When you access or use our Services, we may receive or collect information that identifies you or relates to you, including but not limited to your first and last name, telephone number, IP address, postal and email addresses and biometric data (as further described herein) (collectively, “Personal Information”).

Information You Provide to Us: In general, you may visit our Site without telling us who you are or sharing any Personal Information with us. When you register for an account for our Services (an “Account”), use other aspects of our Services, or communicate with us about our Services, we may ask you to provide certain Personal Information, such as your first and last name, your email address, and your address. We may also ask you whether you want to receive text messages relating to our Services. By providing your mobile phone number, you expressly consent to receive text messages from us relating to our Services at that number. Third-party data and message fees may apply. You may decline to provide Personal Information to us, but, if you do so, certain features of our Services may not be available to you or the performance of certain features of our Services may be limited or not work at all.

Photographs. Certain functionalities of the Services may prompt you to provide biometric data, namely by being photographed by the Services, in order to identify you by technical means for purposes of clocking in to provide services to your employer. We do not collect such biometric data without your consent.

Information Collected From Devices: When you access or use our Services via a computer or mobile device, including, without limitation, a desktop computer, laptop, mobile phone, tablet, or other electronic device (each, a “Device”), we may collect information from your Device, such as your Device type and manufacturer, your Device operating system and version, your mobile carrier, your Device identifiers, your mobile phone number, your IP address, your browser type, your network connection type, your general location, information about the webpage that referred you to our Services or that you visited prior to our Services, and your behavior and activity on our Services.

Location Information: When you interact with the Services, we may collect information about your location, including: (a) precise geolocation data from your mobile device, if you grant permission through your device settings; (b) approximate location derived from your IP address or network information; (c) venue-level location data when you open a tab, place an order, scan a QR code, tap an NFC-enabled device, or interact with an App Clip at a participating venue; and (d) location patterns inferred from your transaction history and venue interactions over time. We use location information to provide and improve the Services, enable venue-specific features, deliver location-relevant offers and advertising, and for analytics purposes. You may disable precise location collection through your device settings, but venue-level location data will still be collected when you transact at participating venues, as this information is inherent to the transaction itself.

Information Collected by Cookies and Similar Technologies: When you access or use our Services, we may place small data files on your Device that assign random, unique numbers to your Device to enable us to recognize your Device when you access or use our Services. These data files may be cookies, pixel tags, other local shared objects, or similar technologies provided by your browser or associated applications (collectively, “Cookies”). We use Cookies to recognize your Device, manage and store your settings and preferences for our Services, improve our Services, offer targeted products and services to you, advertise to you on third-party websites, and collect and analyze information about your access and use of our Services. The Cookies we use in connection with our Services may include the following:

Session Cookies: Session Cookies are temporary Cookies that expire and are automatically erased when you close your browser window. We may use session Cookies to grant you access to content and to enable actions that require you to be logged into your Account to perform.

Persistent Cookies: Persistent Cookies are Cookies that usually have an expiration date in the distant future and remain in your browser until they expire or you manually delete them. We may use persistent Cookies to better understand usage patterns so we can improve our Services. For example, we may use a persistent Cookie to associate you with your Account or to remember your choices for our Services.

Third-Party Cookies: We may permit certain third parties to place Cookies through our Services to provide us with better insight about the use of our Services and user demographics and to provide relevant advertising to you. These third parties may use Cookies to collect information about your online activities over time and across different websites when you access or use our Services. For example, we may use Google Analytics to analyze usage patterns for our Site and Google AdWords to provide targeted advertising to you on third-party websites and applications. In connection with such services, Google may generate cookies to capture information about your access and use of our Site and third-party websites and applications that Google may use to display targeted advertising, compile reports on activity for us, and provide other related services. Your web browser may automatically send certain information to Google, such as the web address of the page that you are visiting and your IP address. To opt out of Google Analytics for our Site, visit the Google Analytics opt-out page and install the add-on for your browser. You can also use Ads Settings to manage the Google ads you see and opt out of Ads Personalization.

We may also use additional analytics, customer data platform, and marketing automation tools, including Amplitude, Braze, Firebase, and similar services, to analyze usage patterns, create behavioral segments, personalize your experience, and deliver targeted communications. These tools may collect information about your interactions with the Services including screens viewed, features used, transaction history, and communication engagement.

By accessing or using our Services, you consent to the placement of Cookies on your Devices as described in this Privacy Policy. If you prefer not to receive Cookies through our Services, you may control how your browser responds to cookies by adjusting the privacy and security settings of your web browser. Unless you set your browser settings to refuse all Cookies, our systems may issue Cookies when you access or use our Services. If you set your browser settings to refuse all Cookies, the performance of certain features of our Services may be limited or not work at all. Do Not Track: Do Not Track (“DNT”) is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third parties.

Information Collected From Third Parties: We may collect Personal Information from time to time from third parties, including social networks, data partners, and other platforms with which you interact. For example, we may receive information about your purchasing behavior, preferences, and demographics from data partners to enhance our understanding of your interests, improve targeting of offers and advertising, and provide you with a more personalized experience. We may combine this information with data we collect directly from you through the Services.

Information Collected by Authentication Integrations: If you elect to integrate your account with services provided by third parties, such as Google, certain data may be automatically collected by Google through the use of certain application programming interfaces used for registration and authentication functions, such as Google’s OAuth service. Such data is specified in the privacy policies of any such service, including Google’s privacy policy.

HOW WE USE INFORMATION

We may use Personal Information for the purposes described elsewhere in this Privacy Policy and internally for our general commercial purposes, including, among other things, to: provide, improve and optimize our Services and provide notices related thereto; analyze, improve and customize our Services; provide customer and technical support for our Services; send you periodic announcements, newsletters, promotional materials, and other information about our Services and third-party products and services that we think may be of interest to you; detect, prevent, and investigate actual or suspected fraud, hacking, infringement, or other misconduct involving our Services; and collect fees and other amounts owed in connection with our Services.

With respect to biometric data (i.e. photographs), we use such information to verify or authenticate your identity and prevent fraud on behalf of your employer and in order to clock you in for work. Subject to our storage and retention practices described herein, we store and use such biometric data for the duration of your engagement with any of your employers who are customers of ours and who have opted in to the aforementioned functionality.

HOW WE SHARE INFORMATION

We share Personal Information with our partners, service providers, contractors, agents and third party vendors as needed to fulfill our Services. Please note that our partners may contact you as necessary to obtain additional information about you, facilitate any use of our Services, fulfill orders, or respond to a request you submit.

Third-party vendors who provide product, services or functions on our behalf may include business analytics companies, customer service vendors, communications service vendors, marketing vendors, and security vendors. We may also authorize third-party vendors to collect information on our behalf, including as necessary to operate features of our Services, facilitate the delivery of orders, or provide online advertising tailored to your interests. Third-party vendors have access to and may collect personal information only as needed to perform their functions, may only use personal information consistent with this Privacy Policy and other appropriate confidentiality and security measures, and are not permitted to share or use the information for any other purpose.

Biometric Data: Unless otherwise required by law, your biometric data is accessible only to us and your employer, which process such data only on yours and your employer’s behalf in order to accomplish the purpose described in the “How We Use Information” section above with respect to the biometric data. Unless otherwise required by an order from a court of competent jurisdiction or applicable law, we will only retain biometric data until the purpose for collecting the biometric data has been satisfied.

We also may share your information: in response to subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases we reserve the right to raise or waive any legal objection or right available to us. When we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, interests, or safety of our company or the Services, our customers, or others; or in connection with our Terms of Service and other agreements. In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

Other than as set out above, we will attempt to notify you when your Personal Information will be shared with third parties.

If you have provided us with a telephone number and consented to be contacted by SMS text message, note that we do not share your telephone number or your consent with third party providers.

Data Analytics and Partnerships: We may share data derived from your use of the Services with third-party partners for commercial purposes, including analytics, market research, advertising, and product development. This may include transaction data (purchase history, order details, item-level data, ordering frequency), behavioral data (app usage patterns, venue visit frequency, loyalty engagement), and preference data (inferred preferences, product affinities) derived from your activity. Such data may be shared in pseudonymized or aggregated form depending on the nature of the partnership and applicable law.

Aggregated Information: We may publish, share, distribute, or disclose data that has been aggregated with information from other users or otherwise de-identified in a manner that does not allow such data about you to be separated from the aggregate data and identified as originating from you, to third parties, including Union partners, sponsors, and advertisers. Such information may help Union identify and analyze trends, demographic, and psychographic information, and report to third parties how many people saw, visited, or clicked on certain content, areas of our Services, ads, or other materials. We may also use such data for research purposes.