Privacy Policy (US)
Butlaroo Inc.
Last updated: March 28, 2026
1. Introduction
This Privacy Policy describes how Butlaroo Inc. ("Butlaroo," "Company," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our websites, web applications, mobile applications, QR ordering environments, kiosk systems, point-of-sale (POS) systems, kitchen display systems (KDS), and other digital ordering and payment channels (collectively, the "Platform"), as well as any other interactions you may have with us.
By accessing or using the Platform or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should not access or use the Platform.
This Privacy Policy does not apply to third-party websites, applications, or services that may be linked to or accessible through the Platform, even if those links are provided by us. We are not responsible for the privacy practices of any third party.
Contact Information:
Butlaroo Inc.
228 East 45th Street, Suite 9E
New York, NY 10017
United States
Email: privacy@butlaroo.com
2. Our Role
Butlaroo is a technology company that provides SaaS services to hospitality businesses, retailers, and other business customers ("Customers"). Butlaroo acts as a platform through which Customers can offer their products and services to consumers and end users ("End Users").
When we are the "business" or "controller": We process personal information for our own purposes (such as account management, billing, security, analytics, product improvement, and marketing) as described in this Privacy Policy. In this capacity, we determine the purposes and means of processing and are responsible for complying with applicable privacy laws.
When we are a "service provider" or "processor": When a Customer uses the Platform, we process personal information of End Users on behalf of and at the direction of that Customer. In this capacity, the Customer is the "business" or "controller" and determines how and why the personal information is processed. Our processing in this role is governed by our agreement with the Customer, including the Data Processing Addendum (DPA). If you are an End User and have questions about how a Customer processes your personal information, you should contact that Customer directly.
3. Personal Information We Collect
We collect personal information in the following ways:
3.1 Information You Provide Directly
Account and registration data: name, email address, phone number, business name, business address, job title, login credentials, and other information you provide when creating an account or registering for our Services.
Transaction and order data: order details, purchase history, delivery address, payment method information (note: full payment card numbers are processed by our third-party payment service providers and are not stored by Butlaroo).
Communications: information you provide when you contact us for support, submit feedback, respond to surveys, or communicate with us by email, phone, chat, or other means.
User-generated content: any text, comments, dietary preference notes, or other content you submit through the Platform.
3.2 Information We Collect Automatically
When you access or use the Platform, we may automatically collect:
Device and browser information: device type, operating system, browser type and version, screen resolution, device identifiers, and language settings.
Usage data: pages or screens viewed, features used, actions taken, date and time of access, referring URL, and session duration.
Location data: approximate location derived from IP address. We do not collect precise geolocation data unless you expressly consent.
Network information: IP address, internet service provider, and connection type.
Cookies and tracking technologies: information collected through cookies, pixels, web beacons, local storage, and similar technologies. See Section 9 (Cookies and Tracking Technologies) for details.
3.3 Information from Third Parties
We may receive personal information from:
Customers: Customers may provide us with information about their employees, representatives, and End Users in connection with the Services.
Payment service providers: transaction confirmation data, chargeback and dispute data.
Business partners and vendors: information from analytics providers, advertising networks, and data brokers for business purposes such as fraud prevention and marketing.
Public sources: information from publicly available sources, including business registries and social media profiles.
4. How We Use Personal Information
We use personal information for the following purposes:
To provide and maintain the Platform and Services: processing orders and payments, managing accounts, providing customer support, and facilitating the relationship between Customers and End Users.
To communicate with you: sending transactional communications (order confirmations, receipts, support responses), service-related announcements, and, where permitted, promotional and marketing communications.
To improve and develop our products: analyzing usage patterns, conducting research and analytics, developing new features and products, improving algorithms and models, and performing benchmarking.
To personalize your experience: tailoring content, recommendations, and communications based on your interactions with the Platform.
For security and fraud prevention: detecting, investigating, and preventing fraudulent, unauthorized, or illegal activity, protecting the security and integrity of the Platform, and enforcing our Terms of Service and Terms of Use.
To comply with legal obligations: complying with applicable laws, regulations, legal processes, and government requests, including tax reporting, anti-money laundering, and sanctions compliance.
For business operations: internal administration, auditing, billing, data analysis, record-keeping, and business planning.
For aggregated and de-identified analytics: creating aggregated, de-identified, or anonymized data that can no longer reasonably be used to identify you, which we may use for any lawful purpose without restriction, including product development, market analysis, benchmarking, and commercial purposes. Once data is aggregated or de-identified, it is no longer considered personal information under this Privacy Policy or applicable law.
For any other purpose disclosed to you at the time of collection or with your consent.
5. How We Share Personal Information
We may share personal information with the following categories of recipients:
Customers (Affiliated Businesses): When you place an order through the Platform, we share your order details, contact information, and other relevant data with the applicable Customer so that your order can be fulfilled. The Customer is independently responsible for its own use of your personal information.
Service providers and vendors: We engage third-party service providers to perform functions on our behalf, including hosting and infrastructure, payment processing, email delivery, analytics, customer support, fraud prevention, and marketing. These service providers are contractually obligated to use personal information only as directed by us and in a manner consistent with this Privacy Policy.
Payment service providers: Payment transaction data is shared with licensed payment service providers to process your payments. These providers have their own privacy policies governing their use of your information.
Professional advisors: Accountants, attorneys, consultants, and other professional advisors in connection with the services they provide to us.
Government authorities and law enforcement: Where required by law, regulation, legal process, subpoena, court order, or governmental request, or where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Business transfers: In connection with, or during negotiations of, any merger, acquisition, sale of assets, financing, bankruptcy, reorganization, or similar transaction, personal information may be transferred or disclosed as a business asset. We will endeavor to direct any successor entity to use personal information in a manner consistent with this Privacy Policy.
With your consent or at your direction: We may share your information when you direct us to do so or provide your consent.
We do not sell personal information for monetary consideration. For information about sharing for targeted advertising purposes, see Section 8 (Your Privacy Rights).
6. Retention of Personal Information
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.
When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, whether we can achieve those purposes through other means, and applicable legal requirements.
When personal information is no longer required, we will securely delete or de-identify it. De-identified or aggregated data may be retained and used indefinitely without restriction.
7. Security
We implement commercially reasonable technical and organizational security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, monitoring, and incident response procedures.
However, no method of transmission over the internet and no method of electronic storage is completely secure. We cannot and do not guarantee the absolute security of your personal information. You acknowledge that you provide your personal information at your own risk.
In the event of a data breach that is required to be reported under applicable law, we will notify affected individuals and relevant authorities in accordance with our legal obligations.
8. Your Privacy Rights
Depending on where you reside, you may have certain rights regarding your personal information under applicable state privacy laws.
8.1 Rights Under California Law (CCPA/CPRA)
If you are a California resident, you may have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected the information, the business or commercial purposes for collecting the information, and the categories of third parties with whom we share the information.
Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising purposes. We do not sell personal information for monetary consideration. To the extent that our use of certain cookies or tracking technologies constitutes "sharing" under the CPRA, you may opt out by adjusting your cookie preferences on our website.
Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information, you have the right to limit its use to what is necessary to provide the Services.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
Categories of personal information collected in the preceding 12 months: Identifiers (name, email, phone number, IP address); commercial information (transaction and order history); internet or electronic network activity information (usage data, device information); geolocation data (approximate location from IP address); professional or employment-related information (for Customer employees); and inferences drawn from the above.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
8.2 Rights Under Other State Privacy Laws
If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with an applicable privacy law, you may have similar rights, including the right to access, correct, delete, and obtain a copy of your personal information, and the right to opt out of targeted advertising, the sale of personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects.
8.3 How to Exercise Your Rights
To exercise any of the rights described above, please contact us at:
Email: privacy@butlaroo.com
Mail: Butlaroo Inc., 228 East 45th Street, Suite 9E, New York, NY 10017
We will verify your identity before processing your request. We may ask you to provide information that matches information we have on file about you. If you use an authorized agent to submit a request, we may require proof of your authorization.
We will respond to verifiable requests within the timeframes required by applicable law (generally 45 days for CCPA/CPRA requests, with a possible 45-day extension).
8.4 Appeals
If we decline to take action on your request, you may appeal our decision by contacting us at privacy@butlaroo.com with the subject line "Privacy Rights Appeal." If you are not satisfied with our response to your appeal, you may contact your state's attorney general.
9. Cookies and Tracking Technologies
We use cookies, pixels, web beacons, local storage, and similar technologies to collect information about your interactions with the Platform.
9.1 Types of Cookies We Use
Strictly necessary cookies: Required for the Platform to function properly (e.g., session management, authentication, security). These cookies cannot be disabled.
Functional cookies: Enable enhanced functionality and personalization (e.g., language preferences, saved settings).
Analytics cookies: Help us understand how the Platform is used, identify trends, and improve performance (e.g., Google Analytics or similar services).
Advertising/marketing cookies: Used to deliver relevant advertisements and measure the effectiveness of advertising campaigns (e.g., Meta Pixel, Google Ads).
9.2 Your Cookie Choices
You can manage your cookie preferences through our cookie banner (where available) or through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform.
Do Not Track: Some browsers offer a "Do Not Track" (DNT) signal. There is currently no uniform standard for how companies should respond to DNT signals. We do not currently respond to DNT signals, but we do respond to Global Privacy Control (GPC) signals where required by applicable law.
10. Children's Privacy
The Platform is not directed at children under the age of 13 (or 16 where required by applicable law), and we do not knowingly collect personal information from children under 13 (or 16 where applicable). If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete such information promptly. If you believe we have collected personal information from a child, please contact us at privacy@butlaroo.com.
11. International Data Transfers
Butlaroo is based in the United States. If you access the Platform from outside the United States, your personal information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that are different from those in your country of residence.
By using the Platform, you acknowledge and consent to the transfer of your personal information to the United States and other jurisdictions as described in this Privacy Policy. Where required by applicable law, we implement appropriate safeguards for international data transfers, including standard contractual clauses or other legally recognized transfer mechanisms.
12. Third-Party Links and Services
The Platform may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to any third-party websites, applications, or services, even if they are accessible through the Platform. We are not responsible for the privacy practices or content of any third party. We encourage you to read the privacy policy of every website or service you visit or use.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. The updated Privacy Policy will be posted on the Platform and/or our website with a revised "Last updated" date. We encourage you to review this Privacy Policy periodically.
Where required by applicable law, we will provide you with notice of material changes (for example, by email or through a notice on the Platform) prior to the changes becoming effective. Your continued use of the Platform after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
14. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, BUTLAROO SHALL NOT BE LIABLE FOR ANY UNAUTHORIZED ACCESS TO, OR ALTERATION, THEFT, LOSS, OR DESTRUCTION OF, YOUR PERSONAL INFORMATION, WHETHER HELD BY US OR BY ANY THIRD-PARTY SERVICE PROVIDER, THROUGH ACCIDENT, UNAUTHORIZED ACTS, CYBER ATTACKS, FRAUD, OR OTHER CAUSES BEYOND OUR REASONABLE CONTROL. OUR LIABILITY FOR ANY BREACH OF THIS PRIVACY POLICY OR FOR ANY DATA BREACH IS LIMITED TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW AND IS SUBJECT TO THE LIMITATIONS OF LIABILITY SET FORTH IN OUR TERMS OF SERVICE AND TERMS OF USE, WHICH ARE INCORPORATED HEREIN BY REFERENCE.
YOU ACKNOWLEDGE THAT NO DATA TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE METHOD IS COMPLETELY SECURE, AND YOU PROVIDE YOUR PERSONAL INFORMATION AT YOUR OWN RISK.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact us at:
Butlaroo Inc.
228 East 45th Street, Suite 9E
New York, NY 10017
United States
Email: privacy@butlaroo.com
End of Privacy Policy
