DishPair Privacy Policy

Collection of Your Personal Information

In order to better provide you with products and services offered on our site and platform, DishPair may collect personally identifiable information, such as your:

• First and last name
• Email address
• Phone number (if you opt-in to receive SMS messages)
• Profile photo
• Account login credentials
• Business or restaurant information (for restaurant users)

Creator Social Media Information

If you choose to connect third-party social media accounts (such as Instagram or TikTok), DishPair may collect information made available through those platforms' official APIs, including:

• Public profile information (username, display name, profile photo, bio)
• Public content (posts, videos, captions) to the extent permitted and necessary
• Engagement and performance metrics (such as follower counts, likes, comments, views, impressions)

DishPair only accesses social media data that you authorize and uses such data in accordance with applicable platform terms and policies, including Meta and TikTok Platform Policies. You may revoke access and disconnect your social media accounts at any time through your account settings.

Attribution, Transactional, and In-Person Interaction Data

DishPair may collect data related to online and offline interactions facilitated through the platform, including:

• Signals associated with attribution and measurement of campaigns
• Time, date, and general location of interactions
• Data linking creators, campaigns, and restaurant engagement or visits

This information is used to provide attribution, analytics, reporting, and campaign performance insights to creators and participating restaurant partners.

Point-of-Sale (POS) Integrations

Restaurant partners may choose to connect their point-of-sale system to DishPair, including Clover and Square. This connection is optional, is initiated by the restaurant, and can be disconnected at any time. When a restaurant connects a POS system, DishPair retrieves order records from that system in order to match in-store visits to the creator campaign or offer that produced them.

The information DishPair retrieves from a connected POS system includes:

• Order identifiers, order date and time, and order totals
• Line items, discounts, and promotional or offer codes applied to an order
• Merchant and location identifiers, including location address
• The complete order record as returned by the POS provider, which may include additional fields the provider attaches to an order, such as customer contact details, employee identifiers, tip amounts, and partial payment card information such as card brand and last four digits

DishPair does not receive or store full payment card numbers, and does not process payments through these integrations.

Where DishPair receives information about a restaurant's customers through a connected POS system, the restaurant determines what data is collected in its own system and DishPair processes that information on the restaurant's behalf, for the purpose of providing attribution and analytics to that restaurant. DishPair does not sell this information, and does not use it to build advertising profiles or to market to a restaurant's customers except where a customer has separately opted in to DishPair communications.

Access Credentials

Connecting a POS system uses OAuth. DishPair stores the access and refresh tokens issued by the POS provider, together with the merchant identifier, so that it can retrieve orders on an ongoing basis. DishPair never receives or stores POS account passwords. Tokens are stored securely, are used only to retrieve the data described above, and are revoked when a restaurant disconnects the integration.

Disconnecting a POS System

A restaurant may disconnect its POS system at any time from its DishPair settings. Disconnecting revokes DishPair's access tokens and stops any further retrieval of order data. Order records already retrieved before disconnection are retained as described in Data Retention & Your Rights, and a restaurant may request their deletion by contacting DishPair.

Payment and Transaction Information

If you purchase DishPair services, payments are processed through third-party payment processors (such as Stripe). DishPair does not store or process full credit card numbers. We may receive limited transaction-related information such as billing details, payment status, transaction amounts, and timestamps for record-keeping, analytics, and service fulfillment purposes.

Automatically Collected Information

Information about your computer hardware and software may be automatically collected by DishPair, including:

• IP address
• Browser type
• Device type
• Operating system
• Access times and referring website addresses

This information is used to operate the service, maintain security, improve performance, and generate usage analytics.

Use of Your Personal Information

DishPair collects and uses personal information to:

• Operate, maintain, and improve the DishPair platform
• Facilitate collaborations between restaurants and creators
• Provide attribution, analytics, benchmarking, and reporting
• Process payments and payouts
• Communicate with users regarding accounts, services, or updates
• Send promotional or marketing communications (with the ability to opt out)
• Detect fraud, prevent abuse, and maintain platform security

DishPair may aggregate or anonymize data so that it no longer identifies individual users. Aggregated or anonymized data may be used for analytics, benchmarking, insights, and platform improvements.

Sharing Information with Third Parties

DishPair does not sell, rent, or lease personal information to third parties and does not share personal information for monetary consideration or cross-context behavioral advertising.

DishPair may share information in the following circumstances:

• With Restaurant Partners: Participating restaurants may receive relevant creator content, campaign materials, and aggregated or campaign-level performance and attribution metrics necessary to facilitate collaborations.
• With Service Providers: Trusted third-party vendors that assist with hosting, analytics, payments, communications, and customer support.
• For Legal Compliance: When required by law, legal process, or to protect the rights, safety, or property of DishPair, its users, or the public.

Restaurants and partners are responsible for complying with applicable privacy and marketing laws when using data obtained through DishPair.

Tracking User Behavior

DishPair may track pages visited, features used, and interactions within the platform to understand usage trends and improve functionality and user experience.

DishPair does not currently respond to "Do Not Track" signals sent by web browsers.

Use of Cookies and Similar Technologies

DishPair may use cookies and similar technologies to personalize your experience, enable authentication, remember preferences, and support analytics.

You may accept or decline cookies through your browser settings. Declining cookies may limit certain features of the platform.

Security of Your Personal Information

DishPair implements reasonable technical and organizational safeguards to protect personal information from unauthorized access, use, or disclosure, including encryption and secure server infrastructure.

Access credentials for connected third-party services, including point-of-sale access and refresh tokens, are transmitted over encrypted connections, held on infrastructure that encrypts data at rest, accessible only to the systems that need them to provide the service, and revoked when an integration is disconnected. Access to production systems holding this data is restricted to authorized personnel.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, absolute security cannot be guaranteed.

Data Retention & Your Rights

DishPair retains personal information only for as long as necessary to provide services, fulfill contractual obligations, comply with legal requirements, or resolve disputes.

Order records retrieved from a connected point-of-sale system are retained for as long as the restaurant maintains an account with DishPair, so that historical campaign attribution and reporting remain available to that restaurant. A restaurant may request deletion of its POS order records at any time by contacting DishPair, and those records are deleted when the restaurant's account is closed.

You may request to:

• Access your personal information
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Withdraw previously granted consent

Depending on your location, you may have additional rights under applicable privacy laws such as the California Consumer Privacy Act (CCPA/CPRA) or the General Data Protection Regulation (GDPR). Requests may be submitted by contacting us at hi@dishpair.com. We may verify your identity before processing requests.

International Data Transfers

DishPair is operated in the United States. If you access the platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate.

Children Under Thirteen

DishPair does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under thirteen, you must obtain permission from a parent or guardian to use the platform.

Connecting and Disconnecting Third-Party Accounts

You may connect your DishPair account to third-party services, including social media platforms and, for restaurant partners, point-of-sale systems such as Clover and Square. By doing so, you consent to the sharing of information as permitted by those services and your privacy settings. You may disconnect third-party accounts at any time through your account settings. See Point-of-Sale (POS) Integrations above for what DishPair retrieves from a connected POS system and what happens when it is disconnected.

SMS and Text Message Communications

SMS Program Overview

DishPair may send SMS or text messages to users who have explicitly opted in to receive such communications. These messages are transactional in nature and may include:

• QR codes for accessing exclusive dining experiences
• Promo codes for discounts and special offers
• Order confirmations and redemption updates
• Exclusive offers from participating restaurants
• Account-related notifications and security alerts

How We Obtain Consent

SMS messages are sent only after explicit user consent is provided through one of the following methods:

• Checking the consent checkbox on our SMS Consent Page
• Providing your phone number during a restaurant interaction with a participating DishPair partner
• Opting in through the DishPair mobile application or web platform

Consent to receive SMS messages is not a condition of purchase. You can still use DishPair services without opting in to SMS communications.

Phone Number Storage and Security

When you provide your phone number, we store it securely along with:

• The exact consent text you agreed to
• The date and time of your consent
• Your IP address and device information (for audit trail purposes)
• Associated restaurant or collaboration (if applicable)

Your phone number is stored in E.164 international format and protected using industry-standard encryption. We do not sell, rent, or share your phone number with third parties for their marketing purposes.

Message Frequency and Costs

Message frequency varies based on your activity and interactions with participating restaurants. You may receive messages when:

• You claim an offer or exclusive promo
• A QR code needs to be delivered for restaurant access
• Your order status changes or a redemption is confirmed
• A participating restaurant has a new exclusive offer for you

Message and data rates may apply based on your mobile carrier's plan. DishPair is not responsible for carrier charges.

How to Opt Out

You can stop receiving SMS messages at any time using any of these methods:

• Text STOP: Reply STOP to any SMS message from DishPair to immediately opt out
• Text HELP: Reply HELP to receive assistance and support information
• Email Us: Contact us at hi@dishpair.com to opt out or manage your SMS preferences

After opting out, you will receive one final confirmation message, and then no further SMS messages will be sent unless you opt in again.

Supported Carriers

DishPair SMS services are available to users with compatible mobile devices and carriers in the United States. Supported carriers include AT&T, T-Mobile, Verizon, Sprint, and other major US carriers. Service may not be available on all carriers.

E-mail Communications

DishPair may contact you via email for account-related notices, confirmations, updates, surveys, or promotional offers. You may opt out of marketing communications at any time by using the unsubscribe link included in such emails.

External Data Storage

DishPair may store and process data on servers operated by third-party hosting and infrastructure providers with whom we have contracted.

Changes to This Privacy Policy

DishPair reserves the right to update this Privacy Policy from time to time. Significant changes will be communicated via email, platform notification, or a prominent notice on our website. Continued use of DishPair following such changes constitutes acceptance of the updated Privacy Policy.

Contact Information