Privacy Policy

Last updated: September 21, 2026

This policy describes how personal information is handled in RP Portal, an internal operations application. The organization that provides your account (the “Organization”) administers your access and the business records processed through the application. This policy covers RP Portal; other applications and external services may have separate notices.

Information processed

• Account information: names, email addresses, account identifiers, assigned roles and permissions, and information used to authenticate and secure your account.
• Business records: information you enter or access in enabled workflows, which may include employee and shift records, tip and closeout information, customer contact details and addresses, orders, reservations, payment references, reports, notes, and uploaded files or photos.
• Operational information: request and error logs, network and browser information, timestamps, and activity associated with application use, troubleshooting, and security.
• Connected-service information: records received from identity, point-of-sale, payment, accounting, and other integrations enabled by the Organization.

How information is used

Information is used to authenticate users, enforce permissions, run authorized business workflows, maintain business records, produce reports, send service communications, support users, investigate errors or misuse, and meet applicable legal and recordkeeping obligations. The information involved depends on your role and the features you use.

Cookies and browser storage

RP Portal uses cookies for sign-in and request security. Browser storage may also retain preferences and workflow state. Blocking cookies can prevent sign-in or other features from working. Sign out when using a shared device; you can remove locally stored information through your browser’s settings.

Access and sharing

Information may be available to authorized staff and administrators according to their responsibilities and access permissions. It may be processed by service providers supporting hosting, authentication, communications, diagnostics, payments, accounting, or other enabled integrations. Information may also be disclosed when required by law or necessary to investigate misuse and protect people, business records, or the service. External providers handle information under their own applicable terms and privacy notices.

Retention and security

Retention depends on the type of record, the Organization’s business needs, and applicable legal obligations. Disabling an account does not necessarily delete associated records, logs, or backups. The application uses authentication and access controls to limit access to information, but no system can guarantee complete security. Promptly report suspected unauthorized access to your administrator.

Your choices and requests

Contact the Organization’s administrator or your manager through your usual workplace contact channel to ask about your information, request a correction, or request access or deletion where applicable. Requests may require identity verification and may be limited by legal obligations, business recordkeeping requirements, or the rights of others. Do not include passwords or unnecessary sensitive information in a request.

Intended users

RP Portal is intended for authorized staff and business users. It is not a service directed to children.

Policy changes

Changes to this policy will be posted on this page with an updated date. The Organization remains responsible for providing any additional notices or obtaining consent where required.