BarBak Privacy Policy

We collect information from guests, venue users, internal administrators, devices, browsers, payment processors, and venues.

We use information to provide, operate, maintain, secure, and improve BarBak.

We may use information to:

• Display venue pages and menus
• Allow guests to place orders
• Route orders to the correct venue and pickup station
• Process or facilitate payments
• Generate pickup tokens
• Display order status
• Notify guests when an order is received, being made, ready, cancelled, refunded, or picked up
• Allow venue staff to manage order queues
• Allow managers to manage menus, pickup stations, and settings
• Allow BarBak administrators to create venues and venue users
• Prevent duplicate pickup, token misuse, fraud, or order confusion
• Troubleshoot technical issues
• Provide customer support
• Maintain audit logs
• Enforce our Terms of Service
• Improve product performance
• Analyze usage trends
• Develop new features
• Communicate service updates
• Comply with legal, tax, accounting, security, and payment obligations

BarBak uses pickup tokens to help venues match orders to guests.

A token may be shown to the guest after an order is placed or when the order is ready. The guest may show the token at pickup. Venue staff may redeem the token through the BarBak dashboard.

Once a token is redeemed, it should no longer be valid for pickup. Tokens may also expire, be cancelled, or be invalidated if an order is cancelled or refunded.

BarBak may store token status, redemption time, staff user, pickup station, and related audit data to support operational integrity.

We may share information as described below.

We may send SMS messages, emails, or browser-based notifications for:

• Login codes
• Order confirmations
• Order status updates
• Pickup notifications
• Token or pickup information
• Support messages
• Venue account administration
• Security alerts
• Service updates

Message and data rates may apply for SMS messages.

Users may be able to opt out of non-essential messages. Some service-related messages may be necessary to use BarBak, such as login codes, order updates, security alerts, or account administration messages.

We may use cookies, local storage, pixels, and similar technologies to:

• Keep users signed in
• Maintain cart contents
• Remember session information
• Improve performance
• Understand usage
• Measure QR code activity
• Prevent fraud
• Debug errors
• Improve product design

You may be able to control cookies through your browser settings. Disabling cookies or local storage may cause some features to stop working.

We may use analytics tools to understand how guests, venues, and staff use BarBak.

Analytics may help us understand:

• QR scans
• Venue searches
• Menu views
• Cart additions
• Checkout completion
• Order status timing
• Token redemption
• Staff queue activity
• Error rates
• Product performance

We do not intend to use alcohol order history for targeted advertising.

We retain information for as long as reasonably necessary to provide BarBak, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, and support venues.

Order records, transaction records, audit logs, and operational records may be retained for longer periods where necessary for tax, accounting, dispute, legal, security, or compliance purposes.

We may delete or de-identify information when it is no longer needed.

We use reasonable administrative, technical, and organizational safeguards designed to protect information.

These may include:

• Access controls
• Authentication
• Role-based permissions
• Encryption where appropriate
• Audit logs
• Secure infrastructure
• Token hashing or secure token handling
• Monitoring and logging
• Limited staff access

No system is completely secure. We cannot guarantee that information will always remain secure.

Venue users are responsible for securing their devices, tablets, email accounts, phone numbers, browsers, and access credentials.

Depending on where you live, you may have certain privacy rights.

These may include the right to:

• Access personal information
• Correct inaccurate personal information
• Delete personal information
• Obtain a copy of personal information
• Opt out of certain processing, where applicable
• Appeal a privacy request decision, where required by law

To submit a request, contact us at info@bettercarte.com.

We may need to verify your identity before fulfilling a request.

If you are a venue staff member, we may direct certain requests to the venue if the venue controls the relevant information.

BarBak is initially focused on doing business in Texas.

Texas privacy law may provide Texas consumers with rights regarding personal data, including rights to access, correct, delete, obtain a copy, and opt out of certain processing depending on the business and data involved.

To exercise a privacy right, contact info@bettercarte.com.

If required by law, we will provide an appeal process for denied requests.

BarBak does not intend to sell personal information in the traditional sense.

BarBak does not intend to sell guest alcohol order history.

If applicable law defines certain advertising, analytics, or data-sharing activities as a "sale," "sharing," or "targeted advertising," we will provide required notices and choices.

BarBak does not intend to collect sensitive personal information unless necessary to provide the service or comply with applicable law.

BarBak does not intend to store:

• Full ID scans
• Driver's license images
• Passport images
• Biometric identifiers
• Precise GPS location
• Full payment card numbers

If future features require additional sensitive information, we will update this Privacy Policy before launching those features.

BarBak is not intended for children.

BarBak is designed for adult on-premise venue environments. Users must not use BarBak to purchase or attempt to obtain alcoholic beverages if they are under the legal drinking age.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take appropriate steps to delete it.

Venues using BarBak remain responsible for their own legal and operational obligations, including:

• Alcohol licensing
• Alcohol service decisions
• Guest handoff
• Refusal of service
• Staff training
• Tax treatment
• Menu accuracy
• Pricing
• Refunds
• Chargebacks
• Required notices to guests or employees
• Compliance with venue-specific and jurisdiction-specific laws

BarBak is a technology provider and does not replace venue compliance procedures.

BarBak may link to or integrate with third-party services, including payment processors, authentication providers, SMS providers, email providers, hosting providers, analytics providers, and venue websites.

Third-party services have their own privacy policies and terms. We are not responsible for their privacy practices.

BarBak is intended for use in the United States, with an initial focus on Texas.

If you access BarBak from outside the United States, you understand that your information may be processed in the United States.

We may update this Privacy Policy from time to time.

If we make material changes, we may provide notice through the website, dashboard, email, or another appropriate method.

The updated Privacy Policy will be effective when posted unless otherwise stated.