Privacy Policy

When We act on behalf of Our Customers

Customers use the Service to manage their own business, including information about their employees, guests, and suppliers that they import from point-of-sale (POS), accounting, and other systems. For that information, We act as a service provider (also called a processor) to the Customer: We process it only to provide the Service to that Customer and as their agreement with Us allows. If You are an employee or guest of a Tare Customer and have questions about how that business handles Your information, please contact that business directly. We will assist Customers in responding to Your requests.

Account and contact information

When You or Your organization create an account or invite You, We collect Your name, email address, phone number (if provided), profile photo (if provided), password (stored only as a secure hash by Our authentication provider), organization and restaurant memberships, role, and permissions.

Business and operational content

Information You and Your organization enter, upload, or generate while using the Service, including:

• Inventory items, barcodes, units, pack sizes, par levels, prices, and costs
• Inventory counts, spot checks, receiving, transfers, breakage, and other reports, including the person and device that recorded them
• Recipes, menus, prep sheets, process runs, and custom reports
• Suppliers, purchase orders, supplier contract prices, and invoices, credit memos, and receipts (including photos and PDFs of those documents)
• Tasks, notes, work schedules and shifts, and approvals
• Item photos and other images You upload

Information from point-of-sale systems

When a Customer connects a POS system (for example, Toast or NCR Aloha), We import data from it on the Customer's behalf. Depending on the POS and the Customer's settings, this can include:

• Menus, menu items, modifiers, categories, and prices
• Orders, checks, items sold, discounts, voids, service charges, taxes, tips, and sales totals
• Payment records: payment type, amount, tip, card brand, the last four digits of the card, and the authorization code. We do not receive or store full card numbers, card security codes, or magnetic stripe data.
• Employee records: name, employee number, job codes, contact details (email, phone, mailing address), birth date, hire and termination dates, POS security level, a hashed POS PIN, clock-in and clock-out times, hours, hourly rates, wages, and tips
• House account records: account holder or company name, contact details, credit limit, and balance

POS login credentials that a Customer gives Us to connect its POS are encrypted before We store them and are used only to synchronize that Customer's data.

Information from other connected services

• Accounting (QuickBooks): when connected, We send approved bills and receive the supplier, account, and mapping information needed to post them.
• Email You route to Tare: if Your organization forwards supplier emails to its Tare address, We receive the sender address, subject, message body, and attachments to match them to orders and invoices.
• Supplier orders: when You send a purchase order through the Service, We send it to the supplier contact You choose.
• Connected AI tools: if You connect an external AI assistant to Tare through the Model Context Protocol (MCP), We record the connection and the requests made through it.

Information from Your device's features

The mobile Application asks for permission before using these features. You can turn them off at any time in Your device settings, though related features will stop working.

• Camera and photo library: to scan barcodes, photograph invoices and receipts, take item photos, and record shelf and bar video for automated counting.
• Microphone: for voice counting, voice questions to the assistant, and dictation. Audio is transcribed to provide the feature.
• Motion sensors: during shelf video capture, the device's motion and orientation readings are recorded with the video to support automated counting.
• Bluetooth: to connect to a kitchen or bar scale. We receive weight readings, not other Bluetooth data.
• Face ID, Touch ID, or device passcode: to unlock the Application. This check happens entirely on Your device; We never receive biometric data.
• Notifications and Live Activities: We store a push token for Your device so We can send You notifications You have enabled.

We do not collect Your device's precise location.

AI assistant and AI feature content

When You use the Tare assistant or other AI features, We collect Your messages, voice input, uploaded files and images, the assistant's responses, actions You approve, feedback You give (such as thumbs up or down), and preferences the assistant saves to personalize future answers.

Usage, device, and diagnostic information

We collect information automatically when You use the Service, including:

• IP address, browser type and version, operating system, device model, app version, and an installation identifier
• Sign-in sessions, device registrations, and the date and time of activity
• Synchronization logs for the mobile Application, including network type and errors
• Error and crash reports
• Page load and performance measurements
• If the mobile Application needs to recover data or You request support, a backup of the Application’s local database may be uploaded so We can restore Your data or diagnose the problem

Product analytics and session replay

We use Google Analytics, Firebase Analytics, and PostHog to understand which features are used, where people get stuck, and whether the Service is working for each Customer. These tools record events such as pages and screens viewed, actions taken (for example, starting or submitting a count, scanning a barcode, or searching), how long tasks take, and whether they succeed. Events are tagged with pseudonymous identifiers for You, Your organization, and Your restaurant, Your role, the item or report involved, and device and app details. We do not include Your name, email address, or phone number in analytics events.

PostHog session replay records how You interact with the Service's screens so We can find and fix usability problems. Text You type into form fields is masked before recordings leave Your device, and on mobile, images are masked as well.

We turn off the advertising features of these tools: Google signals, ad personalization, and advertising storage are disabled, and analytics data is not used for advertising. You can turn off analytics and session replay for Your account at any time with "Share usage analytics" in Your profile settings on web or mobile.

Billing information

Subscription payments are processed by Stripe. Stripe collects and stores Your payment card details; We receive Your billing contact details, card brand, last four digits, expiration date, and subscription and invoice history.

Communications

When You contact support, submit a diagnostic report, request data deletion, or respond to a survey, We collect the information You provide. We also record whether emails We send were delivered.

How AI Providers process information

AI Providers process this information on Our behalf to generate responses and summaries, create embeddings, transcribe audio, classify or extract information, generate product images, support tool-based workflows, detect misuse, and operate, secure, and troubleshoot AI-powered features. Our current AI Providers are OpenAI, L.L.C., Anthropic, PBC, and Google LLC (Gemini). The provider used may vary by feature, availability, configuration, or Customer agreement.

Model training and human review

We use AI Providers' commercial API offerings and do not authorize them to use Customer Content to train their general-purpose models unless We first obtain authorization or give separate notice. AI Providers may use automated systems, and in limited circumstances authorized personnel, to monitor for abuse, enforce safety policies, provide support, or comply with law, subject to their agreements with Us. We do not sell Customer Content to AI Providers or disclose it to them for advertising.

Retention and location of AI processing

We may retain AI inputs, outputs, chat history, and related records for as long as reasonably necessary to provide the Service, maintain security, resolve disputes, comply with law, and meet Our contractual obligations, after which We delete or de-identify them. AI Providers may temporarily retain inputs, outputs, and safety metadata under their service terms. Deleting information from Tare may not immediately remove copies held in a provider's security logs or backups; those copies expire under the provider's retention schedule. We do not promise zero data retention unless We agree to it in writing. AI Providers and their subprocessors may process information in the United States and other countries.

Your choices and responsibilities

You may choose not to use AI-powered features, although some functionality may then be unavailable. Do not submit passwords, full payment card numbers, government identification numbers, health information, or other highly sensitive information to an AI feature unless the Service expressly asks for it and You are authorized to provide it. If You submit Personal Data about another person, You are responsible for having a lawful basis and providing any required notice.

Service providers

We may add or replace service providers. When We do, We update this list.

How to make a request

Submitting a request does not immediately delete or change Your data; We may need to verify Your identity first.

• Web form: trytare.com/data-deletion
• Email: support@trytare.com with the subject line "Privacy Request" (or "Data Deletion Request")
• Phone: 626-388-5076

Categories of Personal Information We collect

In the last 12 months, We have collected the following categories, from the sources and for the purposes described above:

• Identifiers (name, email address, phone number, account and device identifiers, IP address)
• Customer records (contact and billing details)
• Commercial information (subscription and purchase history; business transaction records)
• Internet or other electronic network activity (usage, analytics events, session recordings, diagnostic logs)
• Audio, electronic, and visual information (voice input, photos, and video You capture)
• Professional or employment-related information (role and permissions; for Customers that connect a POS, employee job, schedule, time, and pay records)
• Sensitive personal information: account login credentials, and for Customers that connect a POS, employee birth dates. We use sensitive personal information only to provide the Service and as otherwise permitted by the CCPA, not to infer characteristics about You.
• Inferences used to personalize the Service (for example, assistant preferences)

We disclose these categories for business purposes to the categories of recipients described in "How We Share Information."

Your California rights

You may request to know what Personal Information We collected, used, and disclosed about You; to access it; to correct it; and to delete it, subject to legal exceptions. We do not sell or share Personal Information as those terms are defined in the CCPA, and We have not done so in the last 12 months, so there is no sale or sharing to opt out of. We do not knowingly sell or share the Personal Information of consumers under 16. We will not discriminate against You for exercising Your rights.

You may make a request using the methods in "How to make a request" above, or through an authorized agent with Your signed permission. We will verify requests by matching the information You provide with information We hold, and may ask for additional information to do so.