Last Updated: May 2026

1. INTRODUCTION

MizPiz Inc. and its affiliates and subsidiaries (“Mealsy”, “Company”, “we”, “us”, or “our”) provide a restaurant management and commerce platform, including point-of-sale (POS) systems, kiosks, online ordering services, mobile applications, websites, and related tools (collectively, the “Platform”).

We respect your privacy and are committed to protecting your personal information in accordance with applicable privacy laws, including PIPEDA.

This Privacy Policy describes how we collect, use, disclose, and safeguard personal information:

• of restaurant operators and business users who use our Platform; and
• of customers who interact with restaurants through our Platform.

This policy applies to information collected through the Platform and through email, text, and other communications between you and Mealsy.

The Platform may include links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their policies.

By accessing or using the Platform, you acknowledge that you understand and agree to this Privacy Policy. We may update this policy from time to time, and continued use of the Platform constitutes acceptance of any updates.

2. SCOPE AND ROLE OF MEALSY

Mealsy provides technology services to restaurants and food service businesses.

Depending on the context, Mealsy may act as:

• A data processor (service provider) on behalf of restaurants that use our Platform; or
• A data controller for information we collect directly (e.g., website inquiries, demos, support interactions).

Where Mealsy processes personal information on behalf of a restaurant:

• The restaurant determines the purpose and means of processing;
• Mealsy processes such information only in accordance with the restaurant’s instructions and applicable law.

3. INFORMATION WE COLLECT

We collect several types of information, including:

a) Customer Transaction Data

• Order details (items, pricing, modifiers)
• Delivery or pickup information
• Customer name, email address, and phone number

b) Loyalty and Engagement Data

• Rewards participation
• Marketing preferences
• Feedback and survey responses

c) Business User Information

• Restaurant account details
• Staff login credentials
• Business contact information

d) Payment Information

Payments are processed through third-party providers such as Moneris.

Mealsy does not store full payment card numbers. Payment data is processed and secured by the payment provider in accordance with applicable standards.

e) Technical and Usage Information

• IP address, browser type, and device information
• Platform usage data and logs
• Interaction data (pages visited, features used, timestamps)

f) Aggregated and De-Identified Data

We may derive anonymized or aggregated data that does not identify individuals and use it for analytics, reporting, and business purposes.

4. HOW WE COLLECT INFORMATION

We collect information through:

a) Direct Interactions

• Orders placed through the Platform
• Forms, demos, and inquiries
• Customer support interactions

b) Automated Technologies

We may use technologies such as:

• Cookies (browser cookies)
• Web beacons and pixel tags
• Log files and system analytics

These technologies help us improve performance and user experience.

c) Third-Party Integrations

We may receive information from:

• Payment processors
• Delivery platforms
• Integration partners and service providers

We do not control how third parties collect or use your information and recommend reviewing their policies.

5. COOKIES AND TRACKING TECHNOLOGIES

Cookies are small files placed on your device to help improve functionality and user experience.

You may configure your browser to refuse cookies. However, doing so may affect certain features of the Platform.

Some Platform components (such as POS systems and kiosks) do not rely on browser-based tracking technologies.

6. HOW WE USE INFORMATION

We use personal information to:

• Operate and deliver Platform functionality (orders, POS, reporting, integrations)
• Provide customer support and respond to inquiries
• Improve our services, features, and user experience
• Communicate updates, service notices, and promotional content (where permitted by law)
• Fulfill contractual obligations and enforce agreements
• Comply with legal and regulatory requirements

We may also use information to display relevant content or services, provided we do not disclose personal information without consent.

7. DISCLOSURE OF INFORMATION

We may disclose personal information:

a) To Service Providers

Including:

• Payment processors such as Moneris
• Cloud infrastructure providers
• Analytics and support providers

These parties are contractually obligated to protect personal information.

b) To Restaurants (Clients)

Where Mealsy processes data on behalf of a restaurant, such information is shared with that restaurant.

c) For Legal Reasons

We may disclose information:

• To comply with laws, regulations, or legal processes
• To enforce agreements or protect rights and safety

d) Business Transactions

In connection with a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction.

e) With Consent

Where you have explicitly provided consent

8. CHOICES AND CONSENT

You may:

• Opt out of receiving promotional communications by using the unsubscribe link in emails
• Adjust cookie settings through your browser
• Withdraw consent where applicable by contacting us

Please note that withdrawing consent may limit our ability to provide certain services.

9. DATA SECURITY

We use reasonable and appropriate safeguards, including:

• Encryption of data in transit (HTTPS)
• Secure cloud infrastructure
• Access control and authentication mechanisms
• Monitoring and logging of systems

However, no system is completely secure. Transmission of data over the internet is at your own risk.

10. DATA RETENTION

We retain personal information only as long as necessary to:

• Provide services
• Meet legal, tax, and accounting obligations
• Resolve disputes and enforce agreements

We may anonymize data and use it for legitimate business purposes without further notice.

11. CROSS-BORDER DATA TRANSFERS

Personal information may be stored or processed in jurisdictions outside your location, including Canada and the United States.

These jurisdictions may have different data protection laws. By using the Platform, you consent to such transfers where permitted by law.

12. CHILDREN’S PRIVACY

The Platform is not intended for individuals under the age of 13. We do not knowingly collect personal information from children.

If such information is identified, we will take steps to delete it.

13. ACCESS AND CORRECTION

You may request access to or correction of your personal information.

We may require verification of identity before fulfilling such requests and may refuse requests where permitted by law.

If Mealsy processes your data on behalf of a restaurant, you may need to contact that restaurant directly.

14. WITHDRAWING CONSENT

Where you have provided consent, you may withdraw it by contacting us.

Withdrawal may impact our ability to provide certain services, and we will inform you of any consequences.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

16. CONTACT INFORMATION

For questions or concerns regarding this Privacy Policy:

Privacy Officer
MizPiz Inc. (Mealsy)
Email: info at mealsy.ca
Phone: 1(800)746-0946

We have procedures in place to receive and respond to complaints regarding our handling of personal information.