1. Information We Collect

Ginger is a product of YSK Technologies LLC, an Indiana limited liability company ("YSK Technologies," "we," "us," or "our"). We collect different types of information depending on how you interact with Ginger:

Restaurant operators (merchants): When you sign up and use Ginger, we collect: restaurant name, address, and contact information; administrator and staff names and PIN codes (stored in bcrypt one-way encrypted form); menu data (item names, descriptions, prices, categories); transaction data (orders, payment amounts, tips); and device information and IP addresses.

Online ordering customers (end users): When customers place orders through your Ginger-powered ordering website, we collect: name and phone number; delivery address (if applicable); order contents; and payment information (processed by a third-party payment processor — see below).

AI phone ordering callers: When customers place orders through the AI phone ordering system, we collect: phone number (caller ID); name (verbally provided for pickup); and order contents. AI phone conversations are processed in real-time by a third-party AI service (Google Gemini). Ginger does not record or store call audio. However, the AI service provider may process conversation data according to its own data policies — see Google Gemini's Terms of Service for details.

2. How We Use Your Information

We use collected information to: provide and operate the POS system and related services; process orders and payment transactions; generate reports and analytics (available only to the restaurant operator); send service-related notifications (such as system updates or outages); provide customer support; improve our services and user experience; and comply with legal obligations. We do not use your information for advertising or marketing purposes unrelated to providing the Ginger service.

3. Information Sharing

We do not sell your personal information. We may share information with third parties in the following circumstances:

Payment processors: We share information necessary to complete payment transactions with Helcim or the restaurant's chosen payment processor. These processors have their own privacy policies, which we encourage you to review.

AI service providers: The AI phone ordering feature uses Google Gemini for real-time voice processing. Conversation data is transmitted to Google during processing. See Google's AI terms of service for their data handling practices.

Infrastructure providers: We use cloud infrastructure providers for database hosting, server-side functions, and website hosting. Your data is stored on servers located in the United States and protected by industry-standard security measures.

Legal requirements: We may disclose information if required by law or to protect our rights, safety, or property.

4. Data Security

We implement the following security measures: staff PIN codes are stored using bcrypt one-way encryption (we cannot view the original PINs); the database uses row-level security (RLS) policies to prevent cross-restaurant data access; all data in transit is encrypted via TLS; and payment information is processed by PCI-compliant third-party payment processors and is not stored on Ginger servers. While no system is 100% secure, we use industry-standard security practices to protect your data.

5. AI Phone Ordering Privacy

When customers place orders through the AI phone system: the AI answers calls as an automated voice ordering system; Ginger does not record call audio; conversations are processed in real-time by Google Gemini to understand and respond to customer requests; we store only the resulting order data (customer name, phone number, order contents), not the conversation transcript itself; and caller phone numbers are used for order confirmation text messages, not for marketing. Restaurant operators are responsible for compliance with local laws and regulations regarding automated phone systems and caller handling in their jurisdiction.

6. Cookies and Local Storage

The Ginger POS application uses browser local storage to save language preferences and session data. The online ordering website uses cookies to maintain shopping cart state. We do not use third-party tracking cookies for advertising.

7. Data Retention

Order and transaction data is retained for the duration of your active account to support reporting and analytics. If you cancel your account, we will delete your data within a reasonable timeframe (typically 90 days), unless we are legally required to retain it longer. Temporary session data from AI phone ordering expires automatically within 1 hour of order completion.

8. Your Rights

You have the right to: access the personal information we hold about you; correct inaccurate information; request deletion of your data (subject to legal retention requirements); and export your order and transaction data. To exercise these rights, contact us at info@gingerserve.com. We will respond within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, under the California Consumer Privacy Act (CCPA), you have the right to: know what personal information we collect about you and how it is used; request deletion of your personal information; and opt out of the sale of your personal information.

We do not sell personal information. To exercise these rights, contact info@gingerserve.com. We will respond within 45 days of receiving your request. Exercising your privacy rights will not result in discriminatory treatment or denial of service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email to registered users, and the "Last updated" date on this page will be revised.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, contact us at info@gingerserve.com.