Privacy Policy

1. Scope of This Policy

This Privacy Policy explains how Foresio AI, LLC (“Foresio,” “we,” “us”) collects, uses, discloses, and protects information in connection with the Foresio platform (the “Service”), which is offered to restaurant operators (“Customers,” “you”) across the United States. This Policy covers three distinct categories of information: (1) information about you and your business as our Customer; (2) information about your own restaurant’s customers that passes through the Service because it is contained in your POS, reservation, or loyalty data, or that certain Agents contact directly on your behalf; and (3) information collected through the platforms you choose to connect to the Service. Sections 5 and 8 address the second category specifically. This Policy does not apply to information collected by your POS provider, Stripe, or other third parties operating under their own privacy policies.

2. Information We Collect From You

2.1 Account and Contact Information

• Name, business name, email address, phone number, and role, provided at signup.
• Billing information processed by Stripe, Inc. on our behalf. Foresio receives limited billing metadata, such as subscription tier, payment status, and the last four digits of a payment method, but does not receive or store full card numbers.

2.2 POS and Operational Data

If you connect a POS system, we collect data made available through the API key or credential you provide, which may include transaction records, sales totals, menu items and pricing, inventory levels, staffing schedules where integrated, and similar operational data. Where this data includes information about your own customers, we process it as described in Section 8.

2.3 Connected Third-Party Platforms

Certain Agents operate by connecting to platforms you already use, at your direction. Depending on which Agents you enable, this may include your Google Business Profile, Yelp, and TripAdvisor accounts for review monitoring and response; DoorDash, Uber Eats, and Grubhub merchant accounts for delivery performance tracking; Gusto, ADP, or QuickBooks Payroll for payroll file preparation; and public weather and local event data providers used to forecast demand. When you connect one of these platforms, you authorize Foresio to access and process the data made available through that connection solely to provide the corresponding Agent’s functionality.

2.4 Supplier and Invoice Data

If you forward or text supplier invoices to the Service for automated processing, used by the Food Cost Alert, Inventory Watchdog, and Supplier Performance Tracker Agents, we collect and process the content of those invoices, including supplier names, items, quantities, and pricing.

2.5 Communications Data

We collect records of SMS messages sent and received through the Service, including timestamps, consent and opt-out status, and message content, in order to operate and document compliance for the SMS channel described in Sections 4 and 5.

2.6 Automatically Collected Data

When you use our dashboard, we and our hosting provider collect standard technical data such as IP address, browser type, device identifiers, and usage logs, for security, debugging, and service improvement purposes.

3. How We Use Information

• To provide, operate, and maintain the Service, including generating Agent outputs from your operational data.
• To process billing through Stripe and manage your subscription.
• To send SMS and email communications as described in Sections 4 and 5.
• To operate Agents that communicate with your own restaurant’s customers at your direction, such as the Win-Back Engine, Slow Period Promo, Private Guest Feedback Collector, and any review request functionality, strictly on the terms set out in Section 5.
• To operate the Benchmark Dashboard, if you choose to enable it, by pooling your aggregated, de-identified operational metrics with those of other participating Customers.
• To maintain security, detect fraud or misuse, and enforce our Terms of Service.
• To improve the Service, including through aggregated, de-identified analysis across Customers that does not identify you or any individual.
• To comply with legal obligations and respond to lawful requests.

4. SMS and Text Message Communications to You

The Service is built around SMS delivery of Agent outputs and account notices sent to you as the Customer, using Twilio, Inc. as our messaging subprocessor. This Section describes our SMS practices with respect to messages Foresio sends to you. Section 5 separately addresses messages certain Agents send to your own restaurant’s customers on your behalf.

4.1 Consent

Before receiving SMS communications, you complete an affirmative opt-in step that discloses: the identity of Foresio as the sender; the categories of messages you will receive (informational and operational alerts and, where applicable, product or account-related messages); the approximate frequency of messages; that message and data rates may apply; and that consent is not required as a condition of purchasing the Service. Mobile opt-in information and consent are not shared with third parties for their own marketing purposes.

4.2 Frequency

Because Agent communications are tied to your restaurant’s live operational activity, message frequency can be high and will vary based on your subscription tier, the number of Agents active on your account, and your business’s transaction volume. Exact frequency is disclosed at the opt-in step and may be described using a range rather than a fixed number, given the event-driven nature of the Agents.

4.3 Opt-Out and Help

You may reply STOP at any time to opt out of Agent SMS communications, or contact us through any other reasonable method, including email or the Contact page. We will honor opt-out requests within ten (10) business days of receipt, and in practice aim to process them immediately. Reply HELP for support. Opting out of Agent SMS communications may materially limit the functionality of the Service, since SMS is the primary delivery channel for Agent outputs. Account-critical notices unrelated to marketing, such as billing failure or security alerts, may continue by email.

4.4 Carrier Disclaimer

Wireless carriers are not liable for delayed or undelivered messages. Message and data rates may apply based on your mobile plan.

5. Agent Communications to Your Restaurant’s Customers

Certain Agents, including the Win-Back Engine, Slow Period Promo, Private Guest Feedback Collector, and any review request functionality, send SMS or other messages directly to your own restaurant’s customers using contact information contained in your POS, reservation, or loyalty data. With respect to these messages:

• You are solely responsible for obtaining valid, lawful consent from each of your customers before enabling any Agent that will contact them, consistent with the Telephone Consumer Protection Act and any other applicable law.
• Foresio acts solely as your service provider and technology platform in transmitting these messages. Foresio does not obtain, verify, or independently confirm the consent of your customers, and relies entirely on your representation that proper consent exists.
• You are the party responsible, as between you and your customers, for the content, timing, and legality of these communications, subject to the indemnification obligations described in the Terms of Service.
• Your own customers may opt out of these communications by replying STOP or through any method you make available to them, and you are responsible for maintaining and honoring your own customers’ opt-out requests within the Service where such functionality is provided, and otherwise directly.

6. How We Share Information

We do not sell your personal information. We share information only as follows:

• Infrastructure service providers acting on our behalf: Stripe, Inc. (payments), Twilio, Inc. (SMS delivery), Netlify, Inc. (hosting), and OpenRouter, Inc., together with the AI model providers it routes requests to, for AI processing of your operational data to generate Agent outputs, each bound by contractual confidentiality and data protection obligations.
• Platforms you choose to connect: Google Business Profile, Yelp, TripAdvisor, DoorDash, Uber Eats, Grubhub, Gusto, ADP, QuickBooks Payroll, and weather or local event data providers, solely to provide the functionality of the Agents you enable. You already maintain an independent relationship with these platforms. Foresio’s role is limited to facilitating the data exchange you authorize.
• Aggregated benchmark data: if you enable the Benchmark Dashboard, your operational metrics are pooled with other participating Customers in de-identified, aggregated form. No participating Customer receives another Customer’s data in a form that identifies that Customer or any individual.
• Legal and safety reasons: where required by law, subpoena, or to protect the rights, property, or safety of Foresio, our Customers, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to transferred information.
• With your direction: where you affirmatively request or authorize a disclosure.

7. AI Processing Disclosure

Generating Agent outputs requires sending relevant portions of your operational data to AI models accessed through OpenRouter, Inc., which routes requests to one or more underlying third-party model providers. This is necessary for the Service to function. We contractually require our AI subprocessors to handle data confidentially and not to use your data to train models for the benefit of other customers, to the extent such commitments are available from the applicable provider. The specific retention and training practices of underlying model providers can vary and change, and this Policy will be updated to reflect material changes we become aware of.

8. Data Processing Terms for Your Restaurant Customers’ Data

This Section applies to personal information about your own restaurant’s customers contained in the POS, reservation, or loyalty data you connect to the Service, or collected through Agent communications described in Section 5 (together, “End-Customer Data”).

• Role. With respect to End-Customer Data, you are the data controller or business, and Foresio acts solely as a data processor or service provider, processing End-Customer Data only to provide the Service to you and only on your instructions.
• No independent use.Foresio will not use End-Customer Data for its own marketing purposes, will not sell it, and will not combine it with other Customers’ data except in de-identified, aggregated form that cannot reasonably identify an individual.
• Your obligations. You represent that you have a lawful basis to share End-Customer Data with Foresio, that your own privacy notice to your customers accounts for this processing, and that you have obtained any consent required for Agent communications described in Section 5. You are responsible for responding to requests from your customers regarding their own data; Foresio will reasonably assist you in doing so where End-Customer Data resides in the Service.
• Subprocessors. Foresio may use the subprocessors and connected platforms listed in Section 6 to process End-Customer Data solely to provide the Service, and will impose confidentiality and security obligations on those subprocessors consistent with this Section.
• Security. Foresio maintains administrative, technical, and physical safeguards designed to protect End-Customer Data against unauthorized access, consistent with Section 10.
• Deletion. Upon termination of your subscription, Foresio will delete or return End-Customer Data within a commercially reasonable period, except where retention is required by law or for legitimate backup or archival purposes for a limited period thereafter.

This Section functions as the data processing terms between you and Foresio for End-Customer Data. If your business requires a separately executed, more detailed Data Processing Addendum, for example to satisfy a franchisor’s or enterprise customer’s compliance requirements, contact us to request one.

9. Data Retention

We retain your account data for as long as your account is active and for a reasonable period thereafter to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. SMS consent and opt-out records are retained as long as necessary to demonstrate compliance with applicable telemarketing and messaging law. Supplier and invoice data is retained for as long as reasonably necessary to support the Agents that rely on it and for standard business recordkeeping thereafter. End-Customer Data is handled as described in Section 8.

10. Data Security

We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure, including encryption in transit, access controls, and reliance on subprocessors with their own security commitments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on your state of residence, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain data sharing. To exercise any of these rights, contact us through the Contact page. We will verify your request and respond within the time required by applicable law. Where required by state law, we will not discriminate against you for exercising these rights.

12. Children’s Privacy and Age Restriction

The Service is intended for use by individuals sixteen (16) years of age or older, and the contracting account owner must be at least eighteen (18), consistent with our Terms of Service. Account creation requires an affirmative age certification. We do not knowingly collect personal information from children under sixteen. If we learn we have done so, we will delete it.

13. International Users

The Service is intended for businesses and users located in the United States. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law. We make no representation that the Service is appropriate for use outside the United States.

14. Referral Program

Foresio offers an optional referral program through which existing Customers may receive account credit or, at higher participation levels, cash rewards for referring new Customers. Participation is governed by the Referral Program Terms made available to enrolled participants. If you receive a cash reward, Foresio may collect tax information from you, such as a completed Form W-9, and may issue applicable tax reporting forms once your cumulative payouts meet the threshold required by law.

15. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by email or in-app/SMS notice before taking effect. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

16. Contact Us

Questions about this Privacy Policy, or requests regarding your data, should be directed to Foresio through the Contact page at foresioai.com, or to the business address on file for Foresio AI, LLC, Georgia.