Privacy Policy

1. Who we are

The data controller is [COMPANY LEGAL NAME], [REGISTERED ADDRESS], [COUNTRY OF ESTABLISHMENT]. For any privacy question or to exercise your rights, contact us at [privacy@shiftplate.app].

2. What data we collect

When you submit the “Book a demo” form we collect the details you provide: your name, work email, restaurant or group name, current POS, and any message.

When you use the site we also process limited technical data — IP address, device and browser information, and server logs — and information stored via cookies (see our Cookie Policy).

3. How and why we use it

• To respond to your demo request and communicate with you — on the basis of your consent and/or steps taken at your request prior to a contract.
• To operate, secure and improve the site and prevent abuse — on the basis of our legitimate interests.
• To comply with legal obligations where they apply.

4. Cookies

We use strictly necessary and functional cookies, and — only with your consent — any optional cookies. You can accept, reject or change your choice at any time via “Cookie settings” in the footer. See our Cookie Policy for the full list.

5. Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, including:

• Clerk — authentication and account security.
• Vercel — website hosting and content delivery.
• Neon — managed PostgreSQL database (hosted in Frankfurt, EU).
• Resend — delivery of transactional email (e.g. your demo request).
• Anthropic, via the Vercel AI Gateway — AI-assisted features.

6. International transfers

Our database is hosted in the EU (Frankfurt). Some providers above may process data outside the EEA or UK; where they do, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) or an adequacy decision.

7. How long we keep it

We keep demo enquiries for as long as needed to respond and for a reasonable follow-up period, then delete or anonymise them. Technical logs are kept for a limited period for security and troubleshooting.

8. Your rights

You have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time (without affecting prior processing). To exercise any of these, email us at [privacy@shiftplate.app].

You also have the right to lodge a complaint with your supervisory authority: the AEPD in Spain (aepd.es), the UODO in Poland (uodo.gov.pl), or the ICO in the UK (ico.org.uk).

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with a new “last updated” date.