Privacy Policy

Last updated: 21 October 2026

MealBeep is restaurant software: a point-of-sale (POS) system, kitchen screen, online ordering website, driver app, dashboard and marketing tools. It is provided by Mealbeep LLC, a limited liability company registered in the United States (“MealBeep”, “we”, “us”). This policy explains what personal information we handle, why, who we share it with, and the choices you have. It applies to restaurants that use MealBeep, their staff, and the customers who order from restaurants using MealBeep.

Questions or requests: email info@mealbeep.com. To delete your information, see How to delete your data.

1. Who is responsible for your data
2. What we collect
3. How we use it
4. Facebook & Instagram
5. Text messages (SMS)
6. Cookies and ad tracking
7. Who we share it with
8. Where your data is kept
9. How long we keep it
10. Security
11. Your rights
12. How to delete your data
13. Children
14. Changes and contact

1. Who is responsible for your data

• Restaurants and their staff (MealBeep's customers): MealBeep decides how your account information is used, so we are responsible for it.
• People who order from a restaurant: the restaurant decides what it does with your order and contact details; MealBeep processes that information on the restaurant's behalf to run its ordering, kitchen, delivery and marketing tools. For questions about a specific order or offers, you can contact the restaurant, or us.

2. What we collect

From restaurants and their staff

• Account details: name, email address, phone number, login information, role (owner, manager, cashier, driver).
• Business details: restaurant name, address, business and tax numbers, opening hours, menu, prices and photos.
• Payment set-up: restaurants get paid through Stripe. Stripe collects bank and identity details directly; MealBeep does not store card or bank account numbers.
• Information you enter for marketing: text-message offers, post designs, captions, logos, and the ad tracking IDs you choose to add.
• Usage and device information: which devices are connected to your shop, log-in times, and error reports, so the software works and stays secure.

From customers who order

• Order details: items, notes, pickup or delivery time, table number, amounts, tips and vouchers.
• Contact details: name and mobile number, and a delivery address for deliveries.
• Table bookings: name, mobile number, party size and time.
• Marketing choices: whether you ticked “Text me offers”, when, and on which order; your birthday (day and month only, never the year) if you chose to share it; and if you opted out.
• Reviews or feedback you send to a restaurant.
• Website visit information: which link or ad brought you to a restaurant's ordering page, recorded with a random number made by your browser — not your name, phone number or email.

Card payments on restaurant websites are handled by Stripe. MealBeep never sees or stores full card numbers.

From drivers

• While a driver is out on a delivery in the Driver app, their location is used to show the delivery on a map and give customers an estimated arrival time.

3. How we use it

• To provide MealBeep: take and send orders to the kitchen, process payments, print receipts and dockets, manage bookings, deliveries, staff and reports.
• To send messages people asked for or expect: order updates, log-in codes, booking confirmations and receipts.
• To send marketing texts only to customers who agreed to receive them from that restaurant (see section 5).
• To post to a restaurant's own Facebook Page and Instagram account when the restaurant asks us to (see section 4).
• To show restaurants how their marketing performs (visits, clicks, orders and sales from each link).
• To read a restaurant's menu from a photo or file when the restaurant uploads one (we use an AI service for this; the menu is not used to train it).
• To bill restaurants, provide support, keep the service secure, prevent fraud, and meet legal obligations.

We do not sell personal information, and we do not use customers' information to advertise our own products to them.

4. Facebook & Instagram

A restaurant can choose to connect its Facebook Page and the Instagram business account linked to it, using Facebook's own log-in window. When it does:

• We receive the restaurant Page's name and ID, the linked Instagram account's username and ID, and an access key that lets MealBeep publish to that Page and Instagram account. Facebook may also share the connecting person's name and profile picture.
• We use this only to publish the posts and stories the restaurant creates or schedules in MealBeep, and to show the restaurant whether each post went out.
• The access key is stored on our servers only, never in the apps, and is never shared or sold.
• We do not read private messages, follow, like or comment on anything, or collect information about the restaurant's followers.
• Pictures for posts are saved at a web address Facebook and Instagram can fetch them from.

The restaurant can disconnect at any time in Dashboard › Marketing › Social posts › Disconnect, which deletes the access key straight away and cancels scheduled posts. Access can also be removed in Facebook under Settings › Business integrations. Our use of information received from Meta follows the Meta Platform Terms.

5. Text messages (SMS)

• Marketing texts go only to people who ticked “Text me offers” at a restaurant's checkout, or whose agreement the restaurant confirms it has. We keep a record of when and how each person agreed.
• Every marketing text names the restaurant and includes an opt-out link. Replying STOP also works. Once you opt out, you won't get that restaurant's marketing texts again.
• We limit how often anyone can be texted (at most one marketing text a week per person) and only send between 9 am and 8 pm local time.
• Your number is never sold or given to other businesses for their marketing.

6. Cookies and ad tracking

• MealBeep's apps use your browser's storage to keep you signed in and remember settings and the order in your cart.
• A restaurant may add its own advertising tools (Meta Pixel, Google Analytics, Google Ads, TikTok Pixel) to its ordering website. By default customers are asked first; nothing loads unless they tap “OK”. These tools receive page visits, items added to the cart, checkout and order value — never names, phone numbers, emails or addresses from MealBeep. Their use of data is covered by those companies' own privacy policies, and the restaurant is responsible for using them lawfully.

7. Who we share it with

We share personal information only with the restaurant you're dealing with and with service providers that help us run MealBeep, under contracts that protect it:

Provider	What for
Supabase	Database, file storage, log-ins and server functions
Cloudflare	Hosting the apps and websites
Stripe	Card payments, restaurant payouts and subscriptions
Twilio	Text messages and log-in codes
Resend	Emails (log-in codes, receipts, notices)
Google Maps	Addresses, delivery areas and driver maps
Anthropic	Reading menus from uploaded photos or files
Meta (Facebook, Instagram)	Publishing a restaurant's posts, only when it connects its accounts
Delivery partners	Pickup and drop-off details, when a restaurant uses an outside delivery service

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of our business (in which case this policy will continue to apply).

8. Where your data is kept

MealBeep serves restaurants in Australia, New Zealand, the United States and the United Kingdom. Our service providers may store or process information in countries other than yours, including the United States and other countries where they operate. We take reasonable steps to make sure your information stays protected wherever it is handled, including contractual protections with our providers.

9. How long we keep it

• Restaurant account and sales records are kept while the restaurant uses MealBeep, and afterwards for as long as needed for tax, accounting and legal purposes.
• Customer contact details for marketing are kept until the person opts out or the restaurant removes them; the record of an opt-out is kept so they are never texted again.
• Facebook and Instagram access keys are deleted as soon as the restaurant disconnects.
• Log-in codes and short-lived connection codes expire within minutes or hours.

10. Security

Information is sent over encrypted connections. Access is limited by role (for example, cashiers can't see marketing lists), secret keys are kept only on our servers, and card details are handled only by Stripe. No system is perfectly secure, but we work to protect your information and will tell affected people and authorities about a serious breach where the law requires.

11. Your rights

Depending on where you live (for example under Australia's Privacy Act, New Zealand's Privacy Act, the UK GDPR, or US state privacy laws such as California's), you may have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct it;
• ask us to delete it;
• object to or limit certain uses, and withdraw consent to marketing at any time;
• complain to your local privacy regulator (for example the Office of the Australian Information Commissioner, the NZ Privacy Commissioner, or the UK Information Commissioner's Office).

Email info@mealbeep.com to make a request. We may need to confirm your identity first, and we'll reply within 30 days. If your request is about a restaurant's records of your orders, we may pass it to that restaurant and help them respond.

12. How to delete your data

Customers

• To stop marketing texts: tap the opt-out link in any text, or reply STOP.
• To delete your details: email info@mealbeep.com with the subject “Delete my data”, your mobile number and the restaurant's name. We'll delete your contact details and marketing record (keeping only what the law requires, such as order records for tax) and confirm by email.

Restaurants

• To disconnect Facebook and Instagram: Dashboard › Marketing › Social posts › Disconnect. Your Page access key is deleted immediately.
• You can also remove MealBeep in Facebook: Settings & privacy › Settings › Business integrations › MealBeep › Remove.
• To close your MealBeep account and delete its data: email info@mealbeep.com from the owner's email address with the subject “Delete my account”.

People who connected through Facebook

If you connected Facebook or Instagram to MealBeep and want all information we received from Facebook deleted, remove MealBeep under Facebook › Settings › Business integrations, and email info@mealbeep.com with the subject “Delete my Facebook data”. We'll delete it and confirm by email.

13. Children

MealBeep is a business tool for restaurants and is not meant for children. We don't knowingly collect personal information from children under 16. If you think a child has given us their information, contact us and we'll delete it.

14. Changes and contact

We may update this policy as MealBeep changes or laws change. We'll update the date at the top, and tell restaurants about important changes in the Dashboard or by email.

Mealbeep LLC
Email: info@mealbeep.com
Website: mealbeep.com