DineLogic AI Privacy Policy

DineLogic AI, Inc., a Delaware corporation (“DineLogic,” “we,” “us”), builds software that helps restaurants manage their online presence. This Privacy Policy explains what personal information we collect, how we use it, who owns it, who we share it with, and what choices you have.

This policy works together with our Terms of Service. Where this policy uses a defined term such as Platform Data, Guest Data, Business Data, Customer Materials, or Derived Data, it carries the same meaning as in the Terms of Service.

The two things most people want to know, stated up front:

• We use the information that flows through our platform, including guest feedback, reviews, and replies, to train and improve our artificial intelligence systems. Section 6 explains this in full. Please read it.
• DineLogic owns the Platform Data described in Section 4. Ownership as between DineLogic and a restaurant does not reduce the rights an individual guest holds over their own personal information. Section 9 explains what every guest can ask us to do, and how.

1. Who This Policy Covers

This policy applies to three different groups, and your rights depend on which one you are.

• Restaurant Customers. Businesses that subscribe to DineLogic, and the owners, managers, and staff who use their accounts.
• Guests. People who dine at, order from, or otherwise interact with a restaurant that uses DineLogic, and who submit feedback, leave a review, or receive a message through our platform.
• Website Visitors. Anyone who visits dinelogic.ai.

We act on our own behalf, not only on the restaurant’s instructions. A restaurant decides whether to use DineLogic and what to ask its guests. Once information reaches our platform, we also use it for our own purposes, described in Sections 3, 4, and 6. Under privacy laws that distinguish between a business and a service provider, DineLogic is a business with respect to Platform Data, and we answer directly for how we handle it.

2. Information We Collect

2.1 Information you give us

From Restaurant Customers: business name, address, phone, website, cuisine and category, hours, menus, photos, owner and staff names, business email addresses and phone numbers, login credentials, billing contact, and account preferences.

From Guests: ratings and star scores, written feedback, review text, name or display name, email address, phone number, visit date, order or table details you choose to provide, and any other content you submit in a feedback form or message.

2.2 Information we collect from connected accounts

When a Restaurant Customer connects a third-party account, including Google Business Profile, Yelp, TripAdvisor, Meta, delivery marketplaces, reservation systems, and point-of-sale systems, we collect the information that connection makes available. This typically includes public reviews and reviewer names, ratings, listing details, photos, questions and answers, insights and performance metrics, and message threads.

2.3 Information we collect automatically

Device and browser type, IP address, approximate location derived from IP, pages viewed, links clicked, referring URL, session duration, timestamps, QR code scans, and error and diagnostic logs. We use cookies and similar technologies for this. See Section 10.

2.4 Information from other sources

Publicly available business information, data from analytics and enrichment providers, and information from our payment processor confirming a transaction. We do not receive or store full payment card numbers.

2.5 Information we create

We also create new information from the above: scores, insights, benchmarks, analytics, aggregated and de-identified data sets, training data, and model outputs. This is Derived Data, and it is ours. Section 4 explains what that means.

2.6 Information we do not want

Please do not submit government identification numbers, financial account numbers, health information, precise geolocation, biometric data, or information about children through feedback forms or free-text fields. We do not request it and do not need it.

3. How We Use Information

We use personal information to:

• Provide, operate, maintain, and secure the Service
• Create and manage accounts and authenticate users
• Collect guest feedback and deliver review invitations
• Generate suggested review replies, messages, and other AI output
• Produce reports, audits, benchmarks, and analytics for Restaurant Customers
• Send transactional messages about your account, billing, and security
• Provide customer support and respond to inquiries
• Process payments and prevent fraud
• Detect, investigate, and prevent abuse, spam, and violations of our Terms
• Develop, train, test, evaluate, and improve our artificial intelligence systems and products (see Section 6)
• Comply with law and enforce our agreements
• With your consent, send marketing about DineLogic products

4. What We Own, and What That Means for You

4.1 The four kinds of Platform Data

Everything collected, generated, or processed through the Service is Platform Data. It has four parts:

4.2 Ownership does not override guest rights

Ownership settles a question between DineLogic and the restaurant. It does not reduce or waive any right an individual guest holds over their own personal information under privacy law. Every right described in Section 9 is available to every guest, whether or not the restaurant they visited is still our customer, and at no charge.

4.3 What a Restaurant Customer can ask for

A Restaurant Customer may request a copy of the Guest Data and Business Data associated with its account. Derived Data is not included. The request may be made at any time while the subscription is active, and for thirty (30) days after the subscription ends. After that thirty-day window closes, we have no obligation to provide a copy. Requests go to legal@dinelogic.ai from the email address on the account. Section 8.5 of the Terms of Service sets out the full procedure, including the limited grounds on which we may decline.

5. Leaving a Public Review

You can always leave a public review. However you answer our questions, you are offered the option to leave a public review on Google. We do not screen or filter guests out of leaving one based on what you tell us. You are also free to go to Google, Yelp, or any other review site directly, on your own, at any time, without using DineLogic at all.

6. Artificial Intelligence and Model Training

Please read this section carefully. It describes a use of your information that goes beyond simply operating the Service.

6.1 What we do

DineLogic uses Platform Data, including guest feedback, ratings, review text, review replies, messages, menus, and business information, to develop, train, fine-tune, test, evaluate, and improve our artificial intelligence and machine learning systems, and to build new products and features.

6.2 This includes identifiable information

This use is not limited to anonymized or aggregated data. Content submitted through the Service may be used for these purposes in the form in which it was submitted, including where that content identifies a person or a specific restaurant. Feedback and review text often contains names, staff references, and personal details, and it may be used as written.

6.3 This continues after a subscription ends

Our right to use Platform Data for the purposes in this section is perpetual and survives the end of a Restaurant Customer’s subscription, and it applies to data already collected. It remains subject to guest deletion requests under Section 9.

6.4 What we do not do

We do not sell personal information for money. We do not use the content of one restaurant’s account to generate output that is displayed to another named restaurant as if it were that restaurant’s own content. We do not use guest information to build advertising profiles for third parties.

6.5 Third-party AI providers

We use third-party model providers to deliver certain features. Where we do, information may be transmitted to them to generate output. We contract with providers on terms that restrict their use of that information to providing services to us. We do not control the internal practices of every provider, and their own policies also apply.

6.6 Persistence

Information already incorporated into a trained model cannot be extracted from it. Honoring a deletion request removes the information from our active systems and stops any further use of it in new training. It does not reverse training that has already occurred. We state this plainly rather than promise something no one can deliver.

6.7 Choices

Guests may request deletion under Section 9. Restaurant Customers that require different treatment, including exclusion from model training, should contact legal@dinelogic.ai before subscribing. We handle those arrangements in a signed written amendment.

7. How We Share Information

We share personal information in these situations, and no others:

• With the restaurant. Guest feedback, reviews, and contact information are shared with the restaurant the guest interacted with. That is the point of the Service.
• With service providers. Hosting, storage, database, email and SMS delivery, analytics, error monitoring, payment processing, customer support, and AI model providers. They may use the information only to provide services to us.
• With third-party platforms. When a restaurant connects a platform, we exchange information with it to publish reviews, replies, and listing updates, subject to that platform’s own terms.
• For legal reasons. To comply with law, subpoena, or government request; to enforce our agreements; to investigate fraud, security, or abuse; or to protect the rights, property, or safety of DineLogic, our customers, or the public.
• In a business transaction. If DineLogic is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will give notice as required by law.
• With your consent. Any other sharing, when you direct or permit it.

We do not sell personal information for money. Some privacy laws define “sale” or “sharing” broadly enough to include certain analytics and advertising technologies. See Section 9 for how to opt out.

8. How Long We Keep Information

We keep personal information for as long as needed for the purposes described in this policy, including the development and improvement of our artificial intelligence systems, and for as long as required by law.

The thirty-day window after a subscription ends is about access, not deletion. It is the period in which a former Restaurant Customer may still request a copy of Guest Data and Business Data under Section 4.3. It does not mean we delete everything on day thirty-one, and it does not shorten a guest’s right to request deletion at any time under Section 9.

9. Your Privacy Rights

9.1 Every guest, in every state, at any time

Whatever state you live in, and whether or not the restaurant you visited is still our customer, you may ask us to:

• Show you the personal information we hold about you
• Correct it if it is wrong
• Delete it, subject to the legal exceptions below and the limit in Section 6.6
• Stop contacting you through the Service

We honor these requests at no charge to you. We do not require you to go through the restaurant first, and we do not treat a request as a reason to give you worse service anywhere.

9.2 How to make the request

Put it in writing, either way you prefer:

• By email: privacy@dinelogic.ai, with “Privacy Request” in the subject line.
• By mail: DineLogic AI, Inc., 4546 El Camino Real B10 PMB 839, Los Altos, CA 94022.

Tell us what you want us to do and, if you are a Guest, which restaurant you interacted with. We will verify your identity before acting, usually by confirming information we already hold. We acknowledge requests within ten (10) business days and respond within forty-five (45) days, and may extend once by another forty-five (45) days with notice to you. An authorized agent may submit a request on your behalf with your written permission.

If we cannot fulfill part of a request because the law requires us to keep something, or because of the model-training limit in Section 6.6, we will tell you which part and why.

9.3 If you are in California

The California Consumer Privacy Act, as amended, gives you the right to:

• Know what personal information we collect, use, disclose, and the purposes for each
• Access a copy of the personal information we hold about you
• Correct inaccurate personal information
• Delete personal information we have collected, subject to legal exceptions
• Opt out of any sale or sharing of personal information for cross-context behavioral advertising
• Limit the use of sensitive personal information
• Not be discriminated against for exercising these rights. We will not deny service, charge different prices, or provide a lower quality of service because you made a request.

Categories we collect, using the statute’s categories: identifiers; commercial information; internet or network activity; approximate geolocation; audio, electronic, or visual information; professional or employment-related information; and inferences drawn from the above. We collect these for the business purposes listed in Section 3, from the sources listed in Section 2, and disclose them to the recipients listed in Section 7.

Sensitive personal information. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

9.4 If you are in another U.S. state

Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others, have similar rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, or profiling with legal or significant effects. You may also appeal a denial by replying to our decision.

9.5 If you are a Restaurant Customer

Your right to request a copy of Guest Data and Business Data is described in Section 4.3 and in Section 8.5 of the Terms of Service. It is a contractual right with a defined window, and it is separate from the individual rights in this Section 9, which belong to people rather than to businesses.

10. Cookies and Tracking

We use strictly necessary cookies to run the site and keep you logged in, and analytics cookies to understand usage. Where required, we present a cookie banner allowing you to accept or reject non-essential cookies. You can also control cookies through your browser settings, though blocking essential cookies will break parts of the Service.

We honor Global Privacy Control signals as a valid opt-out of sale and sharing where required by law.

11. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any regulator as required by law.

12. Obligations of Restaurant Customers

If you are a Restaurant Customer, you are responsible for:

• Having a lawful basis and any required consent to collect your guests’ information and provide it to us
• Posting your own privacy notice to your guests that describes your use of a third-party platform and the uses described in Sections 4 and 6 of this policy
• Forwarding to privacy@dinelogic.ai any guest privacy request you receive that concerns data held in the Service, promptly
• Obtaining the consent required by law before sending marketing texts or emails to guests

13. Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, email privacy@dinelogic.ai and we will delete it.

14. Where We Operate

DineLogic operates in the United States, and information is stored and processed there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

We do not currently market the Service in the European Economic Area or the United Kingdom. If you are located there and believe we hold information about you, contact privacy@dinelogic.ai.

15. Changes to This Policy

We may update this policy. If a change materially affects how we use your personal information, we will notify you by email or in-product notice before it takes effect and, where required, obtain your consent. The “Last Updated” date at the top always reflects the current version.

16. Contact Us

Privacy requests: privacy@dinelogic.ai
Legal notices: legal@dinelogic.ai
General and support: support@dinelogic.ai

About the entity. DineLogic AI, Inc. is a Delaware corporation, incorporated on July 28, 2026. It is the successor to the business previously operated as a sole proprietorship under the DineLogic AI name. Personal information collected by that predecessor is now held by DineLogic AI, Inc. and is governed by this policy.

If you have a concern we have not resolved, California residents may contact the California Privacy Protection Agency or the California Attorney General’s office.