Privacy Policy

Forkrado LLC ("Forkrado", "we", "us"), based in Denver, Colorado, United States, provides an AI-powered platform that helps restaurants and local merchants manage their online presence, customer channels, and marketing. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have. It applies to the Forkrado Studio product and related services.

1. Information We Collect

• Account information — name, email address, and authentication details you provide when you register or are invited to a workspace.
• Business information — store profile, menu, hours, locations, campaigns, and other operational data you enter or connect.
• Connected platform data — data we retrieve on your behalf from third-party services you explicitly connect, such as Google Business Profile (see Section 3), Meta (Facebook and Instagram), point-of-sale providers (Clover and Square), and Stripe for payments (see Section 4).
• Payment data — when you enable payments, transactions are processed by Stripe. We receive limited payment metadata (such as amount, status, and the last four digits of a card); full card numbers go directly to Stripe and are not stored by us.
• Business tax identifiers — if you register for carrier-compliant SMS (10DLC), we collect your business tax ID (EIN) to complete brand registration. We retain only the last four digits for display; the full value is held by our messaging provider and is not stored in our workbench or databases. Stripe may separately collect tax and identity information to verify your account for payments.
• Usage data — logs, device and browser information, and interaction events used to operate and secure the service.

2. How We Use Information

• Provide, maintain, and improve the features you enable.
• Authenticate you and secure your account and workspace.
• Perform actions you request on connected platforms — for example, updating your business profile, replying to reviews, or publishing posts.
• Communicate with you about the service, including support and notices.
• Comply with legal obligations and enforce our terms.

3. Google User Data

When you connect your Google Business Profile, Forkrado requests the https://www.googleapis.com/auth/business.manage scope. With your explicit consent, we access this data only to power features you actively enable, specifically to:

• Read your business location information and keep it in sync.
• Read customer reviews and post replies on your behalf.
• Create and publish posts to your Business Profile.

Limited Use. Forkrado's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not transfer it to unrelated third parties, and we do not use it for advertising. We use it solely to provide and improve the features you enable.

Retention and deletion. We retain Google user data only as long as needed to provide these features. You can disconnect Google Business Profile at any time from the Connections page, which revokes our access and triggers deletion of the associated tokens and cached data. You may also request deletion by contacting us at privacy@forkrado.com.

4. Other Connected Platforms

In addition to Google, you can connect other platforms. In each case we access data only with your explicit authorization, use it solely to provide the features you enable, and remain bound by each platform's own terms. You can disconnect any platform at any time from the Connections page, which revokes our access.

• Meta (Facebook and Instagram) — with your consent we access your connected Pages and Instagram accounts to read basic asset information and to create and publish content you request. Our use of Meta data complies with the Meta Platform Terms. We do not use Meta data for advertising or sell it to third parties.
• Point-of-sale providers (Clover and Square) — with your consent we read your menu/catalog and order and transaction data to sync your listings and power commerce features. Order data may include customer details you receive through your POS. See the Clover Privacy Policy and Square Privacy Policy.
• Stripe (payments) — payments are processed by Stripe. Card details are submitted directly to Stripe and are not stored on our servers; we receive only limited transaction metadata needed to reconcile and display your payments. Stripe's handling of your data is governed by the Stripe Privacy Policy.

5. How We Share Information

We do not sell your personal information. We share information only with:

• Service providers who process data on our behalf (such as hosting, email delivery, and analytics) under contractual confidentiality and data-protection obligations.
• Platforms you connect, to perform the actions you request.
• Legal and safety recipients when required by law or to protect rights, safety, and the integrity of the service.

6. Customer Data You Process Through the Service

The Service lets you collect, import, and message your own customers (for example, guest names, email addresses, and phone numbers). For this data you are the controller and Forkrado acts as a service provider/processor that handles it only on your instructions to provide the Service. You are responsible for having a lawful basis and any required consent to collect this data and to contact your customers.

Marketing messages. When you send email or SMS campaigns through the Service, you must comply with applicable laws, including the TCPA and the CAN-SPAM Act. Recipients can opt out at any time (for example, by replying STOP to an SMS or using the unsubscribe link in an email), and we honor those opt-outs.

If one of your customers asks us to access or delete their data, we will refer the request to you as the controller and support you in responding. To exercise choices about your own account data, see Section 8.

7. Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and least-privilege service credentials. No method of transmission or storage is completely secure, but we work to protect your data and respond to incidents.

8. Your Choices and Rights

• Access, update, or delete your account information.
• Disconnect any connected platform at any time.
• Request a copy or deletion of your data by contacting privacy@forkrado.com.

9. Your U.S. State Privacy Rights

Depending on your state of residence (for example, California under the CCPA/CPRA, and Virginia, Colorado, Connecticut, and Utah), you may have the right to access, correct, delete, or obtain a copy of your personal information, and to appeal a decision about your request.

No sale or sharing. We do not sell your personal information and do not share it for cross-context behavioral advertising. Where we handle your customers' personal information, we do so as a service provider under your instructions and not for our own purposes.

To exercise these rights, contact us at privacy@forkrado.com. You may use an authorized agent to submit a request, and we will not discriminate against you for exercising your rights.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

11. Contact Us

The Service is operated by Forkrado LLC (Denver, Colorado, United States). If you have questions about this Privacy Policy or our handling of your data, contact us at privacy@forkrado.com.