Privacy Policy
Last updated: {{LAST_UPDATED_DATE}}
1. Who we are
Just Make the Food Inc ("JMTF", "we", "us") operates the JMTF restaurant operating system. This policy describes how we collect, use, and protect information from restaurants who use the platform, and from customers who order food through restaurants powered by JMTF.
2. Information we collect
From restaurants:
- Business information (name, address, phone, EIN, owner information) collected to set up the account
- Point of sale credentials (e.g., Clover API tokens) needed to sync menus and dispatch orders
- Stripe Connect account identifiers (not bank credentials — those are held by Stripe)
- Menu, hours, branding content uploaded to the platform
From customers:
- Name and phone number (required for every order)
- Email address (optional, used for order confirmations)
- Delivery address (when ordering delivery)
- Order history (items, totals, timestamps)
- Payment details: card information is collected directly by Stripe in the customer's browser. JMTF never sees, stores, or transmits card numbers.
Automatically collected:
- IP address, browser type, device information
- Pages visited and actions taken (for product analytics)
- Cookies for session management
3. How we use information
- To operate the platform and provide the services described in our Terms
- To process orders, route payments, and dispatch deliveries
- To send transactional SMS and email (order confirmations, delivery updates)
- To provide customer support to restaurants and to customers
- To improve the platform (aggregate analytics, never sold or shared with advertisers)
- To comply with legal obligations (tax reporting, payment regulations, law enforcement requests when legally required)
We do not sell personal information. We do not share customer information with third parties for advertising purposes.
4. Third-party services
JMTF uses the following third-party services to operate the platform. Information shared with these providers is subject to their respective privacy policies.
- Stripe — payment processing. Card details are collected directly by Stripe.
- Twilio — SMS for missed-call rescue, order confirmations, and delivery updates.
- Clover (and future POS providers: Toast, Square) — order dispatch and menu sync, on behalf of the restaurant.
- DoorDash Drive, Uber Direct, Grubhub Direct — delivery dispatch when the customer chooses delivery.
- Vapi — voice AI infrastructure for restaurants that enable the optional voice ordering add-on.
- Railway, Vercel, Cloudflare — hosting and content delivery infrastructure.
5. Data retention
Order records and customer information are retained for as long as the restaurant's account is active and for up to seven (7) years after account termination to satisfy tax and audit requirements. Customers may request deletion of their personal information by emailing privacy@justmakethefood.com.
6. Security
We use industry-standard security practices: encryption in transit (TLS), encryption at rest for database and backups, least-privilege access controls, and regular security audits. Card information is collected directly by Stripe (PCI DSS Level 1 certified) and never touches our servers.
7. SMS opt-in and consent
When a customer places an order on a JMTF-powered restaurant website, they consent to receive transactional SMS messages related to that order (confirmations, ready notifications, delivery updates). Missed-call rescue SMS is sent only to the phone number that just called the restaurant.
Customers may opt out of SMS by replying STOP. JMTF complies with the Telephone Consumer Protection Act (TCPA) and CTIA messaging principles.
8. Your rights
Depending on your jurisdiction (e.g., California, EU), you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information
- Object to certain processing
- Data portability
To exercise these rights, email privacy@justmakethefood.com. We respond within 30 days.
9. Children
JMTF is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us and we will promptly delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated to restaurants via email. The "Last updated" date at the top reflects the current version.
11. Contact
Privacy questions or requests? privacy@justmakethefood.com
Just Make the Food Inc
{{BUSINESS_ADDRESS}}