Privacy Policy

Forkrado LLC ("Forkrado", "we", "us"), based in Denver, Colorado, United States, provides an AI-powered platform that helps restaurants and local merchants manage their online presence, customer channels and marketing. This Privacy Policy explains what information we collect, how we use it, how we share it and the choices you have. It applies to forkrado.com, the Forkrado Studio product and related services.

1. Information we collect

• Account information: name, email address and authentication details you provide when you register or are invited to a workspace.
• Business information: store profile, menu, hours, locations, campaigns and other operational data you enter or connect.
• Connected platform data: data we retrieve on your behalf from third-party services you explicitly connect, such as Google Business Profile (Section 3), Meta (Facebook and Instagram), point-of-sale providers (Clover and Square) and Stripe for payments (Section 4).
• Payment data: when you enable payments, transactions are processed by Stripe. We receive limited payment metadata (such as amount, status and the last four digits of a card). Full card numbers go directly to Stripe and are not stored by us.
• Business tax identifiers: if you register for carrier-compliant SMS (10DLC), we collect your business tax ID (EIN) to complete brand registration. We retain only the last four digits for display. The full value is held by our messaging provider and is not stored in our databases. Stripe may separately collect tax and identity information to verify your account for payments.
• Website visitors and leads: when you request a free report, book a demo or join a waitlist on forkrado.com, we collect the details you enter, such as restaurant name, city, email and mobile number, and whether you agreed to receive text messages.
• Usage data: logs, device and browser information and interaction events used to operate and secure the service.

2. How we use information

• Provide, maintain and improve the features you enable.
• Authenticate you and secure your account and workspace.
• Perform actions you request on connected platforms, for example updating your business profile, replying to reviews or publishing posts.
• Prepare and send the free ranking report you request.
• Communicate with you about the service, including support and notices.
• Comply with legal obligations and enforce our terms.

3. Google user data

When you connect your Google Business Profile, Forkrado requests the business.manage scope (https://www.googleapis.com/auth/business.manage). With your explicit consent, we access this data only to power features you actively enable, specifically to:

• Read your business location information and keep it in sync.
• Read customer reviews and post replies on your behalf.
• Create and publish posts to your Business Profile.

Retention and deletion. We retain Google user data only as long as needed to provide these features. You can disconnect Google Business Profile at any time from the Connections page, which revokes our access and triggers deletion of the associated tokens and cached data. You may also request deletion through our data deletion process or by emailing privacy@forkrado.com.

4. Other connected platforms

In addition to Google, you can connect other platforms. In each case we access data only with your explicit authorization, use it solely to provide the features you enable and remain bound by each platform's own terms. You can disconnect any platform at any time from the Connections page, which revokes our access.

• Meta (Facebook and Instagram): with your consent we access your connected Pages and Instagram accounts to read basic asset information and to create and publish content you request. Our use of Meta data complies with the Meta Platform Terms. We do not use Meta data for advertising or sell it to third parties.
• Point-of-sale providers (Clover and Square): with your consent we read your menu or catalog and your order and transaction data to sync your listings and power commerce features. Order data may include customer details you receive through your POS. See the Clover Privacy Policy and Square Privacy Policy.
• Stripe (payments): payments are processed by Stripe. Card details are submitted directly to Stripe and are not stored on our servers. We receive only limited transaction metadata needed to reconcile and display your payments. Stripe's handling of your data is governed by the Stripe Privacy Policy.

5. How we share information

We do not sell your personal information. We share information only with:

• Service providers who process data on our behalf, such as cloud hosting on Google Cloud, email delivery, SMS delivery and analytics, under contractual confidentiality and data-protection obligations.
• Platforms you connect, to perform the actions you request.
• Legal and safety recipients when required by law or to protect rights, safety and the integrity of the service.

6. Customer data you process through the service

The service lets you collect, import and message your own customers (for example guest names, email addresses and phone numbers). For this data you are the controller and Forkrado acts as a service provider or processor that handles it only on your instructions to provide the service. You are responsible for having a lawful basis and any required consent to collect this data and to contact your customers.

Marketing messages. When you send email or SMS campaigns through the service, you must comply with applicable laws, including the TCPA and the CAN-SPAM Act. Recipients can opt out at any time, for example by replying STOP to a text or using the unsubscribe link in an email, and we honor those opt-outs.

If one of your customers asks us to access or delete their data, we will refer the request to you as the controller and support you in responding.

7. Text messages and mobile information

How our text message programs work, including how to opt out, is described in our SMS Terms.

8. Data security

We use administrative, technical and physical safeguards designed to protect your information, including encryption in transit and at rest on Google Cloud, access controls and least-privilege service credentials. No method of transmission or storage is completely secure, but we work to protect your data and respond to incidents.

9. Your choices and rights

• Access, update or delete your account information.
• Disconnect any connected platform at any time.
• Request a copy or deletion of your data. See Data Deletion.
• Opt out of text messages by replying STOP, and out of emails with the unsubscribe link.

10. Your U.S. state privacy rights

Depending on your state of residence (for example California under the CCPA and CPRA, and Virginia, Colorado, Connecticut and Utah), you may have the right to access, correct, delete or obtain a copy of your personal information, and to appeal a decision about your request.

No sale or sharing. We do not sell your personal information and do not share it for cross-context behavioral advertising. Where we handle your customers' personal information, we do so as a service provider under your instructions and not for our own purposes.

To exercise these rights, contact privacy@forkrado.com. You may use an authorized agent to submit a request, and we will not discriminate against you for exercising your rights.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

12. Contact us

The service is operated by Forkrado LLC, Denver, Colorado, United States. Questions about this Privacy Policy or our handling of your data: privacy@forkrado.com or (720) 900-5320.