Privacy Policy

Last updated: August 6, 2026

Overview

RMB Suite (“we,” “us,” or “our”) is a restaurant operations platform built and operated by Roni's Mac Bar. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information. By using RMB Suite, you agree to the practices described here.

What Data We Collect

  • Account information: Your name, email address, and password (stored as a bcrypt hash) when you create an account.
  • Franchise inquiry information:Contact details, market interest, referral source, SMS consent choice, and related follow-up notes submitted through a Roni's Mac Bar franchise inquiry or application form.
  • Customer contact information: Phone numbers, email addresses, order details, app account details, loyalty or giveaway entries, SMS consent records, and opt-out preferences that you provide when ordering, joining a promotion, or using customer-facing tools.
  • Organization data: Business name, logo, location details, and employee records you enter into the platform.
  • Usage data: Log data, feature usage, session timestamps, and error events. We use this to improve the platform and diagnose issues.
  • Google OAuth tokens: If you connect a Google account (for Gmail, Google Calendar, or Google Business Profile integrations), we store OAuth access and refresh tokens so RMB Suite can provide the features you authorize. We never store your Google password.
  • Payment information: We use a third-party payment processor (Stripe). We do not store your full card number on our servers.

How We Use Your Data

  • To operate and deliver the RMB Suite platform and its features.
  • To power integrations you authorize — including Google Business Profile management, Gmail communications, Google Calendar sync, and QuickBooks journal entries.
  • To send transactional emails (shift notifications, account alerts, invoice receipts).
  • To send operational text messages related to customer activity, including order confirmation, order-ready, pickup, delivery, status, account verification, and giveaway or loyalty notifications.
  • To send promotional texts, offers, or marketing updates when you have provided consent or where otherwise permitted by applicable law. Message frequency varies. Message and data rates may apply. You can opt out of promotional texts by following the instructions in the message, such as replying STOP where supported.
  • To follow up on franchise inquiries when you ask us to contact you.
  • To diagnose bugs and improve platform reliability.
  • To comply with legal obligations.

We do not use your data for advertising or sell it to third-party marketers.

We do not sell, rent, or share mobile phone numbers or SMS consent information with third parties for their marketing or promotional purposes.

Google API Services and Google Account Data

If you connect a Google account, RMB Suite accesses and processes only the Google data needed for the features you enable. Depending on those features, this may include:

  • OAuth access and refresh tokens, your Gmail address, and basic Google Account profile information.
  • Gmail message and thread content, headers and other metadata, sender and recipient addresses, and attachments when required for an enabled workflow.
  • Google Calendar event data used by scheduling and calendar features.
  • Google Business Profile data used by authorized profile-management features.

We use this Google data only to provide features you authorize: sending email; synchronizing replies and threads for applicant tracking and hiring, sales, franchising, and catering communications; processing invoice attachments you authorize; providing scheduling and calendar functions; and managing Google Business Profiles. Google data is not used for advertising, sold, or used to train generalized artificial intelligence or machine-learning models. It is used only to provide user-authorized RMB Suite features.

We share Google data only with service providers and subprocessors needed to operate RMB Suite, subject to confidentiality and data-protection obligations, or when disclosure is required by law. We do not transfer Google data for advertising, data brokerage, or any other unrelated purpose.

Google data is encrypted in transit and at rest. We use access controls and limit operational access to authorized personnel with a need to know, following least-privilege principles.

OAuth tokens and synchronized Google data are retained only while your Google account remains connected and for as long as needed to provide the features you authorize. Disconnecting the integration or revoking access stops future access to your Google Account. You can revoke RMB Suite's access through your Google Account security permissions. To request deletion of Google data already held by RMB Suite, email privacy@rmbsuite.com. We will delete or anonymize requested personal data within 30 days, except records we must retain to comply with law.

RMB Suite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing

We share your data only in the following limited circumstances:

  • Authorized integrations: When you explicitly connect an external service (e.g., Google, QuickBooks), we share only the data necessary to operate that integration on your behalf.
  • Service providers: We use trusted infrastructure providers (e.g., cloud hosting, email delivery) under data processing agreements that prohibit them from using your data for their own purposes.
  • Legal requirements: We may disclose data if required by law, subpoena, or to protect the rights and safety of RMB Suite, our users, or the public.

We never sell your personal data.

Data Retention

We retain your data only for as long as your account is active or as needed to provide the services you use. If you close your account or submit a deletion request to privacy@rmbsuite.com, we will delete or anonymize your personal data within 30 days of account closure or a verified request, except where we are required to retain certain records by law (e.g., financial records for tax compliance).

Security

We use industry-standard security practices including encryption in transit (TLS), encryption at rest, access controls, and least-privilege operational access. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise any of these rights, email us at privacy@rmbsuite.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of material changes by email or via an in-app notice. Continued use of RMB Suite after changes take effect constitutes your acceptance of the updated policy.

Contact

Questions about this Privacy Policy? Email us at privacy@rmbsuite.com.