Privacy Policy

1. Introduction

Welcome to Zilos. Zilos AI, Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our restaurant management platform and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, company name, and payment information
• Business Data: Restaurant locations, staff information, sales data, inventory records, and financial data
• Communications: Messages you send to us, including support requests and feedback
• User Content: Recipes, images, documents, and other content you upload to the Service

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

• Usage Data: Pages viewed, features used, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Location Data: Approximate location based on IP address
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies

2.3 Information from Third Parties

We may receive information about you from third-party services you connect to our platform, such as point-of-sale systems (e.g., Square), payment processors, and accounting software.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send administrative information, updates, and security alerts
• Respond to your comments, questions, and support requests
• Generate analytics and insights about business performance
• Personalize your experience and provide relevant content
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations and enforce our terms

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Cloud hosting providers (Supabase, Google Cloud Platform)
• Payment processors
• Analytics providers
• Customer support tools
• AI and machine learning services

4.2 Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.4 With Your Consent

We may share your information for any other purpose with your consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data security best practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to and receive a copy of your personal information.

7.2 Correction

You have the right to request that we correct inaccurate or incomplete personal information.

7.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention).

7.4 Opt-Out

You may opt out of receiving promotional communications from us by following the unsubscribe instructions in those communications or contacting us directly.

7.5 Cookies

Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject cookies, but this may affect the functionality of our Service.

To exercise these rights, please contact us at support@zilos.ai.

8. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer the information to the United States and process it there.

We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it, including through the use of standard contractual clauses approved by the European Commission.

9. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your personal information includes:

• Consent: You have given consent for processing
• Contract: Processing is necessary to perform our contract with you
• Legal Obligation: Processing is necessary to comply with legal obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests

10. CCPA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

11. Children's Privacy

Our Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us. If we discover that a child under 16 has provided us with personal information, we will delete such information from our systems.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this policy. We will notify you of any material changes by posting the new Privacy Policy on this page and, where appropriate, by sending you an email notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: