Privacy Policy
RIGN is a product of LoweCo LLC. This policy explains how we handle personal information in two different roles, and how to exercise your privacy rights.
Two roles.
- For restaurants' data, the restaurant is in charge. When a restaurant or bar uses RIGN, information about its guests and employees (orders, checks, time punches, tips, schedules, chat messages) belongs to that business. The business decides how it's used and is responsible for it as the controller or “business” under privacy law. RIGN processes it only on the business's behalf as its service provider (or processor). If you're a guest or employee of a RIGN customer, please contact that restaurant first; we'll help them respond.
- For our own website, demo and customer accounts, we're in charge. For visitors to getrign.com and demo.getrign.com, people who contact us, and the business contacts at our customers, LoweCo LLC is the business responsible for the information. Most of this policy is about this role.
1. Information we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and contact details | Name, business name, work email, phone, mailing address, account ID | You, when you contact us, sign up or are added as a user |
| Account and sign-in information | Username, role, encrypted password or PIN, two-step verification settings | You or your employer |
| Commercial information | Products subscribed to, Order Forms, invoices, billing history | You, our records |
| Device and network information | IP address, browser and device type, device pairing IDs, timestamps, pages and screens requested, error and security logs | Automatically, from your browser or device and our network provider |
| Support communications | Emails, calls, screenshots you send us | You |
| Customer Data (service-provider role) | Guest names and order details, employee names, roles, time punches, wage rates, tips, schedules, chat messages, equipment settings | The restaurant and its users and systems |
We don't use advertising or third-party analytics trackers on getrign.com or demo.getrign.com. RIGN is not designed to store full payment card numbers; card data is handled by the restaurant's payment processor. See the Cookie Notice for browser storage.
2. How we use it
- To provide, maintain, secure and support RIGN, including signing you in and keeping devices paired.
- To respond to questions, demos and sales inquiries, and to send service and billing notices.
- To bill, collect payment and keep business records.
- To detect, prevent and investigate fraud, abuse, security incidents and violations of our terms.
- To improve RIGN, using aggregated or de-identified information where we can.
- To comply with law and enforce our agreements.
We use Customer Data only to provide the Service to the restaurant, as described in our Terms and Data Processing Addendum, and not for our own marketing.
3. How we share it
- Service providers that host, secure or support RIGN on our behalf (for example cloud hosting, network and security, and email providers), under contracts that limit their use of the data.
- Integrations a restaurant turns on, such as its payment processor, delivery marketplaces, payroll or payout provider, or website platform. Those providers handle data under their own terms and privacy policies.
- Legal and safety: when required by law or legal process, or to protect the rights, safety or property of RIGN, our customers or others.
- Business transfers: in connection with a merger, financing, acquisition or sale of assets, subject to this policy.
We do not sell personal information and we do not “share” it for cross-context behavioral advertising, as those terms are defined under California law, and we have not done so in the past 12 months.
4. How long we keep it
We keep personal information only as long as needed for the purposes above. In general:
- Sales and support emails: up to 3 years after our last contact, unless they become part of a customer relationship.
- Customer account and billing records: for the life of the account and then as long as tax and accounting law requires (often 7 years).
- Security and network logs: generally up to 12 months.
- Customer Data: as the restaurant directs during its subscription, then exported and deleted as set out in the Terms.
- Demo data: reset every night (see Demo Terms).
5. Security
We use administrative, technical and physical safeguards designed to protect personal information, such as encryption in transit, role-based access, two-step verification for owner access, hashed passwords and PINs, and access logging. No method of transmission or storage is completely secure, and we can't guarantee absolute security. Restaurants are responsible for securing their own devices, networks and logins.
6. California privacy rights
If you're a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA) gives you rights over personal information we hold as a business, including information about job applicants, employees and business contacts. You can ask us to:
- Know and access the categories and specific pieces of personal information we've collected, its sources, purposes and the categories of recipients;
- Delete personal information, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of sale or sharing (we don't sell or share, so there's nothing to opt out of);
- Limit use of sensitive personal information: we use account login credentials only to provide the service and keep it secure, which the CCPA permits, so this right doesn't change anything;
- Not be discriminated against for exercising these rights.
How to ask. Email privacy@getrign.com with “California privacy request” in the subject. We'll confirm receipt within 10 business days and respond within 45 days (which can be extended once by 45 days with notice). We'll verify your identity by matching information we already have, and we may ask an authorized agent for proof of authorization. If your request is about a restaurant's Customer Data, we'll refer it to that restaurant or help it respond.
Notice at collection. The categories we collect, the purposes, whether we sell or share, and retention are listed in Sections 1 to 4 above.
Other states. Residents of other states with privacy laws may make similar requests the same way, and we'll honor them as those laws require. If we decline a request, you can appeal by replying to our decision.
7. Children
RIGN is a business product and our website isn't directed to children under 16. We don't knowingly collect personal information from children under 16 for our own purposes. Restaurants may employ minors and enter their work information into RIGN; in that case the restaurant is responsible for that information as the employer. If you believe a child has given us personal information, contact privacy@getrign.com and we'll delete it.
8. Where data is stored
We store and process data in the United States. Some information is also stored on RIGN equipment at the restaurant's own location so it can keep working during internet outages.
9. Changes
We'll post updates here and change the “Last updated” date. If changes are material, we'll give notice to customers by email or in the Service.
10. Contact
LoweCo LLC (RIGN), Attn: Privacy331 Thor Pl, Brea, CA 92821
privacy@getrign.com