Privacy Notice

86’d Operations is operated by 86 Operations Restaurant Management Software LLC, an Ohio limited liability company. DRAFT — PENDING LEGAL REVIEW. This document has not been reviewed by counsel, has no effective date and is not yet a binding agreement. Who this covers: restaurant owners and managers who use 86'd, their employees whose information is entered, and guests whose reservation or event details are stored. 1. Account information: name, email, role, assigned locations, permissions, sign-in method, two-step verification settings (stored encrypted) and acceptance records. 2. Restaurant business information (owned by the restaurant): sales, labor, inventory, counts, invoices and invoice images, vendors, recipes and costs, tasks, checklists, manager logs, reports and settings. 3. Employee information entered or imported by the restaurant: contact details, roles, schedules, time-off, hours, tips and tip statements, sales attributed to the employee, report cards and performance notes, and pay-rate fields where the restaurant enters them. 86'd does not ask for Social Security numbers or bank details, and removes SSN-like and card-like patterns before any AI processing. 4. Guest and event information entered by the restaurant: guest name, contact details, preferences, allergies, notes, visit history, and event/BEO details. Event deposits are recorded in 86'd only; 86'd does not collect or hold guest payments. 5. Technical and security information: IP address, browser/device type, sign-in times, session records, rate-limit and security events, audit records of changes, and server error logs. 86'd does not use a third-party error-reporting service. 6. Website usage information: on public marketing pages 86'd records simple first-party events (for example page or video views and sign-up starts) with a random browser identifier stored in your browser; these events are stored by 86'd and are not shared with advertising networks. Cookies and browser storage: 86'd uses cookies required for sign-in and security (session and refresh cookies that scripts cannot read, a short-lived two-step-verification cookie). The browser stores your selected location, a random website-visit identifier, a sign-in sync signal between tabs, and an offline copy of the app shell. The hosting provider's delivery network also sets a visitor identifier cookie (about 1 year) and a session cookie (30 minutes) [purpose and classification to be confirmed with the hosting provider]. [Counsel: confirm which items are strictly necessary and whether any consent or opt-out notice is required.] Analytics and session recording: 86'd does not record user sessions or screens and does not use session-replay tools, advertising pixels or cross-site tracking. Third-party product analytics have been removed from the 86'd website and app. [Counsel: decide how to address the third-party analytics script with session recording that was loaded by earlier versions of the website — see internal assessment PRIV-001.] Why: to provide the service, secure accounts, prevent abuse, provide support you request, bill subscriptions and understand interest in the public website. Roles: for employee and guest information, the restaurant decides what is collected and why (it is the business/controller); 86'd processes it on the restaurant's instructions (service provider/processor). Employees and guests should contact the restaurant first; 86'd will assist the restaurant. Sharing: only with the subprocessors listed in the Subprocessor List, and when legally required. We do not sell personal information or share it for cross-context behavioral advertising. AI: see the AI Processing Disclosure. AI features run only when the restaurant owner keeps them on. Restaurant data is not used by 86'd to train shared models; provider retention terms are pending confirmation. Retention and deletion: see the Retention & Deletion Policy. Closing an account starts a 30-day recoverable window, then restaurant data is purged from the active system; backup copies expire on the hosting provider's schedule [to be confirmed]. Your requests: account users can ask to access, correct or delete their information through Legal & Privacy or by email. Employees and guests should contact the restaurant; 86'd will help the restaurant respond. [Counsel: list applicable state-law rights, response times and appeal process.] Contact: privacy@86operations.com (privacy and data requests) · security@86operations.com (security reports)