Privacy Policy

Last updated: July 18, 2026

This Privacy Policy explains how N4Cluster Inc (“N4Cluster,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when people use our websites, restaurant ordering experiences, merchant software, applications, and related services (collectively, the “Services”). N4Cluster provides technology that enables restaurants to offer branded online ordering, pickup and delivery, payments through third-party payment processors, merchant-controlled and N4Cluster-supported promotions, delivery coordination, operational analytics, and AI-enabled capabilities.

Questions or privacy requests: privacy@n4cluster.com

Contents

1. Scope and Our Role
2. Personal Information We Collect
3. Sources of Personal Information
4. How We Use Personal Information
5. How We Disclose Personal Information
6. Payments
7. Pickup and Delivery
8. Marketing, Flash Sales, and Communications
9. Artificial Intelligence and Automated Technologies
10. Cookies, Analytics, and Tracking Technologies
11. Data Retention
12. Data Security
13. Children’s Privacy
14. Your Privacy Rights and Choices
15. U.S. State Privacy Disclosures
16. Changes to This Policy
17. Contact Us

1. Scope and Our Role

This Privacy Policy applies when you visit n4cluster.com or another N4Cluster site that links to this Policy; use a restaurant-branded ordering experience powered by N4Cluster; use N4Cluster merchant software or applications; create an account or place an order as a guest; communicate with us; receive eligible transactional or promotional communications; or otherwise interact with the Services.

N4Cluster is a technology platform provider. When a customer places an order through a restaurant experience powered by N4Cluster, the customer purchases directly from the applicable restaurant. The restaurant is responsible for food preparation, food quality and safety, allergen disclosures, menu accuracy, pricing, taxes charged by the restaurant, and fulfillment of the order, except to the extent a separate service provider is responsible for a specific service.

Depending on the context and applicable law, N4Cluster may process personal information on behalf of a restaurant (for example, to facilitate restaurant-directed ordering, fulfillment, communications, and customer management) and may also process personal information for N4Cluster’s own legitimate business purposes, such as platform administration, security, fraud prevention, service improvement, legal compliance, aggregated analytics, and development of platform capabilities.

Restaurants may have their own privacy notices and may independently use information they receive through the Services for order fulfillment, customer support, and, where permitted by law and the customer’s choices, marketing. N4Cluster does not provide one restaurant’s customer data to another restaurant, or use a restaurant’s customer list to market another restaurant, without the customer’s explicit consent.

2. Personal Information We Collect

The information we collect depends on how you interact with the Services. You may use certain restaurant ordering experiences as a guest or through a registered account.

Information you provide directly

• Contact and identity information, such as name, email address, phone number, billing address, and delivery address.
• Account and authentication information, such as login credentials, verification information, account preferences, and account settings.
• Order and transaction information, such as restaurant selected, menu items, quantities, pricing, discounts, promotional offers used, pickup or delivery preference, delivery address, special instructions, order history, order status, cancellations, refunds, and related support information.
• Marketing and communication preferences, including opt-in choices, opt-out choices, and records needed to honor communication preferences.
• Merchant and restaurant information, such as restaurant name and locations, owner or manager contact details, business contact information, menu and pricing information, promotions, operational settings, staff or administrator accounts, and integration configuration.
• Communications and support information that you provide when you contact N4Cluster or interact with customer or merchant support.

Dietary, allergy, accessibility, and other special instructions

Customers may voluntarily include dietary preferences, allergy information, accessibility needs, or other special instructions with an order. Such information may reveal health-related or other sensitive information. We use this information only as reasonably necessary to facilitate the requested order or service, provide support, comply with law, or as otherwise permitted with appropriate consent. We do not use voluntarily provided allergy or health-related order instructions for unrelated advertising or to infer sensitive characteristics for marketing purposes.

Payment-related information

Full payment card numbers and card security codes are collected and processed by third-party payment processors, such as Square and other processors that N4Cluster or a restaurant partner may support. N4Cluster does not store full payment card numbers or card security codes. We may receive limited payment and transaction information, such as transaction identifiers, payment status, amount, payment method type, limited card details made available by the processor, refund status, and fraud or risk signals.

Information collected automatically

• Device and technical information, such as IP address, browser type, operating system, device type, device or application identifiers, and technical configuration information.
• Log and usage information, such as pages or screens viewed, feature interactions, timestamps, error logs, diagnostic events, security events, and performance information.
• Approximate location information that may be inferred from an IP address and location information you provide directly, such as a delivery address. N4Cluster does not currently request precise GPS location permission from customer devices.

3. Sources of Personal Information

We may collect personal information from the following sources:

• You, when you place an order, create an account, use merchant tools, contact us, or communicate your preferences.
• Restaurant partners, when they use N4Cluster to manage orders, customer relationships, promotions, support, or operations.
• Payment processors, which may provide transaction status, payment confirmation, refund information, and fraud or risk signals.
• Delivery providers and restaurant-designated drivers, which may provide delivery status, proof of delivery, routing events, or service updates.
• Authentication, communications, cloud infrastructure, security, and other service providers that support operation of the Services.
• APIs and integrations that a restaurant or N4Cluster enables to provide the Services, subject to the applicable provider terms and permissions.

4. How We Use Personal Information

We may use personal information to:

• Provide, operate, maintain, and improve the Services.
• Enable guest checkout and registered-account experiences.
• Create, authenticate, secure, and manage user and merchant accounts.
• Process and route orders to the applicable restaurant and coordinate pickup or delivery.
• Facilitate payments, refunds, cancellations, and transaction support through third-party payment processors.
• Provide order confirmations, order status updates, delivery updates, service messages, and customer support.
• Enable restaurant and N4Cluster promotional communications where the recipient has provided the consent required by applicable law.
• Operate merchant tools, including menus, pricing, promotions, Flash Sales, customer engagement, and order management.
• Coordinate delivery through restaurant drivers and third-party delivery providers.
• Protect the Services, detect and prevent fraud or abuse, investigate security incidents, and enforce our terms.
• Perform analytics, forecasting, product improvement, troubleshooting, and research, including through aggregated or de-identified information where practicable.
• Develop and operate AI-enabled features as described below.
• Comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

5. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this Policy:

• Restaurant partners. When you order from a restaurant, we provide the restaurant with information needed to accept, prepare, fulfill, support, and manage the order and customer relationship.
• Payment processors. We provide or transmit information needed to initiate and manage payment transactions, refunds, and payment-related risk controls.
• Delivery providers and drivers. For delivery orders, we may provide the restaurant’s drivers or third-party delivery providers with information reasonably necessary to complete the delivery, such as name, phone number, delivery address, order reference, and delivery instructions.
• Cloud hosting, infrastructure, database, communications, authentication, security, customer support, and other service providers that help operate the Services.
• AI service providers, when used to provide N4Cluster AI-enabled functions and subject to the safeguards described in Section 9.
• Professional advisers, regulators, law enforcement, courts, or other parties when disclosure is required or permitted by law or reasonably necessary to protect rights, safety, security, or the integrity of the Services.
• Parties to a corporate transaction, such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and legal requirements.

We do not sell personal information for money. We do not currently share personal information for cross-context behavioral advertising. If our practices change, we will update this Policy and provide legally required notices and choices before or when the change applies.

6. Payments

Payments made through the Services are processed by third-party payment processors, such as Square and other processors that N4Cluster or the applicable restaurant may support. Payment processors collect and process payment credentials under their own privacy notices and terms. N4Cluster does not store full payment card numbers or card security codes.

N4Cluster may process limited payment-related information needed to operate the Services, reconcile transactions, manage refunds, provide support, detect fraud, and maintain transaction records as required by law or legitimate business needs.

7. Pickup and Delivery

For pickup orders, N4Cluster provides the applicable restaurant with information needed to identify and fulfill the order and communicate order status.

For delivery orders, delivery may be performed by the restaurant’s own personnel or by a third-party delivery provider. N4Cluster may disclose limited information needed for delivery, including the customer’s name, phone number, delivery address, order reference, and delivery instructions. Delivery providers may process information under their own privacy practices when acting independently.

8. Marketing, Flash Sales, and Communications

N4Cluster supports transactional communications and, where permitted, marketing communications. These are treated differently.

Transactional communications

We and participating restaurants may send communications necessary to provide the Services, such as account verification, order confirmations, order status, pickup notifications, delivery updates, security notices, and support responses. These communications are not promotional in nature and may continue where necessary to complete an active transaction or administer an account.

Promotional communications and Flash Sales

Participating restaurants may use N4Cluster tools to create promotions or Flash Sales and communicate them to eligible customers. N4Cluster may also send N4Cluster-level or restaurant-related promotional communications where the recipient has provided the consent required by applicable law. Depending on the campaign, N4Cluster may act on a restaurant’s instructions or may determine the content and audience for N4Cluster communications, in each case subject to applicable consent and preference requirements.

Customer information associated with one restaurant will not be provided to another restaurant or used to promote another restaurant without the customer’s explicit consent.

You may opt out of promotional email using the unsubscribe mechanism in the message. You may opt out of promotional SMS by replying STOP or following the instructions provided in the message. Where required by law, consent to marketing messages is obtained separately and is not a condition of purchase. Opting out of marketing does not prevent service-related communications necessary to complete an order, provide security notices, or administer your account. Message and data rates may apply to SMS communications, and message frequency may vary.

We do not share mobile opt-in data or SMS consent records with third parties or affiliates for their own marketing or promotional purposes. We may share such information with service providers that support messaging, consent management, customer support, security, or other operational functions, subject to appropriate restrictions.

9. Artificial Intelligence and Automated Technologies

N4Cluster may use artificial intelligence, machine learning, and related technologies through N4Cluster capabilities, including N4Logic, to support functions such as demand forecasting, operational analytics, recommendations, promotional insights, anomaly detection, merchant decision support, and product improvement.

AI-enabled processing may use order, merchant, operational, and usage information. Where practicable, N4Cluster uses aggregated or de-identified data for analytics and model-related processing. We seek to minimize the personal information provided to AI service providers to what is reasonably necessary for the applicable function.

N4Cluster does not permit third-party AI service providers, under the applicable contractual or service terms we select, to use N4Cluster merchant or customer production data to train their general-purpose models. We may use AI service providers to process information on our behalf to deliver N4Cluster features, subject to contractual, technical, and organizational safeguards appropriate to the processing.

Our current AI-enabled features are designed primarily for operational and commercial insights and are not intended to make decisions about consumers that produce legal or similarly significant effects. If that changes, we will provide any notices, assessments, or choices required by applicable law.

Where applicable, you may contact privacy@n4cluster.com with questions about N4Cluster’s use of personal information in AI-enabled features. Certain AI-enabled functions may be integral to the Services and may not be individually optional, while optional features and legally required choices will be provided where applicable.

10. Cookies, Analytics, and Tracking Technologies

N4Cluster may use cookies and similar technologies that are necessary to operate the Services, such as technologies used for session management, authentication, security, load balancing, preferences, and core functionality. We also collect first-party logs and technical events needed for reliability, troubleshooting, security, and product operation.

At the time of this Policy, N4Cluster does not use third-party behavioral advertising pixels or cross-site advertising trackers. We may introduce product analytics, performance monitoring, or event-measurement technologies in the future to understand feature usage, improve the Services, and support analytics and AI-enabled capabilities. Before deploying technologies that materially change our data practices, we will assess applicable legal requirements, update this Policy as appropriate, and provide consent or opt-out controls where required.

You can control certain cookies through your browser settings. Disabling strictly necessary technologies may prevent parts of the Services from functioning correctly. See our Cookie Notice for more detail.

11. Data Retention

We retain personal information for no longer than reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Retention depends on the type of information and the context in which it is processed. Our retention criteria generally include:

• Account information: for the life of the account and for a reasonable period afterward as needed for account closure, support, security, fraud prevention, dispute resolution, enforcement, or legal compliance.
• Order and transaction records: for as long as reasonably necessary for fulfillment, customer service, refunds, reconciliation, fraud prevention, tax, accounting, contractual, and legal obligations.
• Marketing preferences and consent records: for as long as needed to honor preferences, document consent, maintain suppression lists, and demonstrate compliance.
• Security, diagnostic, and system logs: for a limited period appropriate to security, troubleshooting, fraud prevention, and operational needs.
• Dietary, allergy, accessibility, and special instructions: as part of the applicable order record only for as long as reasonably necessary for fulfillment, support, dispute resolution, legal compliance, or other permitted purposes; not for unrelated advertising or sensitive-characteristic profiling.
• Backups: according to our normal backup and disaster-recovery lifecycle, after which data is deleted or overwritten in the ordinary course.

When personal information is no longer needed, we may delete, anonymize, aggregate, or securely isolate it until deletion is practicable.

12. Data Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction. No system or method of transmission is completely secure, and we cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials and for using appropriate security practices when accessing the Services.

If we become aware of a security incident involving personal information, we will investigate and provide notifications as required by applicable law.

13. Children’s Privacy

The Services are not directed to children under 13, and N4Cluster does not knowingly collect personal information online from children under 13 without appropriate authorization. If we learn that we have collected personal information from a child under 13 in circumstances where applicable law requires parental consent or another authorization, we will take reasonable steps to delete or otherwise address the information as required by law. Parents or guardians who believe a child has provided personal information may contact privacy@n4cluster.com.

14. Your Privacy Rights and Choices

Depending on where you live and subject to applicable law, you may have rights regarding your personal information, which may include the right to:

• Know or confirm whether we process personal information about you.
• Access personal information we maintain about you.
• Correct inaccurate personal information.
• Delete personal information, subject to legal exceptions.
• Obtain a portable copy of certain personal information.
• Opt out of certain targeted advertising, sale, sharing, or qualifying profiling where applicable.
• Withdraw consent where processing is based on consent, without affecting processing that occurred before withdrawal.
• Appeal a decision on a privacy request where applicable.
• Exercise privacy rights without unlawful discrimination.

To exercise a privacy right, email privacy@n4cluster.com or use the contact method listed in Section 17. We may need to verify your identity and authority before completing certain requests. Authorized agents may submit requests where permitted by law, subject to verification requirements.

You may update certain account information through your account settings where available. You may also request account closure. We may retain information after closure when required or permitted for security, fraud prevention, transaction records, legal compliance, dispute resolution, or other legitimate purposes described in this Policy.

We currently do not sell personal information or share it for cross-context behavioral advertising. Because we do not currently engage in those practices, an opt-out mechanism for such activity is not presently necessary. If those practices change, we will provide legally required opt-out methods and honor applicable universal opt-out preference signals where required by law.

15. U.S. State Privacy Disclosures

Certain U.S. state privacy laws may apply depending on the state, the nature of the data, and statutory applicability thresholds. Where applicable, the following summary describes categories of personal information N4Cluster may collect or process in connection with the Services. Not every category applies to every person.

For the preceding 12 months, N4Cluster has not sold personal information for money or shared personal information for cross-context behavioral advertising. We disclose personal information to restaurants and service providers for the business and operational purposes described in this Policy. We do not provide one restaurant’s customer data to another restaurant for that restaurant’s marketing without explicit customer consent.

If information voluntarily provided in an order instruction is subject to a specialized state health-data or sensitive-data law, N4Cluster will process that information in accordance with applicable legal requirements. Additional notices or consents may apply where required.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Services, technology, legal requirements, or our information practices. We will post the updated version with a revised “Last Updated” date. If changes are material, we may provide additional notice as required by law or appropriate to the circumstances.

17. Contact Us

For questions, comments, or privacy requests, contact: