Privacy Policy

This Privacy Policy explains how Pure Hospitality ("PureKDS", "we", "us") collects, uses, and protects personal data in connection with the PureKDS Kitchen Intelligence software-as-a-service platform, our websites, and related services (together, the "Service"). For the personal data we process about our customers' end users, we generally act as a processor on behalf of our customer (the controller).

• Account & contact data — name, email, company, role, and credentials when you create an account, request a demo, or join our waitlist.
• Usage data — pages viewed, features used, device and browser information, IP address, approximate location, and diagnostic logs.
• Customer Data — operational data your organization submits to the Service (for example, orders, menu items, station configuration, performance metrics).
• Communications — messages you send us and our replies, including via email.

• to provide, secure, and operate the Service;
• to authenticate users and manage accounts;
• to communicate with you about the Service, including updates and support;
• to improve product features, performance, and reliability;
• to detect, prevent, and respond to fraud, abuse, and security incidents;
• to comply with legal obligations and enforce our agreements.

Where the GDPR or similar laws apply, we rely on the following legal bases: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (where required, for example for certain cookies or marketing), and compliance with legal obligations.

We share personal data only with service providers who help us deliver the Service under appropriate contractual protections, with our affiliates, and where required by law or to protect rights and safety. We do not sell personal data.

We use trusted infrastructure and operational sub-processors, including cloud hosting, email delivery (Microsoft 365), and bot-protection providers. In particular, our waitlist and contact forms use Cloudflare Turnstile to detect automated abuse. Turnstile may process technical signals (such as IP address, browser characteristics, and behavioural data) on Cloudflare's infrastructure. Their handling of that data is described in the Cloudflare Turnstile Privacy Policy.

Personal data may be transferred to and processed in countries other than your own, including jurisdictions whose data-protection laws differ. Where required, we put appropriate safeguards in place, such as Standard Contractual Clauses.

We retain personal data only for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce agreements. Customer Data is retained in line with the customer's instructions and our contractual commitments.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and audit logging. No system is perfectly secure; we encourage you to use strong, unique passwords and to notify us of any suspected compromise.

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can exercise these rights by emailing us at the address below. If we process data on behalf of a customer, we will direct your request to them.

We use a small number of cookies and similar technologies that are strictly necessary to operate the Service and to remember preferences. Where required, we ask for consent for non-essential cookies.

The Service is not directed to children under 16, and we do not knowingly collect personal data from them.

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, take additional steps to inform you.

For privacy questions or to exercise your rights, contact contact@purehospitality.ai. See also our Terms of Use.