Privacy Policy

1. Data We Collect

• Account data — name, email, and restaurant name provided during sign-up.
• Restaurant operational data — menus, orders, floor plans, inventory, recipes, staff schedules, and sales figures you enter into the platform.
• Delivery platform data — CSV reports and analytics you upload from DoorDash, Uber Eats, Grubhub, and similar services.
• Financial account data — if you choose to connect a bank or credit-card account through Stripe Financial Connections via Orion, we access the account details (name, type, mask, and balance) and transaction history for the accounts you link, so we can build your bookkeeping and cash-flow reporting.
• Google account data — if you choose to connect your Google Business Profile, you sign in with Google and grant AIR the “manage your business listings” permission. We use it only to read the listing that belongs to your restaurant (name, category, description, hours, phone, website, rating and reviews) and, when you approve a specific proposal inside AIR, to write that one change back to the listing. We never post, reply, or edit on your behalf without an approval you have made, we do not use this data for advertising, and we do not sell it or share it with anyone beyond the processors that run AIR. You can disconnect at any time from Settings → Integrations or from your Google Account permissions page, and we delete the stored access token when you do. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• Usage & device data — browser type, device info, and interaction logs collected automatically to improve the product.

2. How We Use Your Data

• Provide and operate the AIR platform and its features.
• Generate AI-powered insights, recommendations, and reports for your restaurant.
• Process payments via Square or Stripe on your behalf.
• Import, categorize, and reconcile your financial transactions to produce bookkeeping, expense, budgeting, and cash-flow reporting.
• Send transactional communications (receipts, alerts, account notices).
• Improve the platform through aggregated, anonymized analytics.

3. Data Sharing

We do not sell your data. We share information only with:

• Payment processors (Square, Stripe) to complete transactions.
• Financial connectivity & accounting providers (Stripe Financial Connections and Orion for the AIR bank feed; Intuit QuickBooks for accounting sync) to deliver the bookkeeping features you enable.
• Infrastructure providers (hosting, database, authentication) under strict data-processing agreements.
• Law enforcement if required by valid legal process.

4. Data Retention

We retain your data for as long as your account is active. If you close your account, we delete your restaurant data within 90 days, except where retention is required by law (e.g., tax records).

5. Security

All data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to authorized personnel with multi-factor authentication.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. California residents have additional rights under the CCPA.

7. Financial Account Connections

AIR uses Stripe Financial Connections through Orion for its bank-transaction feed. When you choose to link an account, Stripe provides the connection and consent flow. Orion processes the authorized account details, balances, transactions, connection identifiers, and permissions, and supplies the data to AIR for your restaurant workspace. AIR and Orion do not receive your bank login password from this flow.

We use this connection on a read-only basis for bookkeeping, cash-flow reporting, categorization, and matching transactions to expenses and invoices. The bank feed does not initiate payments or move money. Separate payment features require their own authorization.

You can disconnect the Stripe bank feed in Settings → Bank & cards. This stops further access through that connection; it does not automatically delete previously imported bookkeeping records or connection audit records. To request deletion, contact us using the address below; applicable retention obligations may still apply.

See the Stripe Privacy Policy and Orion Privacy Policy for their data handling. If you separately enable Intuit QuickBooks, Intuit processes the data needed for that integration.

AIR previously offered bank connections through Plaid and Teller. As of November 2, 2026 AIR no longer connects to either provider or receives data from them. Transaction records they imported before then remain part of your bookkeeping records, retained and deleted on the same terms as the rest of your data (see Data Retention).

8. Who on Your Team Sees What

• Each person on your team signs in with their own PIN and sees only what their role needs.
• A general manager does not see payroll or money unless you, the owner, turn that on in Settings. If you have already given your general manager that access, it stays as you set it.
• You, the owner, decide who can do more.
• AI only suggests. Nothing it suggests changes your restaurant until you approve it, unless you choose to let AI apply routine setup answers on its own. That choice is off unless you turn it on.

9. Contact

Questions about this policy? Reach us at privacy@ai-restaurant.net.