Privacy Policy

How Platter Management Inc. collects, uses, discloses, and protects personal information across our website, POS application, and restaurant management services.

Effective date: November 2023Last updated: 22 May 2026

Platter Management Inc. (“Platter,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information we handle. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights available to you when you use our website, the Platter point-of-sale (POS) application, the Platter Back Office dashboard, and related services (together, the “Services”).

By using the Services, you acknowledge the practices described in this Policy. If you do not agree, please discontinue use of the Services.

1.Overview & Scope

Platter provides an all-in-one, cloud-based restaurant management and POS platform to restaurants and hospitality businesses (“Clients”). This Policy applies to personal information we handle as part of operating our business and Services, including information about:

  • Visitors to our website and people who request a demo or contact us.
  • Client account owners, administrators, and authorized users (such as managers, servers, cashiers, and kitchen staff) and
  • Individuals whose information our Clients enter into or process through the Services (for example, guests who place orders or reservations). see Section 7

We handle personal information in accordance with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation, and other privacy laws that may apply to your use of the Services.

2.Information We Collect

The categories of personal information we may collect include:

Account & contact information

  • Name, business name, email address, phone number, and mailing/billing address.
  • Login credentials, user roles, and POS access PINs.
  • Demo requests, support inquiries, and other communications with us.

Business & operational data

  • Restaurant configuration such as menus, items, pricing, floor plans, and locations.
  • Orders, transactions, reservations, and takeout/delivery records.
  • Inventory, reporting, and analytics data generated through your use of the Services.

Staff & user data

  • Employee profiles, assigned roles and permissions, and timekeeping records (such as clock-in/clock-out and scheduling information) entered into the Services.

Payment-related information

  • Transaction amounts, dates, and records, and limited card metadata. Full payment card details are processed by our payment providers and are not stored by Platter see Section 8.

Device, technical & usage data

  • IP address, device and browser type, operating system, app version, and device identifiers
  • Log data, feature usage, diagnostic information, and information collected through cookies and similar technologies see Section 9

3.How We Collect It

We collect personal information:

  • Directly from you — when you request a demo, create or configure an account, contact support, or use the Services
  • Automatically — through your use of our website and applications, via cookies, log files, and similar technologies
  • From our Clients — when a Client adds you as an authorized user or enters information into the Services
  • From third parties — such as payment processors, integration partners, and service providers that support the Services

4.How We Use Information

We use personal information to:

  • Provide, operate, maintain, and improve the Services.
  • Set up accounts, authenticate users, and manage roles and permissions.
  • Process orders, transactions, and payments through our payment providers.
  • Generate reports, analytics, and operational insights for our Clients.
  • Provide onboarding, customer support, and respond to inquiries.
  • Send service-related communications, updates, and (where permitted) marketing messages you can opt out of
  • Monitor, secure, and troubleshoot the Services, and detect and prevent fraud or misuse.
  • Comply with legal obligations and enforce our agreements.

6.How We Share Information

We do not sell personal information. We share it only as described below:

Service providers

We engage trusted third parties to perform functions on our behalf. They are authorized to use personal information only as necessary to provide services to us and are bound by appropriate confidentiality and data-protection obligations. These include:

ProviderPurpose
MonerisCard payment processing
StripeCard payment processing & payouts
Amazon Web ServicesCloud hosting & infrastructure
DeliverectOnline ordering & delivery integrations
TwilioSMS / messaging notifications
Apple App Store / Google PlayApplication distribution

Legal & safety

We may disclose information where required to comply with applicable law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of Platter, our Clients, or others.

Business transfers

If Platter is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy and applicable law.

With your direction

We share information with other parties when you or our Client direct or authorize us to do so (for example, when enabling an integration).

7.Data From Our Clients' Customers

When our Clients use the Services to manage their operations, they may enter or process personal information about their own customers and staff (for example, names and contact details for reservations or delivery orders). With respect to that information, Platter acts as a service provider that processes the information on the Client's behalf and under the Client's instructions.

If you are a guest or employee of a restaurant that uses Platter: the restaurant not Platter is responsible for that information and for its own privacy practices. Please direct requests about your information (including access, correction, or deletion) to the restaurant directly. We will assist our Client in responding to such requests as required.

8.Payment Information

Card payments through the Services are processed by PCI-DSS-compliant payment providers Moneris and Stripe using the gateway configured by the Client. Full payment card numbers and sensitive authentication data are handled directly by these providers and are not stored on Platter devices or retained by Platter. Platter retains transaction records (such as amounts, dates, and status) needed to operate the Services and for reporting.

Your use of a payment provider is also subject to that provider's own privacy policy and terms.

9.Cookies & Tracking Technologies

Our website and applications use cookies and similar technologies to operate the Services, remember preferences, maintain sessions, measure performance, and understand usage. Some cookies are necessary for the Services to function. others help us improve them.

You can control or disable cookies through your browser or device settings, though some features may not work properly if you do. Where required by law, we will obtain consent before placing non-essential cookies.

10.Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, to provide the Services, and to meet our legal, accounting, tax, and reporting obligations. Retention periods vary depending on the type of information and the context in which it was collected.

[Specify retention practices] e.g., account information retained for the duration of the account plus 7 period after closure; transaction records retained for 7 years to meet tax/accounting requirements. When information is no longer required, we take reasonable steps to securely delete or anonymize it.

11.How We Protect Information

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and loss. These include measures such as encryption in transit, access controls and role-based permissions, secure cloud infrastructure, and monitoring.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials and POS access PINs confidential.

12.Where Your Data Is Stored

Platter's infrastructure is hosted on Amazon Web Services, primarily within Canada. In the course of providing the Services or working with service providers, personal information may be processed or stored in other jurisdictions. Where information is handled outside your province or country, it may be subject to the laws of those jurisdictions, including lawful access by courts, law enforcement, and government authorities. We take reasonable steps to ensure appropriate protection wherever information is processed.

13.Your Privacy Rights

Subject to applicable law, you may have the right to:

  • Access the personal information we hold about you and request a copy.
  • Request correction of inaccurate or incomplete information.
  • Withdraw consent to our use of your information (subject to legal/contractual limits).
  • Ask questions about our handling of your personal information or make a complaint.

To exercise these rights, contact us using the details in Section 17. We may need to verify your identity before responding. If you are an authorized user of a Client account, or a customer of a restaurant that uses Platter, some requests may be directed to the relevant Client (see Section 7).

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your jurisdiction.

14.Children's Privacy

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

15.Third-Party Links & Services

The Services may contain links to, or integrations with, third-party websites and services that we do not control. This Policy does not apply to those third parties. We encourage you to review their privacy policies before providing them with personal information.

16.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

17.Contact Us

If you have questions, requests, or concerns about this Policy or your personal information, please contact our Privacy Officer: