Privacy Policy

Last Updated: September 17, 2026

Owner.com, Inc. (“Owner,” “we,” “our,” and/or “us”) values the privacy of individuals who use our websites (including https://www.Owner.com/) and any of our other websites, applications, or services that link to this Privacy Policy (collectively, our “Services”). This Privacy Policy (“Privacy Policy”) explains how we collect, use, process, and disclose Personal Data from individuals who use our Services (“user,” “you,” or “your”). Personal Data is defined in this Privacy Policy as “any information that identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, to you.” By using our Services, you agree to the collection, use, processing, and disclosure of your Personal Data as described in this Privacy Policy Beyond this Privacy Policy, your use of our Services is also subject to the applicable terms governing your use: our Restaurant Participation Agreement (for Merchants, as defined below) or our Platform Terms (for Merchant customers placing orders through our Services). The terms “Personal Data” and “Personal Information” are used interchangeably in this Privacy Policy.

Please review this Privacy Policy carefully to understand what we do in regard to your Personal Data and:

If you are a California resident, please review the “Additional Disclosures for California Residents” section for additional disclosures, our notice at collection and a description of your rights under California privacy laws including the California Consumer Privacy Act (“CCPA”).
If you are located in Canada, please review the “Additional Disclosures for Residents of Canada” section for additional disclosures regarding your rights under Applicable Canadian Law, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”).
If your Personal Data is subject to the European Union (“EU”) or United Kingdom (“UK”) General Data Protection Regulation (“GDPR”), please review the “Additional Disclosures for Residents in the European Economic Area and the United Kingdom” section for additional disclosures.

A PDF of this Privacy Policy is available here.

Types of Personal Data We Collect

We may collect a variety of Personal Data from or about you or your devices from various sources, as described below. In all cases we collect only the Personal Data that is necessary and proportionate to allow us to provide you the Services you request from us.

Information You Provide to Us

Placing an Order. We collect the Personal Data you provide to us when you use our Services. For example, when you place an order with a restaurateur or seller who uses our services (Merchant”) through our Services, we will collect some types of your Personal Data, including your name, phone number, email address, address, date of birth, Payment Information (as defined below), and any other information you provide, including details of your order and delivery instructions. If you are a member of a Merchant’s loyalty program, we will collect the Personal Data you provide to us in connection with your membership. If you leave feedback for a Merchant or delivery driver, we will collect the Personal Data you include in your feedback.

Phone Calls and Automated Phone Features. If you communicate with a Merchant by phone, your call may be handled by automated phone technology provided through our Services. Depending on the functionality enabled by the Merchant, you may be offered the option to receive a text message containing a link to order online or connect with the Merchant, or an AI-powered voice assistant may answer questions, take and submit orders, and otherwise handle your call. We may collect and process the audio of your call, a transcript where generated, and related call metadata (such as the calling number, call duration, and time of call). We may record and process this information using automated tools and, where an AI-powered assistant is used, AI-based tools, for purposes including providing, securing, maintaining, and improving the Services, processing orders, providing customer support, quality assurance, fraud prevention, troubleshooting, regulatory compliance, and developing and improving AI-enabled functionality. We do not collect biometric voiceprints from Merchant phone communications.

Creating an Owner Account. When you create or update an account with us, we may collect certain Personal Data necessary for us to set up and manage that account, such as certain identifying information and information you voluntarily provide to us, including name, date of birth, phone number, email address, and password.

Merchants. If you are a Merchant, or an employee of a Merchant, we will collect your Personal Data in connection with your application to and use of the Services. For example, when you use or sign up for our Services, we will collect your name, email address, mailing address, phone number, Merchant name and any other contact information you provide to us. In addition to your contact information, we will collect your tax identification number, national identification number (e.g., Social Security number), and your banking and payment card information. If you agree to participate in a video sales call where we demonstrate our Services to you, we may record that call and we collect information from you related to the video call. We use this information only for limited purposes, such as training, improving our Services, and internal review. This information is retained only as long as reasonably necessary for these purposes and is not used for any unrelated purposes.

Making a Payment. When you place an order with a Merchant through our Services, your credit card information, billing information, and any other financial information necessary to complete your purchase (“Payment Information”) is processed by our third-party payment processor, Stripe, and the processing of your Payment Information is governed by their Privacy Policy. We do not collect, store, or process your Payment Information.

Communications. If you contact us directly, we may receive additional Personal Data about you. For example, if you represent a Merchant and contact us for a demo, we will receive your name, phone number, and email address. If you participate in a video sales demo, we will record that demo including your image and the conversation. If you subscribe to our marketing communications, we will receive your name, email address, phone number, and order history.

Personal Data We Automatically Collect When You Use Our Services

Device Information. We receive information about the device and software you use to access our Services, including internet protocol (IP) address, web browser type, and operating system version.

Usage Information. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with them, such as the length of time you spend on a page, objects such as hyperlinks you click on, any point at which you terminate an order, and the dates and times of your visits.

Location Information. When you use our Services, if you allow us, we will receive your precise location information. We may also collect the precise location of your device when our Services are running in the foreground or background. We use your location information to insert a description of how you use location information. We may also infer your general location information, for example by using your internet protocol (IP) address.

Communication Logs. Such information may include phone number, calling-party number, forwarding numbers, time and date of calls, duration of calls, SMS routing information. Where a Merchant has enabled automated phone features, this may also include the audio recording and any transcript generated from your call.

Certain Specialized Information. If you use certain mobile apps or sites, we may collect and store information locally on your device such as browser web storage (including HTML 5) and application data caches. Certain services may include a unique application number in connection with the installation of our mobile apps. This number and information, including, without limitation, operating system type and app version number may be sent to our service providers when you install, update or uninstall our mobile app.

Information from Cookies and Similar Technologies. We and our third-party partners may collect information using cookies, pixel tags, or similar online tracking technologies (collectively “Cookies”). Our third-party partners, such as analytics and advertising partners, may use these technologies to collect information about your online activities over time on our website and across different services. These third-party partners may use automated tools, including machine learning, to analyze this information and to develop aggregated, de-identified insights, which they may share with other third parties. Cookies are small text files containing a string of alphanumeric characters. We may use both session Cookies and persistent Cookies. A session Cookie disappears after you close your browser. A persistent Cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services.

Please review your web browser’s “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept Cookies from the Services, you may not be able to utilize the features of the Services to their fullest potential.

For further information on use of Cookies, please see the “Our Use of Cookies and Other Online Marketing Practices” section below.

Consent to Non-Essential Cookies

Where required by applicable law, we will obtain your consent before deploying non-essential cookies, analytics technologies, advertising technologies, or similar tracking tools on your device.

Personal Data We Receive About You from Third Parties

Merchants. If you have placed an order with a Merchant, such as a restaurant, through our Services, we will receive information regarding your order history from the Merchant.

Partners. We may receive Personal Data about you from third parties such as data or marketing partners and combine it with other Personal Data we have about you.

How We Use Personal Data

We use the Personal Data we collect from and about you:

To provide, maintain, debug, improve, and enhance our Services, including fulfilling your orders;
To understand and analyze how you use our Services, and develop new products, services, features, and functionality;
To understand and analyze usage patterns;
To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, personalize recommendations for you, respond to comments and questions, and otherwise provide customer support;
To facilitate transactions and payments;
For marketing purposes, such as developing and providing promotional and advertising materials that may be useful, relevant, valuable, or otherwise of interest to you;
To find and prevent fraud, and respond to trust and safety issues that may arise;
For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
For other purposes for which we provide specific notice at the time the Personal Data is collected.

Certain categories of Personal Data we collect from you are legally defined as Sensitive Personal Data in various states, such as biometric data, geolocation data, and food allergy information. Where required by state law, we will obtain your consent before collecting and processing this data. The collection, processing, and use of your geolocation data is vital to our ability to provide you with our core services. If you do not wish us to collect such data, please do not share this Sensitive Personal Data with us.

How We Disclose Personal Data

We may disclose Personal Data collected with the following parties and for the following purposes. We do not disclose or otherwise share Personal Data we collect from or about you except as described below or otherwise disclosed to you at the time of the collection.

Fulfilling your Order. When you place an order with a Merchant through our Services, we will share your Personal Data, such as your name, address, phone number, and any allergies, food sensitivities, or special instructions regarding that order with the Merchant from which you ordered. If you place an order for delivery, we will also share your Personal Data, such as name, address, phone number and location with delivery drivers. Where you place an order by phone through the Services, we will share the resulting order or transcript with the Merchant in the same manner as an order placed online.

Resolving Disputes. If you have an issue with an order placed through our Services and you contact us for support, we may share your Personal Data, such as your account number, name, address, phone number, and location, with the Merchant or delivery driver to attempt to resolve your issue.

Vendors and Service Providers. We may share only the types of your Personal Data we receive with those vendors and service providers retained in connection with the provision of our Services that is necessary for the vendor or service provider to provide you with our Services.

Partners.: We may choose to share certain types of Personal Data with our partners and other Owner Merchants to better customize our services for their customers.

Cross-Merchant Processing. Owner may use information derived from interactions across multiple Merchants to generate aggregated analytics, performance metrics, benchmarking information, fraud-prevention tools, security systems, platform improvements, and artificial-intelligence models. Except where separately disclosed and lawful consent has been obtained where required by applicable law, Owner does not use identifiable information about a customer obtained through one Merchant to personalize marketing, offers, recommendations, or menu experiences for that customer at a different, unrelated Merchant.

Loyalty Programs. If you choose to participate in a Merchant’s loyalty program that is powered by Owner, we will share the Personal Data you provided to us when you created your account with that Merchant. The Merchant, not Owner, is the sole sponsor and administrator of its loyalty program.

Analytics Partners. We may use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources.

As Required by Law and Similar Disclosures. We may access, preserve, and disclose your Personal Data if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. The categories of Personal Data we would share in any of these situations would be those required to comply with specific, legally binding requirements, fully your data subject requests pursuant to controlling state law, or those necessary to protect you, us, or others.

Merger, Sale, or Other Asset Transfers. We may transfer your Personal Data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.

Consent. We may also disclose your Personal Data with your permission and for your benefit.

Our Use of Cookies and Other Online Marketing Practices

We and our service providers may use tools to collect information about you, your computer access points, mobile devices, and the web browser that you use to connect to our Sites or digital applications, such as Cookies. Cookies are a feature of web browser software that allows servers to recognize the computer used to access a website. Cookies are small pieces of data that are stored by a user’s web browser on the user’s hard drive. Cookies can remember what information a user accesses on a web page to simplify subsequent interactions with that website by the same user, or to use the information to streamline the user’s transactions on related web pages. This makes it easier for a user to move from a webpage to another, and to complete commercial transactions over the Internet. Cookies are designed to make your online experience easier and more personalized. We may use Cookies to provide you with certain marketing communications based on promotions or advertisements you click on within our site. We do not use Cookies to store any of your personal or financial information on your computer. We recognize that you have a choice to refuse Cookies. But be advised that if you wish to purchase, you must accept the Cookie so that we can securely process your order. We may also use certain third-party Cookies and technologies that collect aggregated information to be used by us and our service providers for operational and business purposes, including collecting measurements about interactions you have with our advertisements.

What Types of Cookies Do We Use?

Essential Cookies: These Cookies are essential for the Website to function properly and enable basic features such as page navigation and access to secure areas of the site.
Analytics: These Cookies help the website operator understand how its website performs, how visitors interact with the site, and whether there may be technical issues.
Targeted Advertising : These Cookies are used to deliver advertising that is more relevant to you and your interests. May also be used to limit the number of times you see an advertisement and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the website operator ’s permission.
Personalization: These Cookies allow the website to remember choices you make (such as your username, language, or the region you are in) and provide enhanced, more personal features. For example, a website may provide you with local weather reports or traffic news by storing data about your general location.
Session Reply Cookies: These Cookies record your interactions with our websites, including mouse movements, text, and other information, associated with your visit to our Sites. This information is used to help us improve our websites and better provide you with information you are interested in when you visit our websites. They may be set by us or by third party providers whose services we have added to our pages. This information is used to help us improve our Sites and better provide you with information you are interested in when you visit our Sites.

How Can you Disable Cookies?

You can manage the use of Cookies through functionality built into your web browser or as provided on the Sites. Although you are not required to accept the Sites’ Cookies, if you block or reject them, you may not have access to all features available through the Website.

If you want to learn more about cookies or how to control, disable, or delete them, please visit http://www.allaboutcookies.org for detailed guidance. We do not currently respond to “Do Not Track” signals.

Management of Cookies

You can manage the use of cookies in several ways:

Our Cookie Management Tool: You can change your cookie preferences here:
Internet Browser: You can delete online tracking technologies, including cookies, from your device by clearing your browser history. This will delete all online tracking technologies from all websites and applications you have visited since you last cleared your browser history. You can also set your browser to prevent certain online tracking technologies from being placed on your device. To learn more, please see the links below:
Third Party Tools: Various third-party tools exist that can help you manage cookies. For additional information you can also visit http://www.allaboutcookies.org/ where you will find information on cookie management and blocking.

You may also be able to limit interest-based advertising through the settings on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest-based ads” (Android). You may also be able to opt-out of some – but not all – interest-based ads served by mobile ad networks by visiting http://youradchoices.com/appchoices and downloading the mobile AppChoices app. You may also opt out of interest-based advertising by certain participating companies through the Network Advertising Initiative at https://optout.networkadvertising.org/ and through the Digital Advertising Alliance's WebChoices tool at https://www.aboutads.info/choices. You may be able to limit the use of location data for advertising purposes by adjusting your location services settings on your mobile device. Some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you may need to opt-out again.

Please note, if you disable the use of online tracking technologies on our Website, this may affect your experience using it. For example, certain features of the Website may not work, or you may have to re-login. If you use different devices to visit our Website, (for example, your computer, smartphone, tablet etc.), you must ensure that each browser on each device is adapted to your preferences.

“Do Not Track” (DNT) and Universal Opt-Out Preference Signals. Some web browsers (including Safari, Internet Explorer, Firefox, and Chrome) incorporate a “Do Not Track” (DNT) or similar feature that signals to web services that a visitor does not want to have their online activity and behavior tracked. If a web service operator elects to respond to a particular DNT signal, the web service operator may refrain from collecting certain Personal Information about the browser's user. Not all browsers offer a DNT option, and there is currently no industry consensus as to what constitutes a DNT signal. We do not currently respond to DNT signals.

Your Privacy Rights

Depending on where you are located, you may have the following rights as it relates to the processing of your Personal Data, including:

Request access to your Personal Data. A “Data Subject Access Request” enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.
Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate Personal Data we hold about you corrected, although we may need to verify the accuracy of the new data you provide to us.
Request erasure / deletion / removal of your Personal Data. This enables you to ask us to delete or remove your Personal Information where we do not have a valid reason to continue to process it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully, or where we are required to erase your Personal Data to comply with local law.
Object to processing of your Personal Data where we are relying on a legitimate interest (or those of a 3rd Party). You may choose to exercise this right if there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Object to sharing of your Personal Data. You may have the right to limit the sharing of Personal Data, particularly for marketing purposes depending on where you live and the type of Personal Data in question.
Request restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Information in the following scenarios:
1. If you want us to establish the data’s accuracy;
2. Where our use of the data is unlawful but you do not want us to erase it;
3. Where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims;
4. You want us to restrict the use of any Sensitive Personal Data (as defined under applicable law); or
5. You have objected to our use of your Personal Data, but we need to verify whether we have overriding legitimate grounds to process it.
Data Portability / Request the transfer of your Personal Data to you or directly to another controller. We will (unless there is an exemption) assist you by securely transferring your Personal Data directly to another controller where technically feasible or by providing you with a copy in a structured, commonly used, machine-readable format.
Right to Appeal. Depending on where you are a resident, you may have the right to appeal our responses to your Data Subject Rights requests.

To exercise any of these rights, please submit a request by emailing us at privacy @ owner.com. and include “Data Subject Rights Request” in the subject line. In the request, please specify which right you are seeking to exercise and the scope of the request. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your requests to know or delete.

Location Information. You can prevent your device from sharing precise location information at any time through your device’s operating system settings. However, location is core to our Services and without it, we may not be able to provide you with all the functionality of our Services.

De-Identified Information

We and our third-party partners may aggregate, anonymize, or de-identify information so that it can no longer reasonably be used to identify an individual. We and our third-party partners may use and share such information for analytics, product improvement, research, statistical purposes, and business operations, subject to applicable law.

Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us. By maintaining an Owner account and/or not opting out of receiving information from Owner, you acknowledge and agree that you may receive e-mail or SMS text messages on your phone or mobile device from Owner, our third-party service providers, or Merchants that you choose to order from or with which you choose to establish a loyalty or similar preferred customer account. Receiving these messages may cause you to incur usage charges or other fees or costs in accordance with your wireless or data service plan. Any and all such charges, fees or costs are your sole responsibility. You should consult with your wireless carrier to determine what rates, charges, fees or costs may apply. Owner, or each Merchant, may receive a confirmation when you open an email or text from us if your computer supports this type of program. If you no longer wish to receive text or email messages from Owner, you may opt-out by following the unsubscribe link located at the bottom of each message or by contacting us at support @ owner.com. If you no longer wish to receive text or email messages from a particular Merchant, you may opt-out by following the unsubscribe link located at the bottom of each message or by contacting the Merchant as instructed in that Merchant’s privacy policy.

Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.

Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy and advertising practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any Personal Data you disclose to these third parties. We encourage you to read their privacy policies before providing any Personal Data to them.

Data Retention and Deletion Practices

Personal Data is retained only for as long as necessary to fulfill the purposes for which it was collected, to satisfy legal, accounting, operational, or regulatory requirements, and to resolve disputes. When Personal Data is no longer required, it is securely deleted, anonymized, or destroyed in accordance with our retention practices. We may retain aggregated, statistical, benchmarking, security-related, fraud-prevention, and de-identified information indefinitely where permitted by law and where such information no longer reasonably identifies an individual.

Security

We make reasonable efforts to protect your Personal Data by using physical and electronic safeguards designed to improve the security of the Personal Data we maintain. However, as no electronic transmission or storage of Personal Data can be entirely secure, we can make no guarantees as to the security or privacy of your Personal Data.

Data Transfers

Our Services are hosted in the United States and intended for visitors located within the United States and Canada. If you are located in Canada, please note that by using our Services you are transferring your Personal Data to the United States for storage and processing, as further described in the “Additional Disclosures for Residents of Canada” section below. If you choose to use our Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your Personal Data outside of those regions to the United States for storage and processing. Also, we may transfer your Personal Data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services and you agree to such transfers by use of our Services.

When we transfer Personal Data to a country that is not regarded as ensuring an adequate level of protection for Personal Data under the EU General Data Protection Regulation (“EU GDPR”), United Kingdom General Data Protection Regulation (“UK GDPR”), or other applicable laws, we will seek to ensure a similar degree of protection is afforded to Personal Data by ensuring that, where possible, we put in place appropriate safeguards (such as standard contractual clauses approved by the European Commission or other relevant authority) or otherwise transfer Personal Information in accordance with applicable laws, such as where the transfer is necessary for the performance of a contract between you and us or between us and a third party in your interest, where the transfer is necessary to establish, exercise or defend legal claims, or where the transfer is made for important reasons of public interest. For more information on specific mechanisms, we rely on for transferring Personal Data, please contact us at the details provided in the “How to Contact Us” section below.

Children’s Privacy

We do not knowingly collect, maintain, or use Personal Data from children under 13 years of age, and no parts of our Services are directed at children. If you learn that a child has provided us with Personal Data in violation of this Privacy Policy, then you may alert us at privacy @ owner.com.

Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share Personal Data previously collected from you through our Services, we will attempt to notify you through our Services, by email, or other means.

How to Contact Us

If you have any questions, comments, or concerns about this Privacy Policy, or wish to exercise any of your rights as a consumer regarding your Personal Data, please email us at privacy @ owner.com or write to us at: 530 Lytton Avenue, 2nd Floor, Palo Alto, CA 94301. If you wish to appeal any of our decisions regarding your exercise of your data subject rights, please email or write to us and address your request for reconsideration to Owner.com ’s Data Privacy Officer.

Additional Disclosures for California Residents

The CCPA imposes certain obligations on us and grants certain rights to California residents (“California Resident,” “you,” or “your”) with regard to “Personal Information.” If you are a California Resident, please review the following information about our privacy practices surrounding how and why we collect, use and disclose your Personal Information and your potential rights with regard to your Personal Information under the CCPA. The rights described herein are subject to exemptions and other limitations under applicable law. Terms used in this California-specific section have the meaning ascribed to them in the CCPA.

Notice at Collection

The “Types of Personal Data We Collect” and “How We Use Your Personal Data” sections above explain (1) the categories of Personal Information we collect from you and (2) the business or commercial purposes for using such information, depending on how you interact with us. We retain your Personal Information as described above in the “Data Retention and Deletion Practices.” We do not sell Personal Information, but we may share Personal Information (in the form of identifiers and internet activity information) with third-party advertisers for purposes of targeting advertisements on non-Owner.com websites, applications and services. You have the right to opt out of sharing of your Personal Information. For more information about our privacy practices, please review our Privacy Policy.

Our Collection, Use, and Disclosure of Personal Information and Sensitive Personal Information

What Information We Have Collected, the Sources from Which We Collected It, and Our Purpose for Collecting the Information

In the preceding 12 months, depending on how you interact with us, we may have collected and disclosed for a business purpose the following categories of Personal Information to the following categories of recipients. The purposes for which the Personal Information was collected and the sources we have collected it from are discussed above in the “How We Use Personal Data” section.

Category	Examples	Categories of Recipients
Identifiers	Names, Addresses, Emails, Dates of Birth, Tax Identification Numbers, Social Security Numbers	Merchants Analytics Partners
Commercial Information	Banking information, Credit card information	Merchants Analytics Partners
Additional information subject to Cal. Civ. Code § 1798.80	Social Security Numbers, Tax Identification Numbers	Analytics Partners
Protected classification information under certain federal or state laws	Nationalities, Gender, Disability Information	Merchants Analytics Partners
Professional or employment-related information	Job History, Resumes, Curriculum Vitae	Merchants Analytics Partners
Biometric Information	Voice recordings, pictures	Merchants Analytics Partners
Geolocation data	Approximate location (city/region) inferred from IP address	Merchants Analytics Partners
Internet or other electronic network activity information	Page views, clicks, session data, interaction with services	Merchants Drivers Analytics Partners
Audio, electronic, visual or similar information;	Includes audio, electronic, visual, or similar information such as photographs or images (e.g., that you provide us), call/video recordings (E.g., customer support calls),	Merchants Analytics Partners

In addition, in the preceding 12 months, we may have disclosed your Personal Information if required to do so by law, court of law, or as requested by any governmental, self-regulatory organization or law enforcement authority. We may also disclose your Personal Information in connection with, or during negotiations or consideration of, any merger, sale of company assets, financing or acquisition of all or a portion of our business to another company. We may also disclose or make available Personal Information to our service providers. We do not sell Personal Information, but we may share Personal Information (in the form of identifiers and Internet activity information) with third-party advertisers for purposes of targeting advertisements on non-Owner.com websites, applications and services. We do not knowingly sell or share the Personal Information of California residents under 16 years old.

Use and Disclosure of Sensitive Personal Data. As noted above in “How We Use Your Personal Information,” certain Personal Information we collect and process may be considered “Sensitive Personal Information” under the CCPA. The CCPA requires that we provide you with a right to limit our use or disclosure of such Sensitive Personal Information in certain circumstances. Currently, we are not using your Sensitive Personal Information for purposes that would require that we provide you with a right to limit.

Our Sale or Sharing of Personal Information

Additionally, in the past 12 months, we may have sold or shared the following categories of personal information to the following categories of third parties and for the following business/commercial purposes:

Category of Personal Information	Categories of Third Parties to Which Personal Information is Sold or Shared	Business or Commercial Purposes for Selling or Sharing Personal Information
Internet or Other Similar Network Activity	Service providers (including our support services and system providers), advertising and marketing companies, and our business partners.	Providing advertising and marketing services Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with us Helping to ensure security and integrity To operate, maintain, and improve the Site and our products and services Debugging to identify and repair errors that impair existing intended functionality Undertaking internal research for technological development and demonstration Enabling our advertising and marketing partners to use automated tools, including machine learning, to develop aggregated, de-identified insights, which they may share with other third parties

Your Rights Under the CCPA

If your Personal Information is subject to the CCPA, you may have certain rights, subject to applicable exemptions and limitations, with regard to such Personal Information, including the right to:

Be informed, at or before the point of collection, of the categories of Personal Information to be collected and the purposes for which the categories of Personal Information shall be used.
Request that we delete any Personal Information about you that we collected, subject to certain exceptions (“Request to Delete”).
Correct inaccurate Personal Information (“Request to Correct”).
Request that we, as a business that collects Personal Information about you and that discloses your Personal Information for a business purpose, disclose to you (“Request to Know”) the: (i) categories of Personal Information we have collected about you; (ii) categories of sources from which we collected the Personal Information; (ii) business or commercial purpose for collecting or selling the Personal Information; (iii) categories of third parties with which we disclose Personal Information; and (iv) specific pieces of Personal Information we have collected about you.
Not be discriminated against because you exercised any of your rights under the CCPA.
Opt-out of the “sale” (as that term is defined in the CCPA) of your Personal Data if a business sells your Personal Information
Opt-out of the “sharing” (as that term is defined in the CCPA) of your Personal Information if a business shares your Personal Information with third parties.
Limit the use and disclosure of Sensitive Personal Information where required by the CCPA (“Right to Limit”) (please note that we are not using your Sensitive Personal Information for purposes that would require that we provide you with a right to limit).

The CCPA does not restrict our ability to do certain things like comply with other laws or comply with regulatory investigations. We also reserve the right to retain, and not to delete, certain Personal Information after receipt of a Request to Delete from you, where permitted by the CCPA or another law or regulation.

How to Submit a Data Subject Rights Request

If your Personal Information is subject to the CCPA, you may can submit a Data Subject Rights Request, via email at privacy @ owner.com

We are only required to respond to verifiable Data Subject Rights Requests made by you or your authorized agent. When you submit a Data Subject Rights Request, we may ask that you provide clarifying or identifying information to verify your request. Such information may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, your name and email address. Any information gathered as part of the verification process will be used for verification purposes only. You are permitted to designate an authorized agent to submit a Data Subject Rights Request on your behalf and have that authorized agent submit the request through the provided methods. We may deny requests from authorized agents who do not submit proof that they have been authorized by you to act on your behalf. We may also require that you directly verify your own identity with us and directly confirm with us that you provided the authorized agent permission to submit the request.

If you are a California resident under the age of 18 and have registered for an account with us, you may ask us to remove content or information that you have posted to our website(s). Please note that your request does not ensure complete or comprehensive removal of the content or information, because, for example, some of your content may have been reposted by another user. We may need to verify your identity and place of residence before completing your rights request.

Questions

If you have any questions regarding these additional disclosures, please contact us using the information in the “How to Contact Us” section above.

Additional Disclosures for Residents of Canada (“Canada Provisions”)

Last Updated: September 2026

If you are located in Canada, this section supplements the rest of this Privacy Policy and describes our practices under the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”), Canada’s Anti-Spam Law (“CASL”) and applicable provincial privacy laws in Canada (“Applicable Canadian Law”) not including the Province of Québec. Terms used in this section have the meaning given to them under Applicable Canadian Law If there is any conflict between what is set out above “Additional Disclosures for Residents of Canada” or what is set out in and following “Additional Disclosures for Residents of European Union and United Kingdom”, and the Canada Provisions, then the Canada Provisions will have priority. Canadian residents have only the rights provided by applicable Canadian privacy laws, including rights of access, correction, consent withdrawal (subject to legal and contractual limitations), and complaint rights. Certain provinces of Canada may provide additional rights. Rights applicable to persons outside Canada do not apply to persons within Canada. For greater certainty, the rights set out in the section entitled “Your Privacy Rights” apply only where required by applicable law. Not all rights described in that section are available to Canadian residents.

Accountability

Owner is responsible for Personal Information under its control and has implemented policies, procedures, safeguards, training, and governance measures designed to protect Personal Information and ensure compliance with applicable Canadian privacy laws. Owner requires service providers who process Personal Information on its behalf to provide a level of protection that is comparable to the protection Owner provides. We may engage service providers located inside or outside Canada to process Personal Information on our behalf for the purposes described in this Privacy Policy. Such service providers are authorized to access Personal Information only as necessary to perform services for us and are required by contract to protect such information.

Relationship with Merchants

Owner provides technology services to Merchants. Those Merchants are independent from us and are not accountable to us. In many cases, Personal Information collected through the Services is collected on behalf of the Merchant when you place an order. In those circumstances, the Merchant may remain responsible for certain privacy decisions relating to your Personal Information, including communications you receive from that Merchant and retention of Merchant records. Questions relating specifically to a Merchant’s privacy practices should be directed to that Merchant. Depending on the circumstances, Owner may act either on its own behalf or on behalf of a Merchant in connection with the processing of Personal Information.

Consent

Our collection, use, and disclosure of your Personal Information is based on your consent. Depending on the sensitivity of the Personal Information and the context in which it is collected, your consent may be express (for example, when you agree to receive marketing communications) or implied (for example, when you provide your name and address to complete an order). You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us using the information in the “How to Contact Us” section above. If you withdraw your consent, we may not be able to provide you with certain aspects of our Services.

Electronic Marketing Communications

Where required by applicable law, including CASL, we will obtain consent before sending commercial electronic messages. You may withdraw your consent and unsubscribe from commercial electronic messages at any time using the unsubscribe mechanism included in each message. Merchants are independently responsible for ensuring that their own commercial electronic messages comply with applicable law.

Cross-Border Transfers

We and our service providers may process and store Personal Information in the United States and other jurisdictions outside Canada. Personal Information transferred outside Canada may be subject to lawful access by courts, governments, law enforcement agencies, and national security authorities in those jurisdictions. Before transferring Personal Information to service providers outside Canada, we take reasonable measures to ensure that an appropriate level of protection is provided through contractual and organizational safeguards.

Privacy Incidents

We maintain procedures for responding to actual and suspected privacy and security incidents. Where required by Applicable Canadian Law, we will notify affected individuals and applicable regulators of breaches of security safeguards involving Personal Information where there is a real risk of significant harm and will maintain records of such incidents as required by law.

Your Rights Under PIPEDA and How to Exercise Them

Subject to certain exceptions and limitations under applicable law, you may have the following rights:

Right to Access: You may have the right to access the Personal Information we hold about you.
Right to Correct: You may have the right to challenge the accuracy and completeness of your Personal Information and request that it be corrected.
Right to Withdraw Consent: You may have the right to withdraw your consent to our collection, use, or disclosure of your Personal Information, subject to legal or contractual restrictions.

You may exercise your rights by submitting a request as described in the “How to Contact Us” section above. Please note that we may ask you to verify your identity before responding to such requests, and we will respond within the timeframe required by applicable law.

Additional Rights for Quebec Residents

Residents of the Province of Québec may have additional rights under applicable privacy laws, including rights relating to access, rectification, withdrawal of consent, portability of certain computerized personal information, and obtaining information about cross-border transfers and automated decision-making processes where applicable. Where such laws apply, Owner will comply with those requirements.

Call Recordings and Voice Information

Calls that are recorded, including calls handled through automated phone features, may contain audio information, transcripts, call metadata, and information voluntarily provided by participants during the call. Owner does not collect or use biometric voiceprints from ordinary customer service or ordering calls and does not use ordinary call recordings to authenticate an individual's identity through voice recognition technology unless separately disclosed and permitted by applicable law.

Artificial Intelligence Development and Improvement

Owner may use information generated through use of the Services to develop, evaluate, test, monitor, secure, and improve artificial intelligence systems and related technologies. Unless otherwise disclosed, such activities are generally conducted using aggregated, statistical, platform-level, or de-identified information. Where Personal Information is used in connection with such activities, Owner will do so only as permitted by applicable law and this Privacy Policy.

Complaints

If you have a concern about how we have handled your Personal Information, please contact us first using the information in the “How to Contact Us” section above so we can try to resolve it. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada, at priv.gc.ca.

Privacy Officer

We have designated an individual responsible for overseeing our compliance with applicable Canadian privacy law. You can reach our privacy officer using the contact information in the “How to Contact Us” section above.

Questions

If you have any questions regarding these additional disclosures, please contact us using the information in the “How to Contact Us” section above.

Additional Disclosures for Residents of European Union and United Kingdom

Roles

The EU GDPR and UK GDPR distinguish between organizations that process Personal Data for their own purposes (known as “controllers”) and organizations that process Personal Information on behalf of other organizations (known as “processors”). We act as a controller with respect to Personal Data collected as you interact with our Services.

Lawful Basis for Processing

The EU GDPR and UK GDPR require a “lawful basis” for processing Personal Information. Our lawful bases include where:

Consent: You have given consent to the processing of your Personal for one or more specific purposes either to us or to our service providers or partners.
Contractual Necessity: Processing your Personal Data is necessary for the performance of a contract between you and us.
Legal Obligation: Processing your Personal Data is necessary for compliance with a legal obligation.
Legitimate Interests: Processing your Personal Data is necessary for the purposes of the legitimate interests pursued by us or a third party provided that your interests and fundamental rights and freedoms do not override those interests.

Your Rights Under the EU GDPR and UK GDPR and How to Exercise Them

Right to Be Informed: You may have the right to know or be notified about the collection of your Personal Data.
Right to Access: You may have the right to be provided with a copy of your Personal Data.
Right to Data Portability: You may have the right to receive the Personal Data you have provided to us in a structured, commonly used, and machine-readable format and/or to ask that we transmit your Personal Data to a third party, where applicable.
Right to Delete/Be Forgotten: You may have the right to request that we delete the Personal Data we have collected about you, subject to certain legal exceptions.
Right to Correct: You may have the right to request that we correct any inaccurate Personal Data we have collected about you.
Right to Restrict Processing: You may have the right to require us to restrict processing of your Personal Data.
Right to Object: You may have the right to object to the processing of your Personal Data for direct marketing/profiling or where we are processing your Personal Data for our legitimate interests.
Right to Withdraw Consent: Where you have provided us with consent the processing of your Personal Data, you may have the right to withdraw such consent.
Right to Not be Subject to Automated Individual Decision-Making: You may have the right to not be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.
Right to Contact Supervisory Authority: You may have the right to contact the relevant supervisory authority.

You may exercise your rights by contacting us through the avenues listed above in the “Your Privacy Rights” section above. Please note that we may ask you to verify your identity before responding to such requests. If you make a request, we will try our best to respond to you as soon as possible.

Questions

If you have any questions regarding these additional disclosures, please contact us using the information in the “How to Contact Us” section above.

The easiest way to grow your restaurant online

Get a free demo