Privacy Policy

Just Make the Food Inc ("JMTF", "we", "us") operates the JMTF restaurant operating system. This policy describes how we collect, use, and protect information from restaurants who use the platform, and from customers who order food through restaurants powered by JMTF.

From restaurants:

• Business information (name, address, phone, EIN, owner information) collected to set up the account
• Point of sale credentials (e.g., Clover API tokens) needed to sync menus and dispatch orders
• Stripe Connect account identifiers (not bank credentials — those are held by Stripe)
• Menu, hours, branding content uploaded to the platform

From customers:

• Name and phone number (required for every order)
• Email address (optional, used for order confirmations)
• Delivery address (when ordering delivery)
• Order history (items, totals, timestamps)
• Payment details: card information is collected directly by Stripe in the customer's browser. JMTF never sees, stores, or transmits card numbers.

Automatically collected:

• IP address, browser type, device information
• Pages visited and actions taken (for product analytics)
• Cookies for session management

• To operate the platform and provide the services described in our Terms
• To process orders, route payments, and dispatch deliveries
• To send transactional email and, only with checkout opt-in, one order-confirmation SMS with a tracking link for that order
• To provide customer support to restaurants and to customers
• To improve the platform (aggregate analytics, never sold or shared with advertisers)
• To comply with legal obligations (tax reporting, payment regulations, law enforcement requests when legally required)

We do not sell personal information. We do not share customer information with third parties for advertising purposes.

JMTF uses the following third-party services to operate the platform. Information shared with these providers is subject to their respective privacy policies. The mobile information and messaging consent protections in Section 7 apply to this sharing.

• Google Maps Platform — address suggestions. When available, the address text you type is sent to Google to suggest and fill addresses. See the Google Privacy Policy. You can also enter your address manually.
• Stripe — payment processing. Card details are collected directly by Stripe.
• Twilio — optional checkout order-confirmation texts and messaging opt-out, opt-in, and help responses.
• Clover (and future POS providers: Toast, Square) — order dispatch and menu sync, on behalf of the restaurant.
• DoorDash Drive, Uber Direct, Grubhub Direct — delivery dispatch when the customer chooses delivery.
• Vapi — voice AI infrastructure for restaurants that enable the optional voice ordering add-on.
• Railway, Vercel, Cloudflare — hosting and content delivery infrastructure.

Order records and customer information are retained for as long as the restaurant's account is active and for up to seven (7) years after account termination to satisfy tax and audit requirements. Customers may request deletion of their personal information by emailing privacy@justmakethefood.com.

We use industry-standard security practices: encryption in transit (TLS), encryption at rest for database and backups, least-privilege access controls, and regular security audits. Card information is collected directly by Stripe (PCI DSS Level 1 certified) and never touches our servers.

SMS is optional. At checkout, customers can select an unchecked box to receive one automated order-confirmation text from JMTF (Just Make The Food), on behalf of the restaurant, with a link to track that order. Placing an order or providing a phone number alone does not give SMS consent. Consent is not required to purchase. No marketing messages are included.

We record the consented phone number, order and restaurant, disclosure version, source, and time of consent. Up to 1 message per order. Message and data rates may apply. Reply STOP to opt out or HELP for help, or email support@justmakethefood.com. START removes a messaging block but does not replace a new checkout opt-in. Missed calls and voice orders do not establish consent to this web-order SMS program.

We do not sell, share, or provide mobile phone numbers, mobile information, SMS opt-in data, or messaging consent to third parties or affiliates for marketing or promotional purposes. Service providers that deliver messages on our behalf may process the information needed to provide that service.

Depending on your jurisdiction (e.g., California, EU), you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to certain processing
• Data portability

To exercise these rights, email privacy@justmakethefood.com. We respond within 30 days.

JMTF is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated to restaurants via email. The "Last updated" date at the top reflects the current version.

Privacy questions or requests? privacy@justmakethefood.com

Just Make the Food Inc