Privacy Policy

1. Who we are

• Operator: Ferraro Nova Inc.
• Platform: ferrarosystems.com and the per-restaurant ordering sites hosted on our infrastructure.
• Contact: ferrarosystems@gmail.com for any privacy questions or data requests.

2. Who this policy covers

Two different groups interact with the platform, and we collect different information from each:

• Restaurant customers — people placing pickup orders on a restaurant's storefront (e.g. santaana.ferrarosystems.com).
• Restaurant staff — owners, managers, and team members using the admin app on their tablet or web browser to receive and fulfill orders.

When a restaurant uses Ferraro, that restaurant is the data controller for its own customer orders. Ferraro acts as the data processor — we host and operate the platform on the restaurant's behalf.

3. Information we collect

From restaurant customers (when placing an order)

• Name
• Email address
• Phone number
• Order contents and total
• The time you placed the order

We do not collect payment card information, and online payments are not currently enabled on the platform. If online payments ship in a future release, they will be processed by Stripe (see Section 6).

From restaurant staff (when using the admin app)

• Email address and password — staff sign in with email and password
• Your role at the restaurant (owner, manager, staff)
• Actions you take in the admin app (order status changes, menu edits, hours updates) — recorded in an audit log so the restaurant owner can see who did what
• A device push-notification token (Firebase Cloud Messaging) when you enable order notifications on a tablet, so we can alert that device about new orders

Automatically collected

• Server logs (IP address, request path, response status, timestamp) retained for up to 30 days for debugging and security purposes
• Error reports via Sentry (technical details about crashes — no customer data)
• Uptime monitoring requests from BetterStack

We do not collect your location data. We also do not use tracking pixels, advertising cookies, third-party analytics that profile you across sites, or any social-media tracking.

4. How we use information

• Order fulfillment — show the order to restaurant staff so they can prepare it; email you when it's ready
• Order updates — transactional emails sent via Resend (order confirmed, ready for pickup, declined)
• Push notifications — alert restaurant staff devices about new and updated orders
• Customer support — if you contact us about an order, we may look up that order to help resolve the issue
• Security and abuse prevention — rate limiting, login throttling, detection of suspicious activity
• Improving the platform — aggregated, non-identifying usage metrics

We do not sell your information, share it with advertisers, or use it for marketing purposes that aren't related to the order you placed.

5. Sub-processors

We use a small number of trusted vendors to operate the platform:

Each vendor is contractually bound to handle data only for the purposes listed above.

6. Payments (future)

Online payment processing is not yet enabled on the platform. When it ships, payments will be processed by Stripe. Your card details will be sent directly to Stripe and will never be stored on Ferraro's servers. Stripe's privacy policy governs that data: https://stripe.com/privacy.

7. Data retention

• Order records — retained for as long as the restaurant remains a Ferraro customer, then deleted within 90 days unless the restaurant requests an export
• Audit logs (staff actions) — retained for 1 year for security and dispute resolution
• Server logs — retained for up to 30 days
• Account records (staff email + password hash) — retained until the staff member is removed from the restaurant, or the restaurant closes its account
• Encrypted backups — retained for 30 days then automatically deleted

8. Your rights

You have the right to:

• Access the personal information we hold about you
• Correct information that's wrong
• Delete your information (subject to legal record-keeping requirements — e.g., we may need to keep an order record for tax purposes)
• Export your information in a portable format
• Object to processing in some cases

To exercise any of these rights, email ferrarosystems@gmail.com and include enough information to verify your identity (e.g., the email address you placed orders with).

If you are a restaurant customer, you may also contact the restaurant directly — they hold the primary relationship with you and can fulfill many data requests on our behalf.

9. Children

The platform is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International transfers

The platform is operated from Canada. If you place an order from outside Canada, your information will be transferred to and stored in Canada. By using the platform you consent to this transfer.

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new “Last updated” date. If the changes are significant, we'll notify restaurant owners by email.

12. Contact

Questions about this policy or your information? Contact us by email: ferrarosystems@gmail.com.

See also our Terms of Service.