Privacy Policy

Last updated: October 17, 2026

Pie ("Pie", "we", "us") is a back-office software service for restaurants, operated by 16549373 Canada Inc., Unit 134-4750 Yonge Street, North York, Ontario M2N 0J6, Canada. This policy explains what personal information we collect through pietab.com, app.pietab.com and gift.pietab.com (the "Service"), why we collect it, and the choices you have. We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles.

1. Who is responsible

Our Privacy Officer is Chenglong (Roger) Shen. You can reach the Privacy Officer at [email protected]. We respond to access and correction requests within 30 days.

2. Two kinds of information

• Information about our customers (restaurant owners and staff). Name, work email, phone number, business name and address, login credentials (stored as one-way hashes), and how you use the Service.
• Information our customers bring into Pie. When a restaurant connects its POS, delivery apps or bank account, Pie processes that restaurant's sales, orders, menu, payouts, bank transactions and, for staff, schedules and hourly wages. Gift-card records may include a cardholder's name, email or phone if the restaurant chooses to record them. For this information the restaurant decides what is collected and why; Pie processes it on the restaurant's behalf and only to provide the Service to that restaurant.

3. What we do not do

• We do not process card payments and never see full card numbers. Restaurants take payment through their own POS and payment processor.
• We do not hold or move restaurants' money. Gift-card balances are records kept for the restaurant; the funds stay with the restaurant.
• We do not sell personal information, and we do not send marketing messages to a restaurant's customers.
• We do not use one restaurant's data to serve another restaurant, and we do not publish a restaurant's name, figures or screenshots without its written consent.

4. Why we use information

To provide and secure the Service, to connect the third-party platforms a restaurant authorizes, to calculate reports the restaurant asks for, to provide support, to bill for the Service, and to meet legal obligations. We collect only what these purposes need.

5. Google Business Profile data

If a restaurant chooses to connect its Google Business Profile, it signs in with its own Google account and approves access on Google's consent screen; Pie never sees the restaurant's Google password. Pie then uses the Google Business Profile APIs only to do what the restaurant asks inside Pie: show its locations, keep regular and special (holiday) hours in sync with its other ordering apps, mark a location temporarily closed or open again, show its reviews so the restaurant can reply to them itself, and show the performance figures Google provides for its own profiles.

• Pie's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• We do not sell this data, use it for advertising, use it to train AI models, or share it with anyone except as needed to provide the features above, to comply with law, or with the restaurant's consent.
• Pie does not post reviews or review replies on a restaurant's behalf without that restaurant's own action in Pie.
• A restaurant can disconnect Google at any time in Pie or at myaccount.google.com/permissions; we then delete the stored access token, and delete the Google data we copied within 30 days.

6. Delivery-platform data

When a restaurant connects an ordering or delivery platform such as Uber Eats, the restaurant authorizes Pie to receive that platform's data about the restaurant: store details, menu, orders and payouts. For this data Pie is a processor acting on the restaurant's behalf, and it is also bound by the platform's own partner terms.

• Order data can include a little information about the restaurant's customers: a name or initials, a phone number, delivery notes and what was ordered. Pie uses it only to accept and print the order, to notify the restaurant, and to build that restaurant's own reports. We do not use it for marketing, do not sell it, and do not combine it with data from other sources, other than the restaurant's own figures across the platforms it has connected.
• Where a platform offers an official authorization page, as Uber Eats does, the restaurant connects there; Pie never asks for or stores the restaurant's Uber Eats password or access tokens. The restaurant can disconnect at any time in Pie or in the platform's merchant portal.
• We keep platform data only as long as needed to provide the Service to that restaurant, and delete it under section 8 when the account ends. If a platform requires us to delete the data it provided, or to stop connecting, we do so and tell the restaurant.
• If a security incident affects data received from a platform, we tell the restaurant promptly and notify the platform within the time its partner terms require (for Uber Eats, within 24 hours), in addition to the notices described in section 9.

7. Service providers (sub-processors)

We use the following providers to run the Service. Some of them store or process data outside Canada, including in the United States, where it may be accessible to authorities under local law.

8. How long we keep it

We keep account and restaurant data while the account is active. When a restaurant ends its subscription, it has 30 days to export its data; after that we delete it, except records we must keep by law (for example invoices) and security logs, which we keep for up to 24 months. Gift-card records are kept, read-only, as long as a card has a balance, because Ontario law does not allow purchased gift cards to expire; we delete them only when the restaurant asks us in writing, except records we must keep by law.

9. Security

Data is encrypted in transit (HTTPS). Platform credentials and access tokens are stored encrypted. Access is limited by role, and the Service records who changed what. If a breach creates a real risk of significant harm, we will notify affected people and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and we keep a record of every security incident for 24 months.

10. Your choices and rights

You can ask to see, correct or delete personal information we hold about you by writing to [email protected]. If your information was entered by a restaurant (for example, on a gift card), we will forward your request to that restaurant, which controls that information. If you are not satisfied with our answer you may contact the Office of the Privacy Commissioner of Canada.

11. Cookies

Pie uses no tracking, analytics or advertising cookies, and no third-party scripts that set them. pietab.com sets no cookies at all. The signed-in apps use only the cookies below, which they need to work; because they are strictly necessary, there is nothing to switch on or off.

The sign-in pages also remember the email you last signed in with, and small display choices such as an open tab, in your browser's local storage on that device. This is never sent to us; you can clear it in your browser settings. If we ever add analytics or advertising tools, we will list them here first and ask for your consent before turning them on.

12. Changes

We will post any change on this page and update the date above. For material changes we will also notify account owners by email.