Effective and last updated August 18, 2026

Privacy Notice

This Privacy Notice applies to hospiedge.com, HospiEdge account and application services, customer Hybrid installations, and the HospiEdge Local Runtime. HospiEdge is a Bennett Edge Group company. Privacy questions and verified requests may be sent to admin@hospiedge.com or through the Contact form. Do not include sensitive records in the first message.

For restaurant operational records, the restaurant or organization using HospiEdge generally decides why staff, applicant, guest, reservation, order, and similar records are handled. HospiEdge generally processes those records to provide the service under the customer's instructions and agreement. HospiEdge separately determines how it handles public-site inquiries, HospiEdge accounts, billing, security, fraud prevention, service administration, and optional site analytics. The applicable agreement and law control if a role differs for a particular service.

Public-channel safety: do not send passwords, card numbers, bank details, government identifiers, employee files, guest records, health information, production exports, or API credentials through a public form or ordinary email. Begin with a description of the request and wait for a verified transfer method.

Information we handle

  • Account and subscription information: name, email, password hash, verification state, restaurant and location membership, role and app access, selected plan, entitlement, billing status, and provider references.
  • Restaurant operations: menus, recipes, inventory, suppliers, tables, reservations, waitlists, guest requests, orders, checks, payment status, loyalty activity, labels, schedules, time records, training, tasks, reports, finance records, and operational notes entered by authorized users.
  • Staff and applicant information: contact details, work availability, job applications, onboarding details, emergency contacts, role, location, schedule, attendance, time punches, and payroll-readiness information. Customers must not enter information they are not authorized to process.
  • Public inquiries and support: name, email, optional phone or organization, selected interests, subject, message, support details, and request reference.
  • Payment and merchant setup: processor customer, account, location, device, checkout, payment, refund, and status identifiers. Card entry occurs through the selected processor; HospiEdge is not designed to store full card numbers or card security codes.
  • AI feature content: prompts, selected business context, generated output, and review state when an authorized user chooses an AI feature. Users must review output before acting on it.
  • Technical and security information: IP address, user agent, session and authentication events, timestamps, route and error information, device or Runtime identity, synchronization state, security events, and audit records.
  • Analytics choice and measurements: the browser stores your analytics choice. Google Analytics is not requested unless you accept optional analytics and is disabled when Global Privacy Control is enabled.

Why we use information

HospiEdge uses information to provide and secure requested services; authenticate users; enforce restaurant, location, role, and app boundaries; process inquiries and subscriptions; synchronize authorized Hybrid data; support restaurant workflows; prevent abuse and fraud; diagnose failures; maintain audit and recovery evidence; comply with law; and improve the public site when optional analytics is accepted.

Where a legal basis is required, processing may be necessary to perform a contract or take requested pre-contract steps, comply with law, protect users and the service, pursue legitimate interests in secure and reliable operations, or honor consent. You may withdraw consent for future optional analytics at any time through “Do Not Sell or Share / Privacy choices” in the footer. Withdrawal does not affect earlier lawful processing.

Services that may receive information

Information is disclosed only as needed for an authorized purpose, including to the customer organization and its authorized users; our hosting infrastructure provider for hosted infrastructure; Stripe for HospiEdge subscriptions and Stripe-enabled restaurant payments; Square when a restaurant chooses Square; a configured email-delivery provider; OpenAI when an authorized user invokes an OpenAI-backed feature; and Google Analytics only after the visitor accepts optional analytics. Professional advisers, authorities, or a successor organization may receive limited information when legally required or necessary to protect rights, complete a transaction, or continue the service under appropriate safeguards.

Third-party services operate under their own terms and privacy notices for activities they independently control. HospiEdge does not sell personal information for money. Optional analytics is not loaded before consent, declining analytics prevents that optional disclosure, and a browser Global Privacy Control signal is treated as a decline.

Your choices and privacy rights

  • Open “Do Not Sell or Share / Privacy choices” in the footer to accept or decline optional analytics. Necessary security, session, and choice storage cannot be disabled through that control.
  • Depending on applicable law, you may request access, correction, deletion, portability, restriction, or objection; ask for the categories or specific pieces of information handled; or opt out of a regulated sale, sharing, or targeted advertising use.
  • Non-discrimination: HospiEdge will not discriminate against a person for exercising an applicable privacy right. We may need to verify identity, authority, account, restaurant, location, and jurisdiction before acting.
  • An authorized agent may submit a request where permitted by law, but HospiEdge may require proof of authorization and direct identity confirmation.
  • If restaurant operational data is controlled by a HospiEdge customer, send the request to that restaurant or employer first. HospiEdge will assist the customer as required by the applicable agreement and law.

To make a request, email admin@hospiedge.com or use the Contact form. Describe the right you want to exercise and the account or interaction involved, but do not send passwords, identification documents, or sensitive exports until HospiEdge provides a verified transfer method. You may appeal a denied request by replying with “Privacy appeal” and the request reference. You may also contact the privacy regulator available in your jurisdiction.

Retention and deletion

HospiEdge retains information only for as long as reasonably necessary for the service and purpose described here, customer instructions, account and subscription administration, security and abuse prevention, backup and recovery cycles, dispute handling, accounting, and legal obligations. Retention therefore varies by record and relationship. When information is no longer required, it is deleted, de-identified, or isolated from ordinary use, subject to backup rotation and legal holds. A customer remains responsible for its own required records and exports before account closure.

Local Runtime and Hybrid data

Local Runtime and Hybrid installations keep documented restaurant-local data on the user's Windows device and may synchronize approved records with HospiEdge. The customer controls the device, Windows accounts, physical access, backups, endpoint protection, disk encryption, and network. HospiEdge binds local web services to loopback and applies application access controls, but no application can protect data from a person who controls the operating-system account or has administrator access. Customers must keep Windows and the installer current, restrict device access, use supported security software, and report a lost or compromised device promptly.

Security and incidents

HospiEdge uses measures intended to reduce risk, including encrypted transport, password hashing, secure session cookies, role and location authorization, request-forgery protection, input and route boundaries, private credential storage, audit evidence, backups, and limited local listeners. No internet or local system is invulnerable, and HospiEdge cannot guarantee that an attack or loss will never occur. Report a suspected vulnerability or incident through Security readiness or admin@hospiedge.com; do not include exploit details in a public form.

International use

HospiEdge and its service providers may process information in the United States and other locations where they operate. When applicable law requires a transfer mechanism or additional safeguards, the controlling customer agreement and provider terms must supply them. Users outside the United States should confirm that the purchased service and agreement meet their requirements before submitting regulated information.

Children

HospiEdge business services and this site are not directed to children under 13, and HospiEdge does not knowingly collect personal information directly from a child under 13 through the public site. Restaurant customers are responsible for obtaining any authorization required before entering information about minors, including applicants, employees, or guests. Contact HospiEdge to request review of information believed to have been submitted improperly.

California notice

During the preceding 12 months, HospiEdge may have handled the categories described above: identifiers and contact information; customer and commercial records; internet or network activity; approximate location inferred from an IP address; employment-related information; financial and payment-status records; audio or visual files a user chooses to provide; and inferences needed for security, access, or enabled workflow recommendations. Sources include you, your organization, authorized users, devices and Runtime services, payment providers, and service providers. The business purposes and recipient categories are described above. HospiEdge does not knowingly sell or share personal information of people under 16.

Public Website Terms

By using the public site, you agree to these Website Terms. A signed order, subscription terms accepted at checkout, and any customer agreement control a purchased service and take priority if they conflict with these public-site terms.

  • Authorized use: use the site only for lawful evaluation, purchasing, support, and ordinary interaction. Do not probe or bypass access controls, introduce malicious code, disrupt service, scrape at abusive rates, impersonate another person, or submit information you lack authority to provide.
  • Accounts: keep credentials and devices secure, use accurate information, assign the least access needed, and notify HospiEdge promptly of suspected compromise. A public inquiry, payment return, or demo does not itself grant access.
  • Payments and renewal: the plan, trial, price, renewal, cancellation, refund, and entitlement terms shown and accepted during checkout control the subscription. A browser return is not proof of payment; signed provider confirmation and account approval control access.
  • Customer content: you retain rights you have in information you submit and grant HospiEdge the limited rights needed to provide, secure, support, and improve the contracted service. You represent that you have authority to submit and instruct HospiEdge to process that information.
  • AI: generated output may be incomplete or wrong. It is not legal, medical, tax, employment, food-safety, or accounting advice. A qualified person must review output before publication, purchasing, scheduling, employment, payment, or another consequential action.
  • Intellectual property: HospiEdge software, site content, branding, and documentation are protected by applicable law. Except for an express license in a purchased agreement, no rights are transferred.
  • Third parties: links and integrations may lead to independent services. HospiEdge is not responsible for a third party's separate service, policy, or availability.
  • Service limits: public information is provided for evaluation and may change. To the extent permitted by law, the public site is provided without an implied promise that it is uninterrupted, error-free, secure against every attack, or suitable for a particular purpose. Rights that cannot lawfully be excluded remain unaffected.

The governing law, dispute process, warranty, indemnity, liability, service level, suspension, termination, data-return, and notice provisions for a purchased service must be stated in the controlling customer agreement. Nothing on this public page replaces those accepted terms or limits rights that cannot legally be limited.

Changes and contact

HospiEdge may update this notice when services, practices, or law change. The current effective date will appear above, and material changes will be communicated as required by applicable law or the controlling agreement. Questions may be sent to admin@hospiedge.com.