Dietary restriction and allergen notes a customer provides may reveal information about health or religious observance. That information is entered by the merchant, stored on the merchant’s device and Clover account, and used solely to fulfill the order. Blanket POS does not have access to it.

​

4. How We Use Information

We use the limited information we hold to:

• create and administer merchant accounts and the CaterSync subscription;

• respond to support requests and resolve technical issues;

• diagnose errors, improve stability, and develop the application;

• communicate service notices, security alerts, and changes to terms;

• comply with law and enforce our agreements.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use any information from CaterSync to build advertising profiles or to train artificial intelligence models.

​

5. Payment Information

CaterSync does not store, process, or transmit payment card numbers, card verification values, magnetic stripe data, or PIN data. Blanket POS never has access to cardholder data.

​

All payment processing in CaterSync — card present, keyed, deposits, balances, and refunds — is performed by Clover’s payment SDK and APIs and settled through the Clover / Fiserv backend. Card data is captured by Clover-certified hardware and software and encrypted outside of the application.

​

Where a merchant saves a payment method to charge a balance due on a future catering order, what is retained is a Clover-issued payment token, not a card number. The token is meaningless outside the merchant’s own Clover account and cannot be used to reconstruct card details.

​

Because CaterSync does not handle cardholder data, it is not a payment application. Each merchant remains responsible for its own PCI DSS obligations with respect to its Clover environment and business operations.

​

6. Data Sharing and Disclosure

We share information only as follows:

Clover Network, LLC and Fiserv, Inc. CaterSync operates on the Clover platform and exchanges data with Clover in order to function. Clover’s handling of that data is governed by Clover’s own privacy notices and your agreements with Clover.

​

Service providers. We use a small number of vendors under written contract, limited to email communications and business administration. They may process merchant contact information on our behalf and may not use it for any other purpose.

​

Legal requirements. We may disclose information where we believe in good faith it is necessary to comply with law, subpoena, court order, or governmental request; to enforce our agreements; to investigate fraud or a security incident; or to protect the rights, property, or safety of any person. Where legally permitted, we will notify the affected merchant first.

​

Corporate transactions. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to the acquirer honoring this Policy or giving notice before materially changing it.

We do not sell personal information to any third party, and we have not done so in the preceding twelve months.

​

7. Data Retention and Deletion

Catering order and customer data. Retained on the merchant’s Clover device and in the merchant’s Clover account under the merchant’s control. Blanket POS holds none of it and therefore neither retains nor deletes it. A merchant may delete this data on its device or through its Clover account. Uninstalling CaterSync removes the application and its local database from the device. Data written to Clover’s systems is retained under Clover’s policies.

​

Merchant account and subscription records. Retained for seven years following termination, to meet tax, accounting, and audit obligations.

​

Support communications. Retained for twenty-four months.

​

Diagnostic information submitted with support requests. Retained for twelve months.

A merchant may request earlier deletion of the records we hold by contacting us. We will honor the request except where retention is required by law or necessary to establish, exercise, or defend a legal claim.

​

8. Security

CaterSync operates entirely within the Clover environment. The application runs on Clover-manufactured hardware, is distributed through the Clover App Market, stores data in a local database on the merchant’s own Clover device, and communicates only with Clover’s APIs. The security of the application environment, the device, the transmission of data to Clover, and the processing of payments is provided by Clover and the Clover platform. Blanket POS does not operate servers, data centers, or storage infrastructure for CaterSync, and does not add to, override, or diminish Clover’s platform controls. Clover’s security practices are described in Clover’s own documentation and in your agreements with Clover and your payment processor.

​

Merchant responsibilities. Because catering order data resides on the merchant’s Clover device and within the merchant’s Clover account, the security of that data depends substantially on the merchant’s own practices — device passcodes, employee access permissions and roles, prompt removal of access for departing staff, keeping the device’s software current, and the physical security of the device itself. Merchants are responsible for these controls.

​

Information held by Blanket POS. For the limited information we hold — support and onboarding communications, subscription records, and any diagnostic information you send us — we take measures we consider reasonable and appropriate to the sensitivity of that information, including restricting access to personnel who need it. This information does not include cardholder data, catering order records, or your customers’ personal information.

​

Incidents. We will notify affected merchants without undue delay of any security incident involving information we hold, and within the timeframes required by applicable law. Incidents involving the Clover platform are handled by Clover under its own procedures and agreements.

​

No method of transmission or storage is completely secure, and neither we nor any provider can guarantee absolute security.

​

9. Your Rights

If you are a catering customer. Contact the business you ordered from. That business holds your information and controls it. We do not have access to it and cannot retrieve, correct, or delete it on your behalf. If you contact us, we will direct you to the merchant.

If you are a merchant or merchant employee. You may request access to, correction of, or deletion of the information we hold about you by contacting us at the address in Section 15.

​

10. State Privacy Rights

Residents of California, Colorado, Connecticut, Virginia, Texas, Utah, Oregon, Montana, and other states with comprehensive consumer privacy laws may have the right to:

​

• know what personal information we have collected, the sources, the purposes, and the categories of recipients;

• access and obtain a portable copy of that information;

• correct inaccurate information;

• delete information, subject to legal exceptions;

• opt out of sale, of sharing for cross-context behavioral advertising, and of profiling with legal or similarly significant effects — we engage in none of these;

• limit the use of sensitive personal information — we do not collect sensitive personal information;

• not be discriminated against for exercising these rights.

• ​

Categories collected and disclosed — California disclosure