Privacy Policy

We collect the following types of information:

• •Account Information: Name, email address, company name, and password when you create an account.
• •Employee/Staff Data: Staff names, emails, phone numbers, PINs, roles, and scheduling information entered by your organization.
• •Operational Data: Inventory counts, invoices, purchase orders, events, recipes, cash counts, revenue reports, and other business data you enter into the platform.
• •Usage Data: Pages visited, features used, session duration, device type, browser type, and IP address, collected via Google Analytics and Microsoft Clarity.
• •Payment Information: Billing details processed securely through Stripe. We do not store credit card numbers on our servers.
• •Communication Data: Messages, comments, and support inquiries you submit.

We use the following analytics services to improve our platform:

• •Google Analytics (GA4): Collects anonymized usage data including page views, session duration, traffic sources, and user demographics. Google Analytics uses cookies to identify returning visitors. Google Privacy Policy
• •Microsoft Clarity: Records anonymized session replays, heatmaps, click behavior, scroll depth, rage clicks, and dead clicks to understand user experience patterns. Clarity does not collect personally identifiable information. Microsoft Privacy Policy

These tools help us identify usability issues, optimize workflows, and improve the platform for hospitality operators.

We use cookies and similar technologies for:

• •Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• •Analytics Cookies: Used by Google Analytics and Microsoft Clarity to collect usage statistics.
• •Advertising Cookies: We may use Google AdSense on blog and educational content pages in the future. These cookies help serve relevant advertisements.

For more details, see our Cookie Policy.

• •To provide and maintain the FreshTally platform and its features
• •To process transactions and manage your subscription
• •To send transactional emails (schedule notifications, invoice alerts, count reports)
• •To improve platform usability through analytics and user behavior analysis
• •To provide customer support and respond to inquiries
• •To detect and prevent fraud, abuse, and security threats
• •To comply with legal obligations

FreshTally is a multi-tenant SaaS platform. Each organization's data is logically isolated at the database level:

• •Your inventory, invoices, staff data, events, and operational records are only accessible to authorized users within your organization.
• •We enforce role-based access controls (RBAC) to limit data access based on user roles.
• •All data is transmitted over encrypted connections (TLS/SSL).
• •Passwords are hashed using industry-standard bcrypt algorithms.

For more details, see our Data Security page.

All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor. We never store, process, or have access to your full credit card numbers. Stripe collects and processes payment information directly. Your billing history and subscription details are stored in our systems for account management purposes.

We may send you:

• •Transactional Emails: Schedule publications, shift change notifications, invoice alerts, count completion reports, and password resets. These are essential to the service and cannot be opted out of.
• •Product Updates: New feature announcements, platform improvements, and important service notifications. You can unsubscribe from these.

We share data with the following third-party services as necessary to operate the platform:

• •Stripe — Payment processing
• •Google Analytics — Website analytics
• •Microsoft Clarity — UX analytics and session recording
• •Abacus.AI — AI-powered features (invoice parsing, assistant, recommendations)
• •AWS — Cloud infrastructure and file storage

We do not sell your personal information to any third party.

We retain your data for as long as your account is active or as needed to provide services. Upon account cancellation:

• •You may request data export before deletion.
• •Account data is deleted within 90 days of cancellation, unless required by law.
• •Anonymized analytics data may be retained for platform improvement.

To request data deletion, contact us at [email protected].

Depending on your jurisdiction, you may have the right to:

• •Access, correct, or delete your personal information
• •Export your data in a portable format
• •Opt out of non-essential cookies and analytics tracking
• •Withdraw consent for data processing
• •File a complaint with a data protection authority