Privacy Policy

Last updated: June 9, 2026

Butterspud ("Butterspud," "we," "us," or "our") provides a software platform for restaurants and other businesses, including kiosk ordering, web ordering, QR table ordering, kitchen displays, and an owner management console (the "Service"), available at butterspud.com. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account information. When a business owner or team member creates an account we collect a name, email address, and password (stored as a salted hash, never in plain text).
Security information. If you enable two-factor authentication we store an authenticator secret or your mobile phone number, encrypted at rest, together with hashed one-time and recovery codes.
Business information. Restaurant or business details you provide: business name, locations, menus, prices, images, operating hours, and tax settings.
Order information. When guests place orders through a Butterspud-powered kiosk or website we process order contents, an optional guest name, and order status. Payment card details are processed by our payment processor (Stripe) and never touch Butterspud's servers.
Technical information. Standard logs (IP address, browser type, timestamps), session records for signed-in users (IP address and device description, shown to you in your security settings), and operational audit logs.

2. How We Use Information

To provide, operate, secure, and improve the Service.
To authenticate sign-ins, deliver two-factor authentication codes, and protect accounts.
To send transactional messages: account verification, password resets, order and service notifications.
To respond to support requests and investigate problems.
To comply with legal obligations.

3. Text Messages (SMS)

If you opt in to text-message two-factor authentication, we will send SMS messages containing one-time sign-in codes to the mobile number you provide. Message frequency varies with your sign-in activity (typically one message per sign-in or security action). Message and data rates may apply. Consent to receive these messages is not a condition of purchasing any goods or services.

You can stop receiving SMS at any time by disabling text-message authentication in your account security settings, or by replying STOP to any message. Reply HELP for help, or contact us at the address below.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except with our SMS delivery provider solely to the extent necessary to deliver the messages you requested.

4. How We Share Information

We do not sell personal information. We share information only with service providers that help us run the Service, under contracts limiting their use of it:

Stripe — payment processing for orders and subscriptions.
Telnyx — delivery of SMS authentication codes.
Hosting and infrastructure providers — to run our servers and store data securely.

We may also disclose information if required by law, to protect the rights and safety of Butterspud, our customers, or the public, or as part of a business transfer.

5. Cookies and Sessions

We use a session cookie to keep you signed in to the management console. We do not use third-party advertising cookies or cross-site tracking.

6. Security

We use industry-standard measures including encrypted transport (HTTPS), salted password hashing, encryption at rest for sensitive fields such as two-factor secrets and phone numbers, rate limiting, and audit logging. You can review and revoke your active sessions and manage two-factor authentication in your account security settings.

7. Data Retention

We retain account and business data while your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account data by contacting us.

8. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Contact us using the details below and we will respond as required by applicable law.

9. Children

The Service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version at this page and revise the "Last updated" date above.

11. Contact Us

Questions about this policy or your data: support@butterspud.com.