Privacy Policy

This Privacy Policy describes how BlazeBite, operated by Avayla Solutions, LLC (“BlazeBite,” “we,” “us”), collects, uses, shares, stores, and protects your information when you (whether as an individual or on behalf of a business entity) use our website, mobile application, or related services (“Services”).

1. Information We Collect

We collect information to provide, improve, and secure our services. This data is collected through direct input from you, automated interactions, and third-party integrations.

a. Information You Provide (“BlazeBite Account Data”)

This includes information submitted by merchants, venues, or users during registration, platform use, or through customer support.

• Name, phone number, and email address.
• Venue name, venue description, and operational details like menu items.
• Images and branding elements such as logos and venue pictures.
• Tax rates, tip settings, and convenience fee settings.
• Whether the venue is enabled or taking orders, and the current wait status.

b. Information Collected During Service Use (“Usage Data”)

This includes data collected automatically when users interact with BlazeBite services.

• Session timestamps, page views, clickstream data, and interactions with platform features.
• Location data, when enabled by the user.
• Order details, payment status, and timestamps.
• Metrics related to order processing, security events, and error messages.

c. Information From Third Parties (“External Data”)

We obtain data from trusted partners for transactions, marketing, and compliance.

• Transaction confirmations, fraud alerts, and chargeback notifications.
• Website interaction data, ad campaign performance metrics, and usage reports.
• Data used to verify business credentials and ensure compliance with regulations.

2. How We Use Your Information

We process your data for various purposes to deliver services, ensure compliance, and improve your experience on BlazeBite.

a. Service Provision and Personalization

• To create and manage your account, including setting up administrative access for managing venue details such as menu items and prices.
• To manage orders placed through BlazeBite, including item preparation, order notifications, and real-time updates on order status.
• To personalize your experience by tailoring app views, push notifications, and feature accessibility based on venue operations.
• To provide tools for managing menu changes, reporting dashboards, and venue-specific statistics like order counts and revenue metrics.

b. Payment Processing and Financial Transactions

• To process payments from customers on behalf of your venue and deposit funds into your linked account.
• To charge subscription fees, apply convenience fees, and calculate tips, taxes, or refunds related to customer transactions.
• To provide detailed transaction reports, including sales data, processing fees, and refunds, through the BlazeBite reporting dashboard.

c. Fraud Prevention and Security

• To verify your identity and business credentials, ensuring compliance with regulations such as Know Your Customer (KYC) and anti-money laundering (AML) requirements.
• To monitor transaction patterns and usage behavior for signs of suspicious activity.
• To notify you of potential security risks, including account breaches or suspicious login attempts.

d. Compliance with Legal Obligations

• To enable the identification, calculation, and reporting of applicable taxes for transactions processed through BlazeBite.
• To comply with court orders, subpoenas, or requests from regulatory authorities.
• To cross-check your information with global watchlists and financial compliance databases as required by law.

e. Service Improvement and Development

• To track app performance, identify areas for improvement, and understand how users interact with various features.
• To gather input from merchants and customers on their experience with BlazeBite.
• To conduct testing of new features, security protocols, and system upgrades.

3. Sharing Your Information

We share your information with various parties to support the provision, security, and functionality of BlazeBite’s services. We do not sell personal information under any circumstances.

a. Service Providers

We share your information with third-party service providers to facilitate core business operations, including:

• Payment processors (e.g., Stripe) for payment authorization, transaction processing, refunds, chargebacks, and financial reporting.
• Data storage providers for securely storing data, including order histories, user credentials, and financial records.
• Analytics platforms (e.g., Google Analytics) to monitor user behavior and improve services.
• Providers that assist with customer service, app updates, and technical support.

b. Business Partners

We may share limited information with business partners to expand our service offerings, promote brand awareness, and develop co-branded initiatives, including sponsors and integration partners such as POS system providers or loyalty program platforms.

c. Legal Authorities

We may share your information when required by law, regulation, or a legal process, such as a subpoena or court order, including:

• To meet obligations under anti-money laundering (AML) and know-your-customer (KYC) regulations.
• In cases where law enforcement agencies request data to investigate fraud, criminal activity, or regulatory breaches.
• To respond to inquiries or audits from regulatory bodies.

d. Affiliated Companies

We may share your data with other business units or affiliates under Avayla Solutions, LLC for internal business operations and service optimization.

e. Other Circumstances

• If BlazeBite undergoes a merger, acquisition, or sale of assets, your information may be transferred to the new owner or business entity.
• We may share your data based on your instructions, such as when you request integration with a third-party service.
• If necessary, we may share data to prevent or mitigate risks related to fraud, data breaches, or unauthorized access.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to improve the functionality of our services, provide a secure user experience, and offer personalized content.

a. What Are Cookies and Similar Technologies?

• Cookies: Small text files stored on your browser or device when you visit our website.
• Tracking Pixels: Invisible images or code embedded in our emails or webpages to measure engagement.
• Local Storage: Data stored directly on your device by your browser to remember settings or preferences.

b. How We Use These Technologies

• Authentication and security — recognizing login status and protecting your account.
• Analytics — gathering data on user interactions to improve performance and usability.
• Troubleshooting — identifying and fixing technical issues.
• Personalization — tailoring content and recommendations based on your preferences.
• Marketing — delivering relevant promotions and tracking marketing campaign effectiveness.

c. Types of Cookies We Use

• Essential Cookies: Required for basic functions like logging in, securing your account, and processing orders.
• Analytics Cookies: Used to monitor service performance and gather aggregated data on user interactions.
• Functional Cookies: Enable advanced features, such as saving your language or location preferences.
• Advertising Cookies: Help us and our advertising partners show you relevant ads based on your browsing history.

e. Your Control Over Cookies

You have the option to manage your cookie preferences through your browser settings or by using opt-out tools provided by third-party services. Most browsers allow you to block or delete cookies. However, disabling cookies may impact your ability to use certain features of our services.

5. SMS/Mobile Messaging Policy

BlazeBite uses SMS messaging to communicate with users who have provided prior express consent. By opting in, you agree to receive text messages related to our services, such as account and delivery notifications. Your mobile information will not be sold or shared with third parties for promotional or marketing purposes.

a. Types of SMS Communications

• Updates related to your account status, order confirmations, delivery notifications, and payment confirmations.
• Important notices about service disruptions, security alerts, or changes to your account.
• Marketing communications about new features, special offers, or promotional campaigns, sent only with your explicit consent.

b. Consent and Opt-Out

You may opt out of SMS communications at any time by replying “STOP” to any message or by updating your communication preferences in your BlazeBite account settings. Even if you opt out of promotional messages, you may still receive essential service-related communications.

c. Message Frequency and Charges

The frequency of messages will vary based on your activity. Standard message and data rates may apply as determined by your mobile carrier. BlazeBite is not responsible for any charges incurred from your mobile service provider.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy.

a. Retention for Service Provision

• Account data such as your name, business details, and contact information is kept for the duration of your account.
• Transaction records are typically retained for at least the lifetime of your account.
• Usage data is kept to help optimize service performance and provide personalized features.

b. Retention for Legal and Regulatory Compliance

• Transaction records are retained for a legally mandated period, typically ranging from 5 to 10 years.
• Identity verification and AML/KYC data are retained in compliance with applicable financial regulations.
• Data may be retained in response to valid legal requests such as preservation orders, search warrants, or subpoenas.

c. Retention for Fraud Prevention and Dispute Resolution

• Security data such as IP addresses, transaction patterns, and login attempts are retained to detect and prevent fraud.
• Dispute-related information is retained until the issue is fully resolved.
• Certain data may be retained after account deactivation to handle pending disputes or prevent fraudulent activity.

e. Secure Data Deletion

When data is no longer needed, we take steps to delete, anonymize, or securely archive it. If full deletion is not feasible due to technical or regulatory constraints, we restrict access and use of the data to prevent unauthorized access or further processing.

7. Your Rights and Choices

Depending on your location and the laws applicable to you (e.g., GDPR, CCPA), you may have certain rights regarding your personal information.

a. Right to Access Your Data

You have the right to request access to the personal information we have collected about you. Submit an access request through your BlazeBite account or contact us at info@blazebite.com.

b. Right to Correct Your Data

You can request corrections to any inaccuracies in your personal information. Update your information directly through your BlazeBite account or contact our support team.

c. Right to Request Data Deletion

You may request that we delete your personal information under certain circumstances. We may retain certain information if required by law or for legitimate business purposes. Submit a deletion request through your BlazeBite account or contact us at info@blazebite.com.

d. Right to Object to Processing (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, you have the right to object to the processing of your data under certain circumstances. Contact us at info@blazebite.com.

e. Right to Data Portability

Under GDPR, you have the right to request that your personal information be provided to you or transferred to another service provider in a structured, commonly used, and machine-readable format.

f. Right to Opt-Out of Targeted Advertising (CCPA)

You may choose to opt out of data processing activities related to targeted advertising. We and our advertising partners may use cookies and other tracking technologies to deliver personalized ads. By opting out, you can limit the use of your data for these purposes.

g. Authorized Agents (CCPA)

You may designate an authorized agent to submit privacy requests on your behalf, as permitted by the CCPA. Provide written authorization and ensure the agent can verify their identity. Contact us at info@blazebite.com.

h. Right to Appeal

If your privacy request is denied, you may have the right to appeal the decision. Contact us at info@blazebite.com to request a review.

i. How to Contact Us Regarding Your Rights

To exercise any of these rights, you may contact us at info@blazebite.com. We will verify your identity before processing your request and respond within the legally required timeframe (typically 30-45 days).

8. Security

We take the security of your data seriously and implement a range of technical and organizational measures to protect it from unauthorized access, misuse, loss, alteration, and destruction.

a. Technical Measures

• We encrypt sensitive data both at rest and in transit using industry-standard protocols (e.g., HTTPS, TLS, and AES encryption).
• Access to personal information is restricted to authorized personnel using role-based access control (RBAC) and multi-factor authentication (MFA).
• We host data on secure servers managed by trusted cloud providers that comply with security and privacy standards.
• We use intrusion detection and prevention systems to monitor suspicious activity.

b. Organizational Measures

• All employees undergo security and privacy training.
• We implement least-privilege access policies.
• Regular audits and assessments are conducted to ensure compliance with security standards.
• We assess and monitor third-party service providers to ensure they adhere to strict security protocols.

c. Incident Response

We continuously monitor security threats. If an incident is detected, we take immediate action to contain and mitigate the impact. If your data is affected by a breach, we will notify you as required by applicable laws.

d. User Responsibilities

• Keep your username, password, and other authentication credentials confidential.
• Be cautious of unsolicited emails or messages requesting personal information or login credentials.
• Ensure that your devices and networks are protected by antivirus software, firewalls, and secure passwords.

e. No Guarantee of Absolute Security

Despite our efforts to secure your data, no system can provide 100% protection against all threats. We encourage you to take proactive steps to secure your data and notify us immediately if you suspect any unauthorized activity on your account.

9. Children’s Privacy

BlazeBite’s services are designed for use by businesses, merchants, and users over the age of 18. Our services are not directed at, nor intended for, children under the age of 13. We do not knowingly collect, use, or share personal information from children.

• We do not knowingly solicit or collect personal information from anyone under 13.
• If you are a parent or guardian and believe that your child under 13 has provided personal information to BlazeBite, please contact us at info@blazebite.com.
• Users aged 13 to 18 may use our services only with the involvement, consent, and supervision of a parent or legal guardian.
• BlazeBite complies with applicable laws regarding children’s privacy, including COPPA in the United States.

10. International Data Transfers

BlazeBite operates from the United States. If you access our services from outside the U.S., your personal information may be transferred to and processed in the United States or other countries where BlazeBite or its service providers maintain servers or operations.

• We transfer data internationally to provide and improve our services.
• For residents of the EEA, United Kingdom, and Switzerland, we implement safeguards in accordance with the GDPR, including Standard Contractual Clauses (SCCs).
• Data transferred to the U.S. is subject to the security measures outlined in this policy.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or technological advancements. If we make significant changes, we will notify you through appropriate channels. The effective date will be indicated at the top of this document.

We encourage you to periodically review this Privacy Policy to stay informed about how we protect and handle your data. Your continued use of our services after the effective date of any updates constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us:

BlazeBite (Avayla Solutions, LLC)
Email: info@blazebite.com

Alternatively, you can contact us through the support section of our website or app. We will respond to inquiries in accordance with applicable legal requirements, typically within 30 days.