Effective Date: October 27, 2026
This "Privacy Policy" explains how BiteHeist Inc ("Company" or "we") collects, uses, discloses, and otherwise processes personal data on behalf of our customers – typically restaurants and other merchants (each, a "Merchant") – in connection with our application, BiteHeist, which runs on the Clover Point of Sale system ("Clover POS"). This Privacy Policy does not apply to Company's privacy practices in any other context; our general website privacy policy is at biteheist.com/privacy.html.
Company's processing of personal data in connection with our application is governed by this Privacy Policy and our agreements with Merchants. If this Privacy Policy conflicts with a Merchant agreement, the Merchant agreement controls to the extent permitted by law.
This Privacy Policy is not a substitute for any privacy policy that a Merchant may be required to provide to its customers, personnel, or other individuals.
Our application connects to a Merchant's Clover POS through Clover's developer platform. To run online ordering, the app exchanges the following data with the Clover POS:
This data belongs to the Merchant. We use it only to provide the app's services to that Merchant, and we share it only as described under "How we share information" below, including with the Clover POS itself. Clover's Privacy Notice is at https://www.clover.com/privacy-policy.
We collect personal data from or on behalf of Merchants. Merchants determine the scope of personal data transferred to us, and the information we receive may vary by Merchant. Typically, it includes:
When a customer pays via a Clover POS or through a BiteHeist online order, we receive information about the transaction, which may include the name associated with the payment, the last four digits and type of the card, the Merchant's location, the date and time, the transaction amount and tip, and the items purchased. We do not receive or store full card numbers, CVV codes, or PINs; payment card data is processed by Clover and its payment processors.
In addition, we collect: order type (pickup, delivery, dine-in, kiosk), order status, and special instructions.
We may collect information about Merchant personnel and their interactions with the Clover POS, such as names, roles, email addresses, phone numbers, and the employee associated with an order.
Merchants may provide or grant us access to business information (name, address, hours, menu, items, modifiers, prices, tax rates, and inventory), and customer information such as email addresses, phone numbers, and purchase history.
We use personal data collected for or on behalf of Merchants to provide our services and the functionality of our application, including to:
We may also use personal data for related internal purposes, including to provide information about the application (such as updates and security alerts), to measure performance of and improve the application, and to respond to inquiries, complaints, and support requests.
In addition, Company may use personal data as we believe necessary or appropriate to (a) comply with applicable laws and lawful requests and legal processes; (b) enforce the terms that govern our application; (c) protect our rights, privacy, safety, or property, and/or that of you or others; and (d) protect, investigate, and deter against fraudulent, harmful, unauthorized, unethical, or illegal activity.
We do not use one Merchant's customer data to market to another Merchant's customers, and we do not use personal data for our own marketing.
We may share personal data with:
SMS: Mobile phone numbers and SMS opt-in consent are never shared with or sold to third parties or affiliates for their marketing purposes.
Company may disclose personal data to government or law enforcement officials or private parties as required by law, and as we believe necessary or appropriate for the purposes in (a)–(d) above.
Company may sell or transfer some or all of its business or assets, including personal data, in connection with a merger, consolidation, acquisition, reorganization, sale of assets, or bankruptcy, in which case we will make reasonable efforts to require the recipient to honor this Privacy Policy.
Our application and the online ordering pages we operate for Merchants do not currently respond to browser "Do Not Track" signals. Online ordering pages may use cookies and similar technologies for essential functions (such as keeping a cart) and analytics. If a Merchant chooses to add third-party tracking (for example, an advertising pixel) to its ordering website, those third parties may collect information about visitors across websites and over time; we do not otherwise allow third parties to track customers across websites through our application.
We use industry-standard safeguards, including encryption in transit (TLS), encryption at rest, role-based access controls, and secure storage of Clover authorization tokens. No system is completely secure, and we cannot guarantee absolute security, but we will notify affected Merchants of a security incident as required by law.
To the extent applicable law gives individuals rights regarding their personal information, such as to review or request changes to it, individuals should contact the Merchant with requests about the Merchant's use of our application. To the extent Clover is responsible for responding to such requests, individuals may contact Clover as explained in Clover's Privacy Notice, https://www.clover.com/privacy-policy. Company will assist the Merchant, or Clover, in responding to such requests subject to our contracts. Merchants may review, correct, export, or request deletion of their data by emailing support@biteheist.com or calling (405) 673-6897. Customers can opt out of marketing emails using the unsubscribe link and out of SMS by replying STOP.
If you have a complaint about our handling of personal data, contact us using the details below.
Subject to our agreement with a Merchant, Company retains personal data for as long as necessary to (a) provide our products and services; (b) comply with legal obligations; (c) resolve disputes; and (d) enforce our agreements. When a Merchant uninstalls the application, its access to Clover data is revoked, and Merchants may request deletion of their data at any time. Contact us for more information about our retention practices.
We reserve the right to modify this Privacy Policy at any time. We will notify you of updates by updating the date of this Privacy Policy.
You may contact us with any questions, comments, or complaints about this Privacy Policy or our privacy practices via:
BiteHeist Inc
Oklahoma City, Oklahoma
Phone: (405) 673-6897
Email: support@biteheist.com
Company is a data processor acting for and on behalf of the Merchant that has installed our application on its Clover POS. That Merchant is the controller of personal data we process on its behalf. Clover is also a controller of personal data in some circumstances. Clover's Privacy Notice is available at https://www.clover.com/privacy-policy.
Company processes personal data as directed or permitted by the Merchant. The Merchant is responsible for establishing a legal basis for that processing.
When we transfer personal data outside of Europe (or the UK) to countries not deemed by the European Commission to provide adequate protection, we do so under Standard Contractual Clauses, the recipient's Binding Corporate Rules, the individual's consent, or other mechanisms permitted under European law. Contact us with questions about our transfer mechanism.
Data subjects in Europe and the UK may have rights to request from the controller access, correction, erasure, restriction, and portability of their personal data, to object to processing, to withdraw consent at any time (without affecting prior lawful processing), and to complain to a supervisory authority (see edpb.europa.eu). Such requests should be directed to the appropriate controller.
As a California resident, you have the rights listed below. These rights are not absolute, and we may decline requests as permitted by the CCPA.
Information. You can request information about how we collected and used your Personal Information during the past 12 months, including the categories collected, the sources, the business purpose, the categories of third parties with whom we share it, and whether we disclosed or sold it.
Access. You can request a copy of the Personal Information we maintain about you.
Deletion. You can ask us to delete the Personal Information we maintain about you.
Nondiscrimination. We will not penalize you for exercising these rights.
Call (405) 673-6897 or email support@biteheist.com. We must verify your identity before responding; requests must include enough detail for us to understand, evaluate, and respond. A request may also be made on behalf of your child under 13. You may use an authorized agent, and we may require written proof of that authority. Because we act as a service provider, we may refer your request to the Merchant.
We do not sell, as defined under the CCPA, your Personal Information to third parties. In the preceding twelve (12) months, we have not sold any personal information.
The chart below summarizes our collection and sharing of Personal Information during the 12 months before the effective date of this Privacy Policy.
| Category | Do we collect it? | Do we share it for business purposes? |
|---|---|---|
| Identifiers | Yes | Yes |
| Online Identifiers | Yes | Yes |
| Protected Classification Characteristics | No | No |
| Commercial Information | Yes | Yes |
| Biometric Information | No | No |
| Internet or Network Information | Yes | Yes |
| Geolocation Data | No | No |
| Sensory Information | No | No |
| Professional or Employment Information | Yes | No |
| Education Information | No | No |
| Inferences | Yes | No |
| Financial Information | No (card data is handled by Clover) | No |
| Medical Information | No | No |