Privacy policy
Draft for legal review. Not yet published or binding.
PlateLedger is a product operated by Gray-Works Technologies & Solutions LLC ("PlateLedger", "we", "us"). This policy explains what we collect through the app, how we use it, and who we share it with. Questions: sales@plateledger.pro.
Account data
We collect what you give us to run an account: your name, email, restaurant name, and password (stored hashed, never in plain text). Organization owners can invite team members, each with their own login and role.
POS data
Connecting Square or Clover grants PlateLedger read-only access to your menu, orders and locations through each POS's own OAuth flow. We never write anything back to your POS. Access tokens are encrypted at rest and can be revoked at any time, either from Settings → POS connections in the app or directly in your Square or Clover account.
If your POS isn't one we connect to directly, you can upload a CSV export of your sales instead. That file is handled the same way as any other account data described in this policy.
Payments
Subscription billing runs through Stripe. We never see or store your card number — Stripe collects and holds payment details directly, and PlateLedger only receives a payment token and billing status back.
Password resets, alerts, digests and purchase orders are sent through SendGrid. Your email address and the content of those messages pass through SendGrid to be delivered; SendGrid does not use them for its own purposes on our behalf.
Cookies
PlateLedger uses two cookies: a session cookie that keeps you signed in, and a CSRF token that protects form submissions. Neither is used for advertising or tracking. We do not run third-party analytics or ad trackers inside the app.
Data retention and export
Your data stays in your account for as long as it's open. Inside the app, every report exports to CSV, and an organization owner can generate API keys to pull data programmatically. If you close your account, contact us for a full export or deletion; we'll confirm what we keep for legal, security or backup purposes and for how long.
Subprocessors
We share data with a small set of subprocessors to run PlateLedger:
- Contabo — application hosting
- SendGrid — transactional email
- Stripe — payment processing
- Square — POS data, for organizations that connect a Square account
- Clover — POS data, for organizations that connect a Clover account
Changes to this policy
We'll post updates here and note the effective date. We'll email account owners about material changes.