Turn operating history into decisions you can measure.
GRUBIQ · LEGAL

Privacy Policy

Effective Date: October 25, 2026

1. Who We Are and What This Policy Covers

TARIY, Inc. doing business as GrubIQ (“GrubIQ,” “we,” “us,” or “our”) provides technology for restaurant operations, including operational intelligence, voice-enabled assistance, shift execution workflows, and related demonstrations and services. This Privacy Policy describes how we handle personal information through www.grubiq.co, our applications, communications, and supported customer integrations (collectively, the “Services”).

GrubIQ may handle information in different roles. For information collected through our website, sales activities, and administration of our own business, we generally determine how that information is used. When processing restaurant data on behalf of a business customer, the customer generally determines the purposes and controls authorized access. The applicable customer agreement and any data processing agreement govern that customer-directed processing.

2. Categories and Sources of Information

The information we collect or process depends on how you interact with us, your organization's configuration, and the Services enabled. Categories may include:

  • Business contact and account information: names, work email addresses, telephone numbers, company, role, account identifiers, access permissions, and support correspondence.
  • Restaurant operational information: POS and order events, order timestamps, throughput and queue measures, scheduling and labor coverage, stations and workload, store-level performance, and other information made available by authorized customer integrations. Some source systems may incidentally contain personal information about staff or customers.
  • Voice, text, and AI interactions: questions, commands, transcriptions, responses, feedback, action history, and related technical information. Audio recordings may be processed or retained only where a feature, customer configuration, or support workflow requires them.
  • Optional camera-derived information: operational counts, events, frames, or limited visual evidence from specifically authorized integrations, where enabled. Availability, storage, access, and retention depend on the deployment and customer agreement. GrubIQ's operational design does not rely on facial recognition, biometric identification, or individual employee performance scoring.
  • Website and device information: IP address, approximate location inferred from network information, device and browser information, visited pages, referral source, cookie identifiers, usage events, security logs, and error diagnostics.
  • Sales and visitor-identification information: professional profile or company information, business contact details, and website-visit associations received from or matched by marketing and visitor-identification vendors, including RB2B.

We obtain information from you, your employer or organization, connected systems you or your organization authorize, devices and browsers, and service providers or professional data sources used for business outreach.

3. How We Use Information

  • Provide, secure, troubleshoot, support, and administer the Services and accounts.
  • Understand restaurant conditions, identify bottlenecks, prioritize next actions, support approved interventions, and evaluate outcomes, particularly for throughput and labor efficiency.
  • Process voice and text requests and produce AI-assisted responses and workflow records.
  • Operate customer-authorized integrations, track system health, prevent abuse, and maintain audit and diagnostic records.
  • Respond to inquiries, arrange demonstrations, communicate service changes, and conduct business-to-business outreach.
  • Analyze product performance and improve the Services using information permitted by customer agreements and applicable law, including appropriately aggregated or de-identified information.
  • Comply with law, enforce agreements, and protect the rights, safety, and security of users, customers, and GrubIQ.

4. Artificial Intelligence and Operational Data

GrubIQ may transmit relevant information to contracted infrastructure, speech, or AI service providers to deliver requested functionality. AI output may be incomplete or incorrect, and customer personnel remain responsible for operational decisions and approvals as described in our Terms and customer agreements.

We do not use identifiable customer operational data to train general-purpose models for other customers without the customer's documented authorization. Customer-specific processing, quality review, data retention, and permitted product improvement may be further limited by an enterprise agreement.

5. Disclosures and Recipients

We may disclose information to cloud hosting, application, security, analytics, speech and AI providers; customer-authorized POS, labor, or hardware integration providers; professional advisers; and parties involved in legal compliance, security response, or a corporate transaction. We require appropriate contractual and technical safeguards for service providers based on their function.

Authorized administrators of an enterprise customer's account may have access to account activity and operational records under the organization's permissions. GrubIQ does not sell restaurant operational Customer Data to advertisers or data brokers.

For website business development, we use RB2B and may disclose website or device activity to visitor-identification and professional data providers that associate site activity with contact or professional profile information. Depending on applicable law, some website marketing disclosures may qualify as a “sale” or “sharing” of personal information even when no money is exchanged. See Section 6 for choices.

6. Cookies, Visitor Identification, and Marketing Choices

Our site uses cookies or similar technologies for operation, measurement, security, and business-to-business visitor identification. Our RB2B integration may associate visits with professional identity or company records, including through cookies and other identifiers, to help us understand interest in GrubIQ and conduct relevant business outreach.

You can opt out of RB2B/Retention.com identification and related outreach at https://app.retention.com/optout. You may also send a privacy or opt-out request to legal@grubiq.co. Browser settings may allow you to block or delete cookies; doing so may affect some features. Where applicable law requires consent or recognition of a valid opt-out preference signal, those obligations apply to our use of optional tracking technologies.

Other sites, such as scheduling or booking providers linked from our website, have their own policies. This Privacy Policy does not govern those independent services.

7. Retention

We retain personal information for as long as reasonably needed for the purposes described here, taking account of the data type, customer settings and contracts, operational needs, security, legal obligations, and applicable deletion requests. Account and customer operational data follow the applicable agreement and retention settings; marketing contacts are kept while relevant to our business relationship or until a valid objection or deletion request applies; security logs and records may be kept as needed to investigate incidents or comply with law.

Deletion from active systems may not immediately remove information from backups or records that must be preserved for legitimate legal or security reasons. Specific retention periods may be provided in a customer agreement or upon an applicable rights request.

8. Security

We use safeguards appropriate to the information and Services, including encryption in transit and at rest, role-based access controls, authentication controls, and audit logging. GrubIQ has represented that it completed a SOC 2 Type II examination; that examination does not guarantee that any system is free of risk. No method of transmission or storage can be guaranteed completely secure.

9. Privacy Rights and Requests

Depending on where you live and which privacy laws apply, you may have rights to access, obtain a copy of, correct, delete, or restrict certain personal information; to object to certain processing; and to opt out of covered sales, sharing, or targeted advertising. Where applicable, you may use an authorized agent and will not be discriminated against for exercising statutory privacy rights.

Residents of the European Economic Area, United Kingdom, or other jurisdictions may have additional rights, including data portability, withdrawal of consent where processing relies on consent, and the ability to complain to a supervisory authority. Our legal bases, when applicable, may include fulfilling a contract, legitimate business interests, complying with legal obligations, and consent where required.

To exercise a right or ask how information is processed, contact legal@grubiq.co. We may need to verify a request as permitted by law. When GrubIQ handles information solely on behalf of an enterprise customer, we may direct the request to that customer or assist the customer in responding.

10. International Processing

GrubIQ and its providers may process information in the United States and other countries where they operate. Where international data-transfer rules apply, we use legally required mechanisms, which may include contractual safeguards. Specific processing locations and transfer arrangements for enterprise accounts may be addressed in a customer agreement.

11. Workplace and Customer Responsibilities

Enterprise customers are responsible for authorizing the integrations they enable and providing any legally required workforce, customer, or visitor notices and consents, including any required notices concerning audio or cameras. GrubIQ's operational analysis is intended to focus on restaurant conditions, roles, stations, and aggregate signals rather than identifying or rating individual employees.

12. Children's Privacy

The Services are designed for business use and not directed to children under 16. We do not knowingly seek to collect personal information directly from children through the Services. If you believe a child has provided personal information to us, contact legal@grubiq.co.

13. Changes to This Policy

We may update this Policy to reflect product, legal, or operational changes. We will post the revised version with a new effective date and provide additional notice when required by law.

14. Contact

TARIY, Inc. d/b/a GrubIQ, Phoenix, Arizona, United States. Privacy requests and questions: legal@grubiq.co.