Privacy policy

The plain version. We collect what we need to run your membership: your account details, how you use the app, and the receipts you upload. We never sell your data and we do not use it for targeted ads. Restaurants only see your first name and what you picked. You can see, correct, download, or delete your data any time.

This policy explains how RSTRNT PASS INC. ("RSTRNT PASS", "we", "us") collects, uses, shares, and protects your personal data when you use the RSTRNT PASS app, website, or membership (the "Service"). It applies to members, people on our waitlist, and visitors to our website.

It does not cover what partner restaurants do with information they collect from you in the room, such as a reservation name or the card you use to pay your bill. That is collected by the restaurant, not by us.

The Service is for adults. We do not knowingly collect data from anyone under 18, and if we find we have, we delete it.

Things you give us.

• Account details: your name, your phone number (which is how you sign in, using a one-time code), your email for receipts and notices, and a profile photo if you choose one.
• Membership and billing: your tier, subscription status, billing dates, and the card brand and last four digits of your payment method. Your full card number is held by our payment processor, never by us.
• Location: the city and neighbourhoods you choose, and, only if you allow it in your device settings, your location while the app is open so we can show restaurants near you. You can turn this off any time and the app still works.
• Dining preferences: dietary notes, favourites, ratings, and feedback.
• Receipts: photos of receipts you upload, and the details we read from them (restaurant, date, time, items, subtotal, tax, tip, total, and the last four card digits if printed).
• Messages: emails and support conversations, and survey answers.
• Referrals: the contact detail you give us when you refer a friend.

Things we collect automatically.

• How you use the app: items viewed, selections made, redemptions confirmed, screens visited.
• Your device: model, operating system, app version, IP address, language, time zone, and crash reports.
• Cookies on our website, described in our Cookie Notice.

Things we get from others.

• Partner restaurants confirm your redemption and whether it was honoured. They do not send us your bill or card details.
• Our payment processor tells us whether a charge succeeded.
• Our sign-in provider tells us whether a one-time code was delivered and verified. It does not share your messages with us.

We do not ask for sensitive data such as health, ethnicity, religion, or sexual orientation. If you volunteer something sensitive, for example in a dietary note, we use it only for that purpose. We never sell sensitive data or use it for advertising.

Receipt reading is automated, but a person reviews any rejection or dispute. We do not make automated decisions about you that have legal or similarly significant effects.

• Partner restaurants get what they need to honour a selection: your first name, the item, the member hours window, and a confirmation reference. They never get your email, phone, billing details, or receipt images. Any reporting we share with restaurants is aggregated and does not identify you.
• Service providers who work for us under contract, for things like payments, sign-in, hosting, email delivery, receipt reading, and crash reporting. Each one is limited to the job we hired it for and cannot use your data for its own purposes.
• Professional advisers such as lawyers, accountants, and insurers, when necessary.
• Authorities, when the law, a subpoena, or a court order requires it, or to protect members, restaurants, or RSTRNT PASS.
• A successor if we are acquired, merge, or sell assets, who will be bound by this policy.
• Anyone else you ask us to share with.

We do not sell personal data and we do not share it for targeted advertising. If that ever changed, we would update this policy and give you a way to opt out first.

When you upload a receipt, the image is sent to an automated reading service that extracts the text. Our agreement with that provider bars it from using your receipts to train its systems and requires it to delete the images after processing.

We keep the receipt image and the extracted details for the current membership year and the three before it, so we can settle with restaurants, resolve disputes, and detect fraud. You can ask us to delete a receipt image at any time. We may keep the extracted figures where they are part of a settlement record.

We do not use receipt data to build a spending profile of you for advertising, and we never sell it. Anything shared with restaurants from receipts is aggregated.

Wherever you live, you can:

• ask whether we hold your personal data, and see it
• correct anything inaccurate
• delete the personal data we hold about you
• get a portable copy of the data you gave us
• opt out of targeted advertising, sale of your data, and profiling with legal effects (we do none of these today)

Use the account tools in the app, or email privacy@rstrntpass.com from your account address. We respond within 45 days. If we need more time we may take one further 45 days and will tell you why. We will confirm it is you, using your account login or details on file. We will never treat you differently for exercising a right.

If we decline a request, reply with the word "Appeal" and we will review it and respond within 60 days with reasons. If you are still not satisfied, you can complain to the Texas Attorney General at texasattorneygeneral.gov.

Our website recognises the Global Privacy Control browser signal as an opt-out.

We may keep data longer where the law requires it, to resolve a dispute, or to enforce our Terms. Backups clear on a rolling cycle.

We protect your data with encryption in transit and at rest, access controls, limited staff permissions, and audit logs. Sign-in uses one-time codes sent to your phone, so there is no password for anyone to steal. No system is perfect. If a breach affects your personal data, we will notify you and the Texas Attorney General as Texas law requires.

RSTRNT PASS INC. is a US company. Your data is stored in the United States. Some of our team works from Canada and may access it there under our access controls, and some providers operate globally. By using the Service you agree to processing in the United States.

We send emails about your account and membership while you are a member; these cannot be turned off. We send member news only where you have agreed or the law allows, and every one has an unsubscribe link. We do not send text messages today. If we start, we will publish separate SMS terms and ask for your consent first.

We may update this policy. For material changes we give at least 30 days notice by email and in the app. The date at the top is the current version. Earlier versions are available on request.

RSTRNT PASS INC., a Delaware corporation, based in Houston, Texas.

Privacy requests: privacy@rstrntpass.com · Legal notices: legal@rstrntpass.com