Privacy Policy

1. Who this covers

This policy applies to NoWrongOrder (“No Wrong Order”, “we”, “us”) and to the website at https://nowrongorder.com, the venue dashboard, the guest quiz reached by scanning a venue’s QR code, and related services (together, the “Service”). It covers three kinds of people:

• Venues: owners, managers, and staff who create an account and manage a menu.
• Guests: people who scan a QR code at a venue and use the quiz.
• Visitors: anyone browsing our website or contacting us.

2. What we collect

From venues

• Account details: name, email address, password (stored hashed), and role.
• Venue details: venue name, address, branding, offering type, menu items, prices, descriptions, ingredients, allergen and dietary information, and flavor profiles.
• Billing details: subscription plan and status. Card numbers are collected and stored by our payment processor, Stripe. We never see your full card number.
• Optional business data you upload for Intelligence features: food cost, sales volume, and menu photos.
• Point-of-sale data on Enterprise plans, when you connect a POS system: order line items, timestamps, and ticket totals needed to tie recommendations to orders. We do not receive guest payment card data from your POS.
• Support and contact messages you send us.

From guests

The guest quiz is designed to work without an account, an app, or your name.

• Quiz answers: mood, flavor preferences, dietary and allergen selections, budget range, and similar choices you make during the quiz.
• The recommendations you were shown and any items you tap to add to your order card.
• The venue and, if the QR code encodes it, the table number.
• Technical data: browser type, device type, approximate region derived from IP address, pages viewed, and timestamps.
• If a venue enables it and you choose to opt in, an email address or phone number to save your picks or join a venue loyalty program. This is always optional.

Allergen and dietary selections are sensitive to you, so we treat them carefully. They are used to filter and rank recommendations, shown on the order card you choose to present to staff, and reported to venues only in aggregate (for example, “12% of guests selected gluten-free this month”).

From visitors

• Contact form submissions: name, email, venue, role, and your message.
• Website analytics as described in the cookies section below.

3. How we use it

• To run the Service: generate recommendations, display menus, produce order cards, and operate the venue dashboard.
• To provide Intelligence and Enterprise features: menu health scores, menu engineering, A/B tests, recommendation conversion, and location comparisons. These are built from aggregated quiz and order data.
• To bill venues, manage trials, and send account and service notices.
• To respond to support requests and contact form messages.
• To improve the Service, including improving flavor profiles and the recommendation model using aggregated, de-identified data.
• To keep the Service secure, prevent abuse, and comply with law.

We do not sell personal information. We do not use guest quiz answers to advertise to guests.

4. How we share it

• With the venue you visited. Guests’ quiz answers and picks are shared with that venue, mostly in aggregate. The order card you show to staff is shared by you, on your screen.
• Service providers who work on our behalf under contract: hosting (Vercel), database and authentication (Supabase), payments (Stripe), transactional email (Resend), and AI model providers used to build flavor profiles from menu text and images. Model providers receive menu content, not guest data.
• POS providers you connect on Enterprise plans, to the extent needed for the integration you turned on.
• Legal and safety: when required by law, to enforce our terms, or to protect the rights and safety of guests, venues, or the public.
• Business transfers: if we are acquired or merge, data may transfer to the successor, who must honor this policy.

5. Cookies and analytics

We use strictly necessary cookies to keep venues signed in and to keep a guest’s quiz progress during a visit. Our website analytics are privacy-focused and do not use cross-site tracking cookies. We do not run third-party advertising trackers. You can block cookies in your browser; the venue dashboard will not work without the sign-in cookie.

6. Retention

• Venue account and menu data: for as long as the account is active, then deleted or de-identified within 90 days of closure unless we must keep it for legal or billing reasons.
• Guest quiz sessions: identifiable technical data is deleted or de-identified within 12 months. Aggregated statistics are retained.
• Contact form messages: up to 24 months.
• Billing records: as required by tax and accounting law.

7. Your choices and rights

• Venues can view, edit, export, and delete their menu and account data in the dashboard or by contacting us.
• Guests can use the quiz without providing any contact details. If you opted in to save picks or join a loyalty program, you can ask us or the venue to delete that record.
• Depending on where you live (for example California, the EU, or the UK), you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain uses. We honor these requests regardless of location where practical.
• We do not discriminate against you for exercising these rights.

To exercise any right, email hello@nowrongorder.com. We may need to verify your identity first.

8. Security

We use encryption in transit, encrypted storage, role-based access controls, and row-level database security so venues can only reach their own data. No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you as the law requires.

9. Children

The Service is for adults. Bar-mode quizzes involve alcohol and are intended for guests of legal drinking age. We do not knowingly collect personal information from children under 13, and venues must not use the Service to do so.

10. International transfers

We are based in the United States and process data there. If you use the Service from elsewhere, your information will be transferred to and processed in the United States under this policy and appropriate safeguards.

11. Allergen information

Allergen and dietary filtering relies on ingredient and cross-contact information supplied by the venue. We show it to help you narrow choices, not to guarantee safety. Always confirm allergens with venue staff before ordering. See our Terms of Service for more.

12. Changes

We will post any changes here and update the effective date. If a change materially reduces your rights, we will notify venues by email and give notice on the Service before it takes effect.

13. Contact

NoWrongOrder
Michigan, United States
hello@nowrongorder.com