Privacy Policy
Last updated: October 13, 2026
Heuristic Technologies & Solutions, Inc. ("we," "us," "our") operates HI.1s.again at hi1sagain.com (the "Platform"). HI.1s.again gives restaurants and cafés a digital menu, table and counter ordering, a kitchen dashboard and a loyalty program, connected to their point-of-sale system (such as Clover). Diners use it to browse menus, order from their table, earn rewards and share feedback. The Platform also includes a community where people share opinions about everyday products and brands.
This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to diners, restaurant and business users, brands, and community members.
In short:
- We collect what we need to run ordering, loyalty and feedback: your orders, visits and rewards at each restaurant, and your account details if you sign in.
- We never process card payments and never see card numbers. Diners pay on the restaurant's own point-of-sale device; we only receive whether an order was paid or refunded, and the amount.
- A restaurant sees your orders, visits, rewards and feedback at that restaurant only, never at other restaurants.
- We do not sell personal information and we do not show ads.
Contents
- Information we collect
- Information from Clover and other POS systems
- How we use information
- How we share information
- Restaurants' use of diner information
- Emails and messages
- Cookies and local storage
- How long we keep information
- Security
- Your rights and choices
- Children
- International transfers
- Changes to this policy
- Contact us
1. Information we collect
1.1 Diners ordering at a restaurant
You can browse a menu and order at a table without an account. When you do, we collect:
- Table session details: the restaurant and table, the time you joined, the table's session code (PIN), and a random identifier stored on your device so you return to the same table.
- Your table name: the name you enter, or a playful name we assign, shown to staff and to others who join your table.
- Your orders: items, options and add-ons, special instructions, quantities, prices, discounts, order status and times, and which person at the table added each item.
- Requests to staff: for example asking for a server or the bill.
- Payment status: whether your table's order was paid, partly paid or refunded, and the amounts, as reported by the restaurant's point-of-sale system. We never receive card numbers or bank details.
If you sign in (we use Google sign-in), we also collect:
- Account details: your name, email address and profile picture from Google, and the display name or alias you choose.
- Visits and loyalty: your visits to each restaurant, progress toward visit milestones, rewards unlocked, claimed and used, memberships and membership perks, and offers sent to you.
- Feedback: ratings, survey answers and comments you give about dishes, service or your visit.
- Notification preferences: whether you want emails from us and from restaurants you've visited.
1.2 Restaurant and business users
- Account details: name, email address and sign-in details of owners and staff, and each team member's role.
- Business profile: business name, address, phone, opening hours, time zone, logo, photos, website and review links, and similar details you add.
- Menu and setup: items, categories, descriptions, prices, photos and videos, options, tax settings, tables and table tags, offers, rewards, membership plans, kitchen and ordering settings.
- Content requests: reference photos, notes and feedback you send when requesting menu visuals.
- Billing details: your plan and billing history. Card or bank details for subscriptions are handled by our billing provider (or by Clover, if you subscribe through the Clover App Market), not stored by us.
1.3 Phone ordering assistant (only if a restaurant turns it on)
Some restaurants use an automated voice assistant that answers calls and takes orders. If you call such a restaurant, we receive the caller's phone number, the call's transcript and, where enabled, its recording, and the order details taken on the call. Calls are processed by our voice provider (ElevenLabs).
1.4 Product community and brands
- Opinions and contributions: poll answers, ratings, comments, products you add, product photos and barcode scans.
- Profile details you choose to add: such as city or region, interests and age range, used to show you relevant products and polls.
- Points and badges: your contribution level and rewards.
Product information is also drawn from public sources such as USDA FoodData Central and Open Food Facts, and some descriptions are generated with AI tools.
1.5 Technical information
- Device type, operating system and browser.
- IP address and the approximate location it implies (city or region level).
- Pages and features used, errors and performance logs.
- Session and sign-in tokens.
2. Information from Clover and other POS systems
When a restaurant connects its Clover account (by installing HI.1s.again from the Clover App Market or connecting from our Integrations page), Clover asks the restaurant to approve the permissions we request. With that approval we access:
| What we access | Why |
|---|---|
| Merchant profile: business name, address, phone, email, owner name and merchant ID | Set up and pre-fill the restaurant's account, and link it to the right Clover account |
| Inventory: items, categories, prices, modifier groups and tax rates | Build the digital menu and calculate bills with the restaurant's own tax rates |
| Orders created through HI.1s.again: line items, options, discounts and totals | Send diners' orders to the restaurant's Clover system and keep them in sync |
| Payment and refund status and amounts for those orders | Show staff and diners whether a table has paid, and close the table |
We do not access card numbers, card-holder data, the restaurant's bank accounts, or Clover orders and customers that did not come from HI.1s.again. The access credential Clover gives us is stored on our servers, used only to provide the Platform, and deleted when the restaurant disconnects or uninstalls the app. Clover's own handling of data is described in Clover's Privacy Policy.
3. How we use information
- Run ordering: show menus, keep a table's shared cart in sync, send orders to the kitchen and to the restaurant's POS, show order status and the bill.
- Run loyalty: count visits, unlock and apply milestone rewards, memberships and offers, and prevent a reward from being used twice.
- Feedback: collect and show restaurants feedback about their dishes and service.
- Communicate: send order and visit summaries, account and security emails, and service announcements; send offers from restaurants you've visited if you allow it.
- Support restaurants: dashboards, order history, analytics and settings for their own business.
- Product community: match you with relevant products and polls, and give brands aggregated insights.
- Keep the Platform safe and working: security, fraud and abuse prevention, debugging, and improving features.
- Legal: comply with legal obligations and enforce our terms.
Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running and improving the Platform, your consent (for example for marketing emails), and legal obligations.
4. How we share information
With the restaurant you order from
The restaurant sees your table name, orders, instructions and requests. If you're signed in, it also sees your display name, your visits, rewards and memberships at that restaurant, and the feedback you give it. Restaurants never see your activity at other restaurants.
With others at your table
People who join your table see your table name and the items you add to the shared order.
With the restaurant's point-of-sale provider
Orders are sent to the restaurant's POS account (for example Clover) so the restaurant can prepare and charge for them.
With brands
Brands receive aggregated, de-identified insights about their products. We do not give brands your name or email unless you choose to share them.
With service providers
We use trusted providers who process information on our behalf and only as we instruct:
| Provider | Purpose |
|---|---|
| Render | Hosting |
| Supabase | Database, file storage and authentication |
| Sign-in | |
| SendGrid (Twilio) | Sending email |
| Clover | Point-of-sale integration for restaurants that connect it |
| ElevenLabs | Phone ordering assistant, for restaurants that enable it |
| OpenAI | AI-assisted product and content features |
| Stripe | Subscription billing, where used |
| Formspree | Our contact form |
For legal reasons and business transfers
- When required by law, regulation or legal process, or to protect the rights, property or safety of our users, restaurants or the public.
- As part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.
We do not sell personal information, and we do not share it for targeted advertising.
5. Restaurants' use of diner information
When you order at a restaurant, we process your order and visit information to provide the service to that restaurant, as well as to run your own HI.1s.again account. Restaurants agree in our Restaurant Terms to use diner information only to serve their guests and run their loyalty program, and to follow applicable privacy and marketing laws. If you have a question about how a particular restaurant uses your information, you can contact the restaurant directly or write to us at privacy@hi1sagain.com.
6. Emails and messages
- Visit summaries: after a meal, signed-in diners may receive a summary with their order, rewards earned and progress toward the next reward.
- Offers: restaurants you've visited may send you offers through HI.1s.again.
- Account and service emails: sign-in, security and important changes. These can't be turned off while you have an account.
You can turn off visit summaries and offers in your profile's notification settings or with the unsubscribe link in any such email.
7. Cookies and local storage
We use only what's needed to make the Platform work:
- Session and sign-in cookies: keep you signed in and protect against forged requests.
- Local storage on your device: the menu stores your table's session, your table name, a random device identifier and a few display preferences, so you stay at your table if you refresh or come back. It also caches some content to load pages faster. This stays in your browser; clearing your browser data removes it.
We don't use advertising or cross-site tracking cookies, or third-party analytics trackers. If that changes, we'll update this policy and ask for consent where required.
8. How long we keep information
| Information | How long |
|---|---|
| Your account, visits, rewards and feedback | While your account is active. Deleted or de-identified within 30 days of a deletion request. |
| Accounts unused for 3 years | May be deleted after notice by email. |
| Orders placed at a restaurant | Kept as part of that restaurant's records while it uses HI.1s.again, and up to 7 years where needed for tax, accounting or legal purposes. If you delete your account, your name is removed from past orders. |
| Guest table sessions (no account) | The order records above; the device identifier isn't linked to your identity. |
| Restaurant account and menu data | While the account is active. Deleted within 30 days after the restaurant closes its account, except records we must keep by law. |
| Clover access credentials | Deleted when the restaurant disconnects or uninstalls the app. |
| Phone assistant transcripts and recordings | Only as long as needed to handle the order and related support, unless the restaurant needs them longer for its records. |
| Poll answers | Up to 5 years, then de-identified. |
| Technical logs and analytics | Up to 2 years. |
De-identified or aggregated information that can no longer identify you may be kept for analysis and to improve the Platform.
9. Security
- Encryption in transit (HTTPS/TLS) and at rest through our database provider.
- Access to personal information limited to people and systems that need it; restaurant staff access limited by role.
- POS credentials stored server-side and never exposed to browsers.
- Monitoring, and a process for responding to security incidents, including notifying affected users and authorities where the law requires.
No method of transmission or storage is completely secure, but we work to protect your information and fix issues quickly.
10. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you, and get a copy in a common format.
- Correct inaccurate information.
- Delete your account and personal information.
- Object to or restrict certain uses, and withdraw consent where we rely on it.
- Opt out of marketing emails at any time.
Residents of California and other US states with privacy laws, the EU, UK, Canada, India and Australia have these rights under their local laws (such as the CCPA, GDPR, UK GDPR, PIPEDA, the DPDP Act and the Privacy Act). We don't sell or share personal information for cross-context advertising, and we won't treat you differently for exercising your rights.
To make a request, email privacy@hi1sagain.com from the address on your account. We may need to confirm your identity. We respond within 30 days (or 45 days for complex requests, with notice). EU and UK residents may also contact their local data protection authority.
Restaurants: you can disconnect Clover at any time from your Integrations page, uninstall the app from your Clover dashboard, and ask us to export or delete your business data by emailing support@hi1sagain.com.
11. Children
Creating an account requires being at least 16 years old. Children can be at a restaurant table where someone orders with HI.1s.again, but the Platform is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact privacy@hi1sagain.com and we will delete it.
12. International transfers
We are based in the United States and our providers store data in the United States. If you use the Platform from another country, your information is transferred to and processed in the US. Where required, we use appropriate safeguards such as standard contractual clauses.
13. Changes to this policy
We may update this policy as the Platform changes. We'll post the new version here with a new "Last updated" date and, for significant changes, notify account holders by email or on the Platform before the change takes effect.
14. Contact us
- Privacy requests: privacy@hi1sagain.com
- Support: support@hi1sagain.com
- Legal notices: legal@hi1sagain.com
- Mail: Heuristic Technologies & Solutions, Inc., 6418 North Rockwell Street 3, Chicago, IL 60645, US
The current version of this policy is always at hi1sagain.com/privacy.