Savory7 Privacy Policy

Last updated: October 10, 2025

Welcome to Savory7. This Privacy Policy explains how Savory7, LLC ("Savory7", "we", "us", or "our") collects, uses, discloses, and safeguards information when you use our websites and applications, including our online ordering tools and point of sale (POS) products we provide to restaurants (collectively, the "Services"). Savory7 is a California-based limited liability company.

By using our Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

Scope

This policy applies to information we process as a controller for our own websites and products, and to information we process on behalf of our restaurant customers as a service provider/processor. When we act as a processor for a restaurant, that restaurant’s privacy policy governs how your information is used and you should direct requests to that restaurant.

Information We Collect

The information we collect depends on how you interact with us. Categories may include:

• Identifiers and contact information: name, username, email address, phone number, delivery address.
• Commercial information: order history, cart details, transaction totals, loyalty activity.
• Payment information: tokenized payment details and transaction authorization information processed by our payment partners; we do not store full card numbers.
• Internet or network activity: device/browser type, IP address, cookie identifiers, pages viewed, interactions, and diagnostics.
• Geolocation data: general location derived from IP address, and delivery address you provide.
• Professional information: for restaurant staff users, role and account/establishment information.
• User content and communications: feedback, support requests, and communications with us.

Sources of Information

• Directly from you when you create an account, place an order, or contact support.
• From restaurants and merchants who use our Services.
• From payment processors and service providers that support our Services.
• Automatically from your device when you access or use the Services.

How We Use Information

• Provide, operate, and improve the Services, including order processing and POS functionality.
• Create and manage accounts; authenticate users; provide customer support.
• Facilitate payments and prevent fraud and abuse.
• Analyze usage to improve performance, reliability, and features.
• Send transactional communications (e.g., receipts, order updates) and, where permitted, promotional communications.
• Comply with legal obligations and enforce our terms.

How We Disclose Information

We may disclose information as follows:

• Service providers and processors: to infrastructure, analytics, communications, and payment partners that process information for us under contract.
• Restaurants/Merchants: to the restaurant you order from or interact with via the Services.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets.
• Legal: to comply with law, lawful requests, or to protect rights, users, or the public.
• Affiliates: within our corporate family for purposes consistent with this policy.

We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA).

Cookies and Similar Technologies

We use cookies and similar technologies to operate and secure the Services, remember preferences, perform analytics, and measure the effectiveness of features. You can control certain cookies through your browser settings. Some features may not function properly without essential cookies.

Data Retention

We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes. Retention periods vary based on the type of data and our relationship with you.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Children

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will take steps to delete it.

Your Privacy Rights

Depending on your location, you may have rights regarding your information. For California residents, these may include the right to:

• Know the categories and specific pieces of personal information we collect, use, disclose, and retain.
• Request deletion of personal information, subject to exceptions.
• Correct inaccurate personal information.
• Access and obtain a portable copy of certain information.
• Opt out of the sale or sharing of personal information (we do not sell or share as defined by CPRA).
• Limit the use and disclosure of sensitive personal information (we use only as necessary to provide the Services).
• Be free from discrimination for exercising your rights.

To exercise your rights, contact us at: privacy@savory7.com. We will verify your request consistent with applicable law and respond within the required timeframes. Authorized agents may submit requests on behalf of a consumer, subject to verification.

Processing on Behalf of Restaurants

When we process personal information on behalf of a restaurant using our Services, we do so pursuant to our agreement with that restaurant and act as a service provider/processor. Please direct any rights requests regarding that information to the relevant restaurant.

International Transfers

We are based in the United States and process information in the U.S. Information may be transferred to and processed in countries that may have different data protection laws than your country.

Third-Party Links and Services

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when this policy was last revised. Material changes will be communicated as required by law.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at privacy@savory7.com.

Savory7, LLC — California, USA