconnect.

1.2.1 Clover App Marketplace — Permissions Disclosure

When you install PrimeKitchen OS from the Clover App Marketplace, you authorize the following specific Clover permissions:

• Read Orders — to retrieve daily sales totals, order counts, line item data, discounts, voids, and refunds for financial reporting
• Read Payments — to extract payment tender types (cash vs. credit), tip amounts per payment, and tax data for cash reconciliation and tip-out reporting
• Read Employees — to associate tips and orders with individual staff members for per-server tip tracking and labor analysis
• Read Merchant — to retrieve your merchant ID, business name, and timezone for accurate business-day calculations
• Read Shifts / Timecards — to import employee clock-in and clock-out records for labor cost calculation and payroll verification

PrimeKitchen OS requests only read-level access to your Clover data. We do not create, modify, or delete any records in your Clover account. You may revoke these permissions at any time from your Clover merchant dashboard under More Tools → App Market → Installed Apps → PrimeKitchen OS → Uninstall, or by disconnecting Clover from within PrimeKitchen OS under Build & Setup → POS Data Integrations.

1.2.2 Right to Opt Out of Data Collection

You have the right to opt out of POS data collection at any time. Disconnecting your POS provider from PrimeKitchen OS immediately stops all future data retrieval. Previously imported data will remain in your account until you request deletion. We do not sell or share your personal information or business data with third parties for their own commercial purposes. Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), you have the right to opt out of the sale or sharing of personal information — however, PrimeKitchen OS does not engage in such sales or sharing.

1.3 Operational and Financial Data You Enter

PrimeKitchen OS allows you to input, upload, and manage the following business data:

• Employee roster information including names, positions, employment type, hourly rates, and department assignments
• Shift schedules and time-off requests
• Invoice and vendor data uploaded via our OCR invoice scanner
• Recipe costs, ingredient data, food cost percentages, and menu pricing
• Inventory levels, par quantities, and waste log entries
• Cash reconciliation records including petty cash floats and tip distribution records
• Projected sales figures and operational targets entered manually

1.4 Automatically Collected Technical Data

When you access PrimeKitchen OS, we automatically collect:

• IP address, browser type, and device type
• Pages accessed, features used, and session duration
• Error logs and performance data used to diagnose and fix issues
• Business date and timezone information used to accurately associate data with the correct operating day
• Cookies and localStorage data used to maintain session state, remember user preferences, and store daily operational inputs between page refreshes

1.5 AI and Machine Learning Interactions

PrimeKitchen OS includes an AI Advisor powered by Anthropic's Claude language model. When you use this feature:

• Your queries and the contextual operational data provided to generate responses are transmitted to Anthropic's API
• We do not use your specific business data to train third-party AI models
• Queries are subject to Anthropic's data handling policies in addition to this Privacy Policy
• AI-generated content is for operational guidance only and does not constitute financial, legal, or professional advice

1.6 OCR Invoice Processing

When you use our invoice scanning feature powered by Mistral AI:

• Uploaded invoice images are transmitted to Mistral's OCR API for text extraction
• Extracted data is stored in your account's inventory and vendor database
• Original invoice images are processed in transit only and are not permanently stored by our OCR provider

2. How We Use Your Information

2.1 Providing the Service

• Authenticating your identity and maintaining your account
• Delivering financial intelligence dashboards, labor analytics, and operational reports
• Calculating key performance indicators including prime cost, revenue per labor hour, and labor percentage
• Generating prep quantity recommendations based on your historical sales velocity
• Processing invoices and updating recipe cost calculations automatically
• Sending shift schedules, time-off request notifications, and operational alerts via email

2.2 Improving the Service

• Analyzing aggregate usage patterns to improve features and user experience
• Diagnosing technical issues using error logs and performance data
• Developing new features based on how the platform is used across our customer base

We use aggregated and de-identified data for product improvement. We do not use individually identifiable restaurant business data for product improvement without your consent.

2.3 Communications

• Sending transactional emails including subscription confirmations, invoices, and password reset instructions
• Delivering operational notifications such as shift schedules and time-off approvals via email from support@teezbydeez.com
• Sending product updates and feature announcements (you may opt out of marketing communications at any time)
• Responding to support inquiries submitted to support@teezbydeez.com

2.4 Billing and Legal

• Processing subscription payments through Stripe
• Maintaining billing records and issuing receipts
• Complying with legal obligations, responding to lawful requests, and enforcing our Terms of Service

3. How We Share Your Information

We do not sell your personal information or your restaurant's business data. We share information only in the following limited circumstances:

3.1 Service Providers

We work with third-party service providers who process data on our behalf:

• Stripe — payment processing and subscription management
• Resend — transactional and operational email delivery
• Anthropic — AI language model for the AI Advisor feature
• Mistral AI — OCR processing for invoice scanning
• Vercel — cloud hosting and serverless infrastructure
• Neon — PostgreSQL database hosting
• Supabase — authentication services
• Square and Clover — POS data access pursuant to your OAuth authorization

3.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

3.3 Legal Requirements

We may disclose your information if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect rights or safety, or investigate fraud.

3.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4. Data Retention

• Your account data is retained for 90 days following cancellation to allow for account recovery
• After 90 days, your account data is permanently deleted from our systems
• Billing records are retained for seven years as required by applicable tax and financial regulations
• Anonymized and aggregated data may be retained indefinitely for product improvement purposes

You may request deletion of your data at any time by contacting support@teezbydeez.com. We will process deletion requests within 30 days.

5. Data Security

• All data transmitted between your browser and our servers is encrypted using TLS
• API access tokens and credentials are stored as encrypted server-side environment variables and are never exposed in client-side code
• Authentication is managed through Supabase with JWT validation on all API endpoints
• Database access is restricted using Row-Level Security (RLS) policies that enforce tenant isolation
• Each restaurant's data is logically isolated — no restaurant can access another restaurant's data
• Employee data including hourly rates is accessible only to authorized users with appropriate role-based permissions

6. Multi-Tenant Architecture and Data Isolation

PrimeKitchen OS is a multi-tenant platform serving multiple restaurant operators. We maintain strict data isolation between tenants:

• Every database query is scoped to a specific restaurant_id associated with your account
• API endpoints validate restaurant ownership before returning any data
• Employee scheduling, roster, and labor data are isolated per restaurant location
• Multi-location operators maintain separate data stores for each restaurant, with cross-location visibility available only to authorized owner accounts
• POS integration credentials are stored per restaurant and never shared across tenants
• No restaurant operator can access, view, or infer the existence of another operator's data

7. Your Rights and Choices

7.1 Access

You have the right to request access to the personal information and business data we hold about you. You can access most of your data directly through PrimeKitchen OS. For a comprehensive data export, contact support@teezbydeez.com.

7.2 Correction

You may update most account information directly within PrimeKitchen OS. For assistance correcting information you cannot update yourself, contact us at support@teezbydeez.com.

7.3 Deletion

You have the right to request deletion of your personal information and business data, subject to legal retention requirements. Contact support@teezbydeez.com. We will confirm receipt within 5 business days and complete deletion within 30 days.

7.4 POS Data Revocation

You may revoke PrimeKitchen OS's access to your Square or Clover account at any time through the POS provider's developer or app settings.

7.5 Marketing Communications

You may opt out of non-transactional marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting support@teezbydeez.com.

7.6 California Residents (CCPA/CPRA)

California residents have additional rights including: the right to know what personal information we collect; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (we do not sell personal information); and the right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact support@teezbydeez.com. We will respond to verified requests within 45 days.

8. Cookies and Local Storage

PrimeKitchen OS uses browser cookies and localStorage for session management, user preferences, operational state, and caching. We do not use cookies for cross-site tracking, behavioral advertising, or selling your data to advertising networks.

Do Not Track Disclosure: Our Service does not currently respond to "Do Not Track" (DNT) signals transmitted by web browsers. PrimeKitchen OS does not engage in cross-site tracking of its users, and therefore a DNT signal does not change how our Service operates.

9. Children's Privacy

PrimeKitchen OS is designed for restaurant business operators and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18.

10. International Users

PrimeKitchen OS is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

11. Third-Party Links

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party properties.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy with a new "Last Updated" date and notify active subscribers via email at least 14 days before changes take effect.

13. Contact Information