Legal

Privacy Policy

Effective Date: May 26, 2026 · Last Updated: May 26, 2026

Introduction

Welcome to DINEx Studio. We operate a restaurant management and presence platform. This Privacy Policy explains how we collect, use, disclose, and protect the personal and business information of restaurant partners, owners, managers, and authorized users when you use DINEx Studio. By accessing or using DINEx Studio, you agree to the practices described here. Note for California residents: Additional rights under the CCPA/CPRA are described in Section 11.

1. Information We Collect

Account & Business: business name, restaurant address, contact name, email, phone, and password. Subscription & Billing: payment method details processed and stored by our PCI-compliant third-party payment processor — DINEx never stores raw card numbers. Restaurant Profile Data: photos, menus, descriptions, hours, capacity, cuisine type, and other content you upload or that is populated via AI-assisted features. Google Places & Location: when you use AI-assisted profile filling, we query the a third-party location data provider using your restaurant name and location to retrieve publicly available business data. Operational Data: reservation records, cover fees, and Social Fund contribution calculations. Communications: messages you send to our support team. Automatically Collected: IP address, device type, browser type, usage data, and log data. our analytics provider may collect additional device and usage data subject to our analytics provider privacy policy.

2. How We Use Your Information

We use your information to: create and manage your restaurant account; process subscription payments and manage billing cycles; populate and optimize your restaurant profile via AI-assisted features; calculate and administer Social Fund contributions based on reservation activity; send transactional communications (subscription confirmations, receipts, billing reminders); send marketing and promotional messages where you have opted in; analyze platform usage to improve features and performance; comply with legal obligations and enforce our Terms of Service; and respond to customer support requests.

3. Social Fund

As a restaurant partner, a portion of your per-reservation fees (up to 50%) is allocated to the DINEx Social Fund, which distributes funds to qualifying families or individuals. We collect and process your reservation data and fee records solely to calculate contributions and administer distributions. This data is treated confidentially and used exclusively for Social Fund administration and reporting to partners.

4. AI-Assisted Features

DINEx Studio includes AI-powered tools to help you fill and optimize your restaurant profile. Inputs you submit are transmitted to a third-party large language model provider and the a third-party location data provider to generate profile suggestions. We do not send your payment data or account credentials to the AI. Inputs may be reviewed in anonymized form to improve accuracy and safety. Do not input sensitive credentials or financial account details through AI-assisted features.

5. Cookies & Tracking Technologies

We use cookies and similar technologies for: Essential cookies: session management, authentication state, and security tokens required for the platform to function. Functional cookies: remembering your preferences and settings. Analytics cookies: understanding how partners interact with the platform via our analytics provider. Marketing cookies: delivering relevant promotions where permitted by your consent. You may manage or disable non-essential cookies through your browser settings.

6. How We Share Your Information

We do not sell your personal information for monetary compensation. Note that certain data shared with third-party analytics providers such as Google via our analytics provider may be considered sharing under the CCPA/CPRA. We may share your data with: Service Providers such as Stripe, our cloud infrastructure provider, AI providers, and email delivery under contractual data protection obligations. The DINEx Diner Platform: aggregated, anonymized restaurant data (profile info, hours, menus) is shared with the consumer-facing platform to power restaurant discovery — individual account or billing data is never shared without your consent. Legal Requirements: when required by law, court order, or to protect rights and safety. Business Transfers: in the event of a merger or acquisition, we will notify you of any such change.

7. Data Retention

Account & profile data: retained until you delete your account, plus up to 90 days for backup. Subscription & transaction history: retained for up to 7 years for financial and legal compliance. Social Fund contribution data: retained while your account is active and for 2 years after closure. AI assistant inputs: retained for up to 12 months for quality review, then deleted or anonymized. Upon account deletion, we remove your personal data within 90 days except where retention is required by law.

8. Data Security

We implement industry-standard security measures including: encryption in transit (TLS/HTTPS) and at rest for sensitive data; our authentication provider with secure token management; access controls limiting who within DINEx can access personal data; and regular security reviews. Despite these measures, no system is completely secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

9. Children's Privacy

DINEx Studio is not directed to children under the age of 13 (or 16 where required by applicable law). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly. Contact us at privacy@getdinex.com if you believe a child has submitted data to us.

10. Your Rights & Choices

Depending on your location, you may have the right to: Access a copy of the personal data we hold about you. Correction of inaccurate or incomplete data. Deletion of your personal data, subject to legal retention obligations. Portability of your data in a structured, machine-readable format. Opt-Out of Marketing via the unsubscribe link in each email or through your account settings. Account Deletion through platform settings or by contacting us. To exercise any of these rights, contact us at privacy@getdinex.com. We will respond within 30 days.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights: Right to Know the categories and specific pieces of personal information we collect, use, and share. Right to Delete your personal information, subject to certain exceptions. Right to Correct inaccurate personal information. Right to Opt-Out of Sale/Sharing: we do not sell personal information for money, but we use third-party analytics tools that may constitute sharing under CCPA/CPRA. You may opt out by enabling the Global Privacy Control (GPC) in your browser or contacting privacy@getdinex.com. Right to Limit Use of Sensitive Personal Information beyond permitted purposes. Right to Non-Discrimination for exercising your privacy rights. To submit a CCPA request, contact privacy@getdinex.com.

12. Third-Party Links

The platform may contain links to third-party websites or partner services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any external sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of DINEx Studio after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

For questions about this Privacy Policy or our data practices, contact us at: Email: privacy@getdinex.com — Mailing Address: DINEx, 1111b South Governors Ave, STE 26883, Dover, DE 19904, US. We are committed to resolving privacy concerns promptly and transparently.