Privacy Policy

Overview

This Privacy Policy explains how Culistock, Inc. ("Culistock," "we," "our," or "us") collects, uses, discloses, and safeguards information when you use our software platform and related services for restaurant operations management. Culistock is a B2B SaaS platform designed for restaurant teams, owners, and operators.

Data We Collect

Account and business information

We collect information required to create and manage your account, including name, work email, phone number, role, company name, restaurant location details, and billing contact information.

Restaurant operational data

We collect data you input or connect through integrations, including inventory counts, invoices, purchase orders, menu items, recipes, prep lists, shift and staffing data, compliance records (for example temperature logs and certifications), and related operational notes.

Usage, device, and analytics data

We collect log and telemetry information such as IP address, browser type, device identifiers, session events, feature usage, page interactions, and diagnostic data to maintain service performance and security.

How We Use Data

We use data to provide, secure, and improve the Culistock service, including to:

• Deliver core platform functions such as inventory tracking, purchase workflows, and compliance logging.
• Power AI-assisted workflows, recommendations, summaries, and automation features.
• Operate integrations with POS systems, supplier feeds, and billing services.
• Analyze reliability, product usage, and performance to improve accuracy and user experience.
• Detect abuse, fraud, unauthorized access, and policy violations.
• Communicate service updates, support responses, and critical account notices.

Third-Party Services and Disclosures

We use vetted third-party providers to operate specific parts of our service. Depending on your usage, data may be processed by providers such as Anthropic (AI model services), Square (POS integrations), and payment processors for subscription billing.

We may also disclose information when required by law, to enforce our contractual terms, to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets.

Data Retention

We retain data for as long as needed to provide services, satisfy legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and contractual requirements.

Security Measures

We use administrative, technical, and physical safeguards designed to protect data, including access controls, least-privilege permissions, encrypted data transmission, monitoring, and secure infrastructure practices. No method of transmission or storage is fully risk-free, but we continuously improve controls.

CCPA and GDPR Rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. California residents may have rights under CCPA/CPRA, including rights to know and delete personal information and to non-discrimination for exercising privacy rights.

We do not sell personal information in the traditional sense. To submit a rights request, contact us using the details below. We may verify your identity before fulfilling requests.

International Transfers

If data is transferred across borders, we use appropriate safeguards as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be posted at this page with a revised last-updated date.

Contact

For privacy questions or data rights requests, contact: privacy@culistock.com