Effective: March 2026
Chowbus, Inc. ("Chowbus," "we," "us" or "our") respects your privacy. This Privacy Policy (this "Policy") explains how we collect, use, disclose, and otherwise process personal information in connection with the following products and services operated by Chowbus in the United States:
This Policy applies only to our collection and processing of personal information in connection with the Restaurant Branded Apps, Loyalty Programs, Gift Card Programs, and the Website (collectively, the "Services"). Chowbus and its Restaurant Clients currently operate and process personal information only in the United States.
This Policy is incorporated into and subject to the Chowbus Terms of Use. By accessing or using the Services, you agree to our collection, use, and disclosure of your personal information as described in this Policy and in accordance with our Terms of Use. If you do not agree with this Policy and/or Terms of Use, please do not use the Services.
Personal Information means any information that identifies, relates to, describes, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, consumer or household.
Scope and Users
This Policy is intended to explain our privacy practices with respect to the following categories of users:
Relationship of the Parties and Data Ownership
Restaurant Clients as Owners of End Customer Data
For the Restaurant Branded Apps, Loyalty Programs, and Gift Card Programs, Restaurant Clients are the owners of the personal information of their End Customers collected through these Services. They solely determine the purposes and means of processing that End Customer personal information, subject to applicable law and their own privacy notices and processes.
Chowbus as Service Provider / Processor
With respect to End Customer personal information processed in connection with the Restaurant Branded Apps, Loyalty Programs, and Gift Card Programs, Chowbus acts as a "service provider" or "processor" to Restaurant Clients under applicable US state privacy laws. This means that Chowbus processes end customer personal information only:
Please note that Chowbus does not sell, share, or otherwise use End Customers' personal information for its own independent marketing or other purposes unrelated to providing the Services to Restaurant Clients. Any use of End Customers' personal information by Chowbus is on behalf of, and subject to the instructions of, the relevant Restaurant Client and our written agreement with that Restaurant Client, except where otherwise required or permitted by law.
Chowbus as a Business / Controller
In some contexts, Chowbus acts as an independent "business" or "controller" under applicable US state privacy laws, including when we process personal information:
When Chowbus acts as a business/controller, we determine the purposes and means of processing the personal information and are directly responsible for compliance with applicable privacy laws with respect to that processing. The sections of this Policy that describe consumer privacy rights, including rights under the California Consumer Privacy Act (CCPA/CPRA) and other similar US state laws, apply to the extent Chowbus is acting as a business/controller.
Personal Information We Collect
The personal information we collect depends on how you interact with the Services and whether you are a Restaurant Client, an End Customer, or a Website Visitor. We may collect the following categories of personal information:
Contact and Account Information
Transaction and Payment Information
Identifiers and Online Activity (collected automatically)
Location Information
You may disable collection of precise location information through your device or browser settings, but doing so may affect certain features of the Services.
Demographic and Preference Information
Communications and Support Information
Business Relationship Information (Restaurant Clients)
Job Applicants
We collect the following categories of personal information regarding job applicants:
We use and disclose the personal information to process, evaluate and communicate with job applicants about their application and qualifications for the position applied for, to check your references and to communicate with you about other jobs for which you may be qualified.
How We Collect Personal Information
We collect personal information in a variety of ways, including:
How We Use Personal Information
We use personal information for the following purposes and in reliance on one or more of the following bases: to provide and operate the Services, to perform our contracts, to comply with legal obligations, and for other legitimate business purposes consistent with applicable law.
Providing the Services to Restaurant Clients and End Customers
We use personal information to:
Operating and Improving the Website and Platform
We use personal information to:
Communications
Security, Fraud Prevention, and Legal Compliance
We use personal information to:
Other Purposes with Your Consent or as Permitted by Law
We may use personal information for other purposes not included in this Policy that we describe at the time of collection or with your consent, or as otherwise permitted by applicable law.
How We Share Personal Information
We do not sell (to third parties such as data brokers) or share (for cross-context behavioral advertising purposes) personal information that we process as a service provider/processor for Restaurant Clients. We share personal information only as described in this Policy, with:
Restaurant Clients
Service Providers and Vendors
Business Partners and Integrations
Corporate Transactions
Legal Requirements and Protection of Rights
With Your Consent or at Your Direction
Cookies and Similar Tracking Technologies
A “cookie” is a small text file stored in your browser when you visit a Restaurant Branded app or the Website and, in some cases, the websites of our business partners, service providers or other third parties. We and our service providers use cookies, pixel tags, software development kits (SDKs), and similar tracking technologies (collectively, “Cookies”) to operate the Restaurant Branded Apps and the Website, understand usage patterns, and improve the Services. We use session cookies (stored only during a single visit) and persistent cookies (stored beyond a single visit) to provide our Services and for the purposes described in this Statement. Cookies may be set by us (first-party cookies) or by third parties acting on our behalf (third-party cookies), such as Google Analytics.
We may deploy Cookies on the Restaurant Branded Apps and/or the Website for the following purposes:
You may be able to manage Cookies through your browser or device settings. However, if you disable certain Cookies, some features of the Services may not function properly. For more information about Cookies and your choices, see allaboutcookies.org. You also may refer to the “Your Privacy Rights and Choices” section below and any cookie-specific notices we may provide. Where required by law, we will obtain your consent before placing non-essential Cookies.
In addition, we may use web beacons, pixel tags, and similar technologies on the Restaurant Branded Apps and Website and in emails to determine whether a page has been viewed or an email has been opened. These tools help us understand which pages and features are most popular, which emails are effective, and how to make the Services and our communications more user-friendly.
Note: We do not use your personal information to serve you with targeted online ads (also called cross-context behavioral advertising), whether on the Website or when you visit third-party websites.
Analytics
We use analytics services, including Google Analytics, to collect information about your use of the Platform. Google Analytics uses cookies to collect information such as how often you visit the Platform, what pages you visit, and what other sites you used prior to visiting.
You may find additional information about how Google Analytics collects and processes data at Google’s Privacy & Terms. You may opt out of Google Analytics by installing the browser add-on available at Google Analytics Opt-Out.
Do Not Track
Some browsers offer a “Do Not Track” (“DNT”) feature. Because there is no widely accepted standard for how to interpret DNT signals, neither the Restaurant Branded Apps nor Website currently responds to DNT signals. We will update this policy if a uniform standard is established.
Data Retention
We retain personal information for as long as reasonably necessary to achieve the purposes described in this Policy or as otherwise required or permitted by law, including for the purposes of satisfying any legal, regulatory, accounting, or reporting obligations, resolving disputes, enforcing our agreements and our legitimate business purposes (including maintaining backup copies for data integrity and disaster recovery).
Where we act as a service provider or processor to Restaurant Clients, we retain End Customers’ personal information for the period specified in our agreements with the relevant Restaurant Clients and in accordance with their instructions, subject to our own legal obligations and applicable law.
Information Security
We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit, access controls, and regular security assessments.
BE ADVISED THAT NO DATA TRANSMISSION OVER THE INTERNET OR ANY WIRELESS NETWORK CAN BE GUARANTEED TO BE 100% SECURE. WHILE WE STRIVE TO PROTECT YOUR PERSONAL INFORMATION USING COMMERCIALLY AVAILABLE AND INDUSTRY-STANDARD SECURITY MEASURES, WE CANNOT ENSURE OR GUARANTEE THE SECURITY OF ANY INFORMATION YOU TRANSMIT TO US, AND YOU DO SO AT YOUR OWN RISK.
If we determine that your personal information has been or may reasonably have been compromised due to a security breach of our systems, we will notify you in accordance with and to the extent required by applicable law using the contact information we have on file.
Electronic Records
We maintain backup files as protection against natural disasters, equipment failures or other disruptions. Backup files may contain records with your personal information. Removing a record from our active files and databases does not remove that record from backup systems. Backup data will be passively deleted as backup records are recycled through our normal business processes. As long as backup records exist, they receive the same security protections as our active records.
Children’s Privacy
The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn that we have collected personal information from a child under 13 without such consent, we will take reasonable steps to delete it. If you believe that we may have collected personal information from a child under 13, please contact us using the information in the “Contact Us” section below.
Located in the United States.
We control and operate the Services and supporting infrastructure in the United States. Although we do not actively block or monitor visitors from other countries, the online and mobile resources are directed only at visitors from the United States who are age 13 or older. If you are located outside the United States when accessing and using the Services, be aware that your personal information may be transferred to, stored, and processed by us and/or our third-party cloud providers in the United States. Further, you fully understand and unambiguously consent to this transfer, processing and storage of your personal information in the United States, which privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen. Note also that your personal information may be available to the U.S. government or U.S. law enforcement under appropriate legal processes in the United States.
US State Privacy Notices (Including California)
Certain US state privacy laws, including the California Consumer Privacy Act (as amended by the California Privacy Rights Act) (collectively, the “CCPA”), as well as similar consumer privacy laws in other US states, provide residents of those states with specific rights regarding their personal information. This section describes those rights and how to exercise them, to the extent these laws apply.
Important: For End Customers, Chowbus often acts as a “service provider” or “processor” on behalf of Restaurant Clients, who are typically the “businesses” or “controllers” under these laws. In such cases, we will generally direct End Customers to submit requests directly to the applicable Restaurant Client, and we will support our Restaurant Clients in responding to those requests as required by law and by our agreements with them.
Categories of Personal Information We Collect (CCPA/Similar Laws)
In the preceding 12 months, we may have collected the following categories of personal information (as defined by the CCPA and similar laws) in connection with the Services:
Purposes for Collection and Disclosure
We collect and disclose the categories of personal information listed above for the business and commercial purposes described in the “How We Use Personal Information” and “How We Disclose Personal Information” sections of this Policy.
Disclosures for Business Purposes
In the preceding 12 months, we may have disclosed the categories of personal information listed above for “business purposes” (as such term is defined under the CCPA and similar laws) to the following categories of recipients:
Sales and Sharing of Personal Information
We do not “sell” (to third parties such as data brokers) or “share” (for purposes of cross-context behavioral advertising) End Customers’ personal information that we process solely as a service provider or processor to Restaurant Clients. Accordingly, we have not implemented Global Privacy Controls or other browser-based opt-out signals.
Other California Notices
Pursuant to California’s “Shine The Light law (California Statute § 1798.983), California residents are entitled to request, once a year and free of charge, certain information regarding what types of their personal information may be shared with third parties and, in some cases, affiliates, for those third parties’ and affiliates’ own direct marketing purposes. Under the law, a business is to either provide California customers certain information upon request or permit California customers to opt out of this type of sharing. Note, however, that we do not sell, rent, lease or otherwise make available personal information to third parties for their marketing purposes, unless giving you a choice before disclosing your personal information to third parties for this purpose. For questions, please contact us via email at: privacy@chowbus.com.
For California residents under the age of 18 and registered users of a Restaurant Branded App or our Website, California law (Business and Professionals Code § 22581) provides that you can request the removal of content or information you posted on a Restaurant Branded App or Website. Any such request should be sent to us at: privacy@chowbus.com along with a description of the posted content or other information to be removed. Be advised, however, that applicable law may not permit us to completely or comprehensively remove your deleted content or for other reasons as set forth in this California law.
Note: Chowbus does not control and is not responsible for Restaurant Clients’ use of End Customer personal information for their or third-party marketing efforts.
Your Privacy Rights and Your Choices
Your Privacy Rights.
Subject to applicable law, residents of certain US states (including California) may have the following rights regarding their personal information:
To submit a request, contact us at: privacy@chowbus.com. We may ask to verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.
Account Information
Where you have an account for a Restaurant Branded App, Loyalty Program, or Gift Card Program, you may be able to update certain account information directly through that account. End Customers may also contact the relevant Restaurant Client or Chowbus to request updates or corrections, subject to our roles and obligations under applicable law.
Marketing Communications
You may opt out of receiving marketing emails from Chowbus by following the unsubscribe instructions included in those emails or by contacting us. Please note that even if you opt out of marketing emails, we may still send you non-promotional communications, such as transactional or service-related messages.
End Customers who wish to opt out of marketing communications from Restaurant Clients should follow the instructions provided in those communications or contact the Restaurant Client directly. Note: Chowbus does not control and is not responsible for Restaurant Clients’ use of End Customer personal information for their or third-party marketing efforts.
Cookies and Online Tracking
You may be able to set your browser to refuse cookies or to alert you when cookies are being sent. You may also use industry tools and device settings to limit certain advertising or analytics cookies and similar technologies. Please refer to your browser or device documentation for more information. Also see allaboutcookies.org for further information.
Updating or Amending Your Information
You may update your information through your account settings in a Restaurant Branded App or by contacting the relevant Restaurant Client or us at: privacy@chowbus.com.
Third-Party Websites
This Policy only applies to information collected when visiting our Websites or otherwise using our Services. While visiting our Website or using the Services, you may be directed through links to third-party websites or services that are not operated or controlled by us. We are not responsible for the privacy practices and policies of these third parties. As a result, we encourage you to review the privacy policies of these third-party websites as their practices may differ from ours.
Updates to This Policy
We may update this Policy periodically. If we make material changes, we or the Restaurant Clients will notify you through the Restaurant Branded App or by other reasonable means (such as email to the address associated with your account). The updated Policy will be posted on the Restaurant Branded Apps and the Website with a revised “Last Updated” date. Information collected before changes are made will be treated in accordance with the Policy in effect at the time of collection. Your continued use of the Restaurant Branded App or the Website after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.
Questions or Comments
For questions or concerns, contact us at privacy@chowbus.com or by mail:
224 S Michigan Ave, Suite 400
Chicago, IL 60604
Attn: Data Privacy
