Restaurant

Marketing

Intelligence

PRIVACY POLICY

Last Updated: July 1, 2026

1. Introduction

NGAZE is a restaurant marketing intelligence platform operated by The Digital Restaurant (“NGAZE,” “The Digital Restaurant,” “we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, disclose, retain and protect information when you:

  • Visit https://ngaze.ai or another website operated by us;
  • Create or use an NGAZE account;
  • Request a demonstration, contact us or subscribe to communications;
  • Use NGAZE restaurant marketing, analytics, customer relationship management, reputation management, email, social media, automation, website or related services;
  • Connect a social-media account, business page, advertising account, restaurant technology platform or other third-party service;
  • Use one of our free assessment or grading tools; or
  • Otherwise interact with NGAZE or The Digital Restaurant.

This Privacy Policy applies to the NGAZE website, platform, applications and related services, collectively referred to as the “Services.”

By using the Services, you acknowledge the practices described in this Privacy Policy.

2. Our Role

Depending on the circumstances, NGAZE may process information in different roles.

Information we control

We act as the business or data controller when we determine why and how information is processed, such as information relating to:

  • NGAZE account holders;
  • Website visitors;
  • Prospective customers;
  • Billing contacts;
  • Sales and support communications;
  • Product usage;
  • Security and system administration; and
  • Our own marketing activities.

Information processed for restaurant customers

Restaurant businesses may use NGAZE to manage customer information, marketing contacts, campaigns, reviews, restaurant locations, online activity and connected services.

For information submitted or connected by a restaurant customer, the restaurant generally determines the purposes for which that information is used. In those circumstances, NGAZE generally acts as a service provider or data processor on behalf of the restaurant.

Questions about a restaurant’s use of customer information should ordinarily be directed to that restaurant. We will assist our restaurant customers with privacy requests where required by law and contract.

3. Information We Collect

The information we collect depends on how you interact with the Services and which NGAZE features you use.

3.1 Information you provide directly

We may collect information such as:

  • Name;
  • Business name;
  • Job title;
  • Email address;
  • Telephone number;
  • Mailing or business address;
  • Restaurant name and location;
  • Website and social-media URLs;
  • Login and account information;
  • Communications preferences;
  • Information submitted through contact, signup or demo-request forms;
  • Information provided during sales, onboarding, training or support interactions;
  • Billing contact and transaction information;
  • Campaign content, images, menus, offers and marketing materials;
  • Restaurant customer or contact information uploaded to the platform;
  • Reviews, responses, internal notes and customer-service records; and
  • Any other information you choose to provide.

Payment-card information may be processed directly by our payment-processing providers. NGAZE may receive limited transaction information, such as payment status, billing contact details and limited information concerning a payment method. We do not necessarily receive or store complete payment-card numbers.

3.2 Information collected automatically

When you visit or use the Services, we and our service providers may automatically collect:

  • Internet Protocol address;
  • Browser type and version;
  • Device type and operating system;
  • Device or browser identifiers;
  • Approximate location derived from an IP address;
  • Referring and exit pages;
  • Pages, features and content viewed;
  • Links and buttons selected;
  • Date and time of activity;
  • Session information;
  • Login activity;
  • Error, diagnostic and performance information;
  • Cookie and similar technology identifiers; and
  • Information about interactions with emails or marketing communications.

We use this information to operate, protect, analyze and improve the Services.

3.3 Information from free tools and assessments

When you use an NGAZE assessment, grader or business-intelligence tool, we may collect and analyze information associated with the website, restaurant or business you submit.

This may include:

  • Website URL;
  • Public website content;
  • Public restaurant and location information;
  • Website performance information;
  • Search visibility information;
  • Public business listings;
  • Public reviews;
  • Public menu information;
  • Technical website characteristics;
  • Search-engine and AI-search observations; and
  • Contact information submitted with the request.

Assessment results are informational and may not reflect every factor affecting website performance, security, search visibility or marketing results.

3.4 Information received through integrations

When an authorized user connects a third-party service to NGAZE, we may receive information made available by that service under the permissions granted by the user and approved by the third-party platform.

Depending on the integration, this information may include:

  • Account, member or profile identifiers;
  • Business, organization or page identifiers;
  • Restaurant locations;
  • Page, profile or account names;
  • Administrative roles and permissions;
  • Posts and other published content;
  • Comments, reactions and engagement information;
  • Advertising-account information;
  • Campaign and performance data;
  • Reviews;
  • Leads;
  • Menus;
  • Order or transaction information;
  • Customer or guest information;
  • Contact lists;
  • Analytics information;
  • Publishing status and integration response information; and
  • Authentication credentials, authorization tokens or similar integration data.

We access only information permitted by the connected service, the authorization granted by the user and the functionality provided through NGAZE.

4. Connected Accounts and Third-Party Integrations

NGAZE may allow authorized users to connect social-media accounts, business pages, advertising accounts, restaurant technology platforms and other third-party services.

4.1 Authorization

NGAZE uses authorization methods supported by the connected service, which may include OAuth or a similar secure authorization process.

A user must affirmatively authorize NGAZE before we can access permitted information or perform authorized activities through a connected service.

Where OAuth or a similar authorization method is used, users are redirected to the third-party platform to sign in and approve access. NGAZE does not ask users to provide their third-party account passwords directly to us.

The permissions requested may vary based on:

  • The NGAZE feature being used;
  • The user’s role or administrative permissions;
  • The account, business page or organization being connected;
  • The third party’s available API products and permission levels; and
  • The access approved for NGAZE by the third-party platform.

4.2 Information available through connected accounts

Subject to the user’s authorization and the permissions made available by the connected service, NGAZE may receive or process:

  • The authenticated user’s account identifier;
  • Basic profile or account information;
  • Business-page or organization identifiers;
  • Account, page or organization names;
  • The user’s administrative or content-management relationship with an account or page;
  • Content created, selected, scheduled or published through NGAZE;
  • Permitted information concerning posts, comments, reactions or engagement;
  • Campaign and advertising information;
  • Publishing status and API response information;
  • Access tokens, refresh tokens or similar authorization credentials;
  • Information necessary to confirm that the user is authorized to manage a connected account; and
  • Other information permitted by the connected service and authorized by the user.

NGAZE does not access information outside the permissions granted by the user or the access approved by the connected service.

4.3 How we use connected-account information

We may use information received through connected accounts to:

  • Authenticate the connection;
  • Display accounts, pages, organizations or locations the user is authorized to manage;
  • Allow users to select an appropriate publishing or advertising destination;
  • Create, schedule and publish user-approved content;
  • Retrieve the status of content published through NGAZE;
  • Display permitted engagement, campaign or performance information;
  • Provide marketing analytics and reports;
  • Manage reviews or business information;
  • Maintain integration security;
  • Diagnose failed publishing, synchronization or authorization requests;
  • Comply with the connected service’s requirements; and
  • Provide features requested by the user.

NGAZE will not publish content to a connected service unless an authorized user has configured, approved or initiated the relevant publishing activity through the Services.

Where a user configures scheduling or marketing automation, content may be published at a future time based on instructions previously approved by an authorized user.

4.4 Business pages and organization accounts

Restaurant customers are responsible for ensuring that each person connecting or managing a business page, organization, advertising account or similar resource through NGAZE:

  • Is authorized by the restaurant or organization;
  • Has the necessary administrative or content-management permissions;
  • Has authority to approve or publish content;
  • Uses connected-account information only for lawful business purposes; and
  • Complies with the connected service’s applicable terms and policies.

A user’s ability to manage or publish to a connected account may end when the user loses the relevant role, revokes authorization or disconnects the integration.

4.5 Authorization tokens

NGAZE may securely store access tokens, refresh tokens or similar authorization credentials where necessary to maintain an authorized connection.

We use these credentials only to provide the integration features authorized by the user.

We do not publicly display authorization credentials or disclose them to unrelated third parties. We use reasonable security measures designed to protect credentials against unauthorized access, disclosure, alteration or misuse.

4.6 Disconnecting an integration

Users may disconnect a third-party service through applicable NGAZE integration settings, where available, or by contacting us.

Users may also be able to revoke NGAZE’s access through the privacy, security or application settings provided by the third-party service.

After an integration is revoked or disconnected:

  • NGAZE will stop making new requests using the revoked authorization;
  • Scheduled activity associated with that authorization may no longer be completed;
  • We will delete or de-identify information when required by the third party’s terms, applicable law or our retention practices;
  • Some records may be retained temporarily in backups, security logs or compliance records; and
  • Content already published to the third-party service may remain there unless separately deleted from that service.

Disconnecting an integration from NGAZE does not automatically delete content already published to a third-party platform.

4.7 Integration data restrictions

We do not use information received through third-party APIs to:

  • Sell account-holder or member information;
  • Build unauthorized profiles of third-party platform users;
  • Scrape or obtain information outside approved interfaces;
  • Circumvent platform privacy settings;
  • Access information without required authorization;
  • Transfer information to unrelated third parties for their independent use; or
  • Use integration data for purposes prohibited by the connected platform’s agreements or policies.

Our use of information received from a connected service is also subject to that service’s applicable terms, developer requirements and privacy policies.

Third-party platforms are independent services. Their collection and use of information are governed by their own privacy policies and terms.

5. Restaurant Marketing and CRM Data

Restaurant customers may upload, collect, generate or connect information through NGAZE, including:

  • Customer names;
  • Email addresses;
  • Telephone numbers;
  • Communication preferences;
  • Consent and opt-out records;
  • Customer segments;
  • Visit or transaction information;
  • Order information;
  • Review information;
  • Campaign engagement;
  • Loyalty or customer-relationship information; and
  • Other restaurant customer information.

Restaurant customers are responsible for ensuring that they have a lawful basis and any necessary consent to collect, upload and use this information.

Restaurant customers must not use NGAZE to send communications that violate applicable privacy, marketing, telephone, text-message, anti-spam or consumer-protection laws.

6. How We Use Information

We may use information to:

  • Provide and operate the Services;
  • Create and administer accounts;
  • Authenticate users;
  • Configure restaurant locations and connected accounts;
  • Provide customer support;
  • Process transactions;
  • Communicate about accounts, services and security;
  • Provide requested demonstrations, reports or assessments;
  • Create, schedule, distribute and measure marketing content;
  • Manage restaurant websites, menus, offers and business information;
  • Manage customer relationships and communication preferences;
  • Provide review-management and reputation-management functionality;
  • Deliver email, social-media or other authorized communications;
  • Generate analytics and performance reports;
  • Personalize and improve the Services;
  • Develop new functionality;
  • Detect and prevent fraud, abuse and security incidents;
  • Maintain logs and diagnose technical problems;
  • Enforce contracts and policies;
  • Comply with legal obligations;
  • Establish, exercise or defend legal claims; and
  • Send marketing communications where permitted by law.

We may aggregate or de-identify information so that it no longer reasonably identifies an individual. We may use aggregated or de-identified information for analytics, benchmarking, product development and business purposes.

7. Artificial Intelligence

NGAZE may use artificial-intelligence systems to assist with functions such as:

  • Drafting marketing content;
  • Suggesting campaign ideas;
  • Generating or modifying images;
  • Analyzing website or search visibility;
  • Summarizing reviews;
  • Drafting review responses;
  • Categorizing information;
  • Identifying marketing opportunities;
  • Creating performance insights; and
  • Assisting customer-support or operational workflows.

Information submitted to an AI-powered feature may be processed by NGAZE and by contracted technology providers used to provide that feature.

We seek to limit information shared with AI providers to what is reasonably necessary for the requested function. Users should not submit sensitive personal information, complete payment-card information, medical information, government identification numbers or other unnecessary confidential information into generative-AI prompts.

AI-generated output may be inaccurate, incomplete or unsuitable. Restaurant customers are responsible for reviewing and approving content before it is published or relied upon.

We do not use information received through third-party APIs to train general-purpose AI models unless that use is expressly permitted by the applicable third-party platform, authorized by the affected user and permitted under applicable law.

Information received from integrations will be used only in connection with approved and authorized NGAZE functionality.

8. Cookies and Similar Technologies

NGAZE and its service providers may use:

  • Cookies;
  • Pixels;
  • Tags;
  • Local storage;
  • Software development kits; and
  • Similar technologies.

These technologies may be used for:

  • Essential website functions;
  • Authentication;
  • Security;
  • Remembering preferences;
  • Analytics;
  • Measuring performance;
  • Understanding website usage;
  • Marketing attribution; and
  • Advertising, where permitted.

Browser settings may allow you to block or delete cookies. Blocking essential cookies may prevent parts of the Services from operating correctly.

Where required, we provide choices concerning nonessential cookies through a cookie notice or preference tool.

9. Email and Marketing Communications

We may send administrative and service-related messages concerning:

  • Accounts;
  • Billing;
  • Security;
  • Integrations;
  • Product changes;
  • Support requests; and
  • Service availability.

These communications may be necessary to provide the Services.

We may also send promotional communications where permitted by law. You may unsubscribe from promotional emails using the unsubscribe link in the message or by contacting us.

Unsubscribing from promotional communications will not prevent us from sending necessary transactional, account, security or service communications.

10. How We Disclose Information

We may disclose information to the following categories of recipients.

Service providers

We may use service providers that assist with:

  • Cloud hosting;
  • Data storage;
  • Website operation;
  • Security;
  • Authentication;
  • Analytics;
  • Payment processing;
  • Customer support;
  • Email and message delivery;
  • Marketing automation;
  • Artificial intelligence;
  • Error monitoring;
  • Scheduling;
  • Content delivery; and
  • Other business operations.

These providers are authorized to process information only as necessary to provide services to us, subject to applicable contracts and legal obligations.

Connected platforms

When a user connects or directs us to interact with a third-party platform, we may send information to and receive information from that platform as necessary to provide the requested integration.

Connected platforms may include social-media, search, advertising, restaurant, ordering, point-of-sale, communications, analytics and marketing services selected by a restaurant customer.

Restaurant customers and authorized users

Information associated with a restaurant account may be accessible to that restaurant’s authorized administrators, employees, agencies, contractors or other users.

Business transfers

Information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, sale of assets or similar business transaction, subject to applicable law.

Legal and safety purposes

We may disclose information when we reasonably believe disclosure is necessary to:

  • Comply with law, regulation, court order or legal process;
  • Respond to a lawful government request;
  • Protect the rights, property or safety of NGAZE, our customers or others;
  • Investigate fraud, abuse or security incidents;
  • Enforce our agreements; or
  • Establish, exercise or defend legal claims.

With permission

We may disclose information for another purpose when the individual or restaurant customer authorizes or directs us to do so.

11. Sale and Sharing of Personal Information

We do not sell personal information in exchange for money.

Some privacy laws define “sale,” “sharing” or “targeted advertising” broadly enough to include certain uses of analytics, advertising cookies or similar technologies.

Where applicable, we provide legally required choices regarding these activities. Users may also control certain cookies through our cookie-preference tool and browser settings.

We do not sell information received through third-party APIs or provide such information to data brokers.

12. Data Retention

We retain information for as long as reasonably necessary to:

  • Provide the Services;
  • Maintain an active customer relationship;
  • Fulfill the purpose for which the information was collected;
  • Maintain security and transaction records;
  • Comply with legal, accounting and contractual obligations;
  • Resolve disputes; and
  • Enforce agreements.

Retention periods vary depending on the type of information, the relevant feature and applicable legal or contractual requirements.

When information is no longer required, we may delete, aggregate, de-identify or securely dispose of it.

Information may remain temporarily in encrypted backups or disaster-recovery systems until those systems are overwritten through normal retention cycles.

Information received through third-party integrations is retained only as permitted by the applicable platform’s terms and our approved use case. We delete or refresh integration information when required by the platform, when authorization is revoked or when the information is no longer necessary for the authorized feature, subject to limited legal, security and backup exceptions.

13. Data Security

We use reasonable administrative, technical and organizational safeguards designed to protect information against:

  • Unauthorized access;
  • Unauthorized disclosure;
  • Loss;
  • Misuse;
  • Alteration; and
  • Destruction.

These measures may include access controls, authentication procedures, encryption, monitoring, logging, backups and employee or contractor confidentiality requirements.

No method of internet transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their login credentials and for notifying us promptly of suspected unauthorized account activity.

14. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • Request access to personal information;
  • Request correction of inaccurate information;
  • Request deletion of information;
  • Obtain a portable copy of certain information;
  • Restrict or object to certain processing;
  • Withdraw consent where processing is based on consent;
  • Opt out of certain targeted advertising;
  • Opt out of the sale or sharing of personal information;
  • Appeal the denial of a privacy request; and
  • Receive information without unlawful discrimination for exercising a privacy right.

We may need to verify your identity before completing a request. We may also need to verify that an authorized agent has permission to submit a request.

When we process information solely on behalf of a restaurant customer, we may refer the request to that restaurant or ask the requester to contact the restaurant directly.

To submit a privacy request, contact:

Email: info@ngaze.ai
Mail: The Digital Restaurant, 1444 N. Farnsworth Avenue, Suite 100, Aurora, Illinois 60505, United States

We will respond within the period required by applicable law.

15. International Users and Data Transfers

NGAZE is based in the United States.

Information may be processed in the United States and in other countries where NGAZE, its affiliates or its service providers operate. These countries may have privacy laws that differ from those in your jurisdiction.

Where required, we use appropriate safeguards for international transfers of personal information.

Users located in the European Economic Area, United Kingdom or another jurisdiction with similar requirements may have rights concerning access, correction, deletion, restriction, objection, portability and withdrawal of consent.

Depending on the processing involved, our legal bases may include:

  • Performance of a contract;
  • Legitimate business interests;
  • Compliance with legal obligations; and
  • Consent.

16. Children’s Privacy

The Services are designed for businesses and are not directed to children under 13.

We do not knowingly collect personal information directly from children under 13. If we learn that we have collected such information without appropriate authorization, we will take reasonable steps to delete it.

17. Third-Party Services and Links

The Services may contain links to or integrations with third-party websites, applications and platforms.

Third parties operate under their own privacy policies and terms. This Privacy Policy does not govern a third party’s independent collection, use or disclosure of information.

We encourage users to review the privacy policies and settings of connected services before authorizing an integration.

18. Account and Integration Responsibilities

Restaurant customers and authorized users are responsible for:

  • Providing accurate account information;
  • Protecting their login credentials;
  • Limiting access to authorized personnel;
  • Removing users who should no longer have access;
  • Maintaining appropriate permissions for connected services;
  • Reviewing content before publication;
  • Honoring customer communication preferences;
  • Obtaining legally required consent; and
  • Using the Services in compliance with applicable law and third-party platform terms.

Restaurant customers must promptly disconnect accounts or notify NGAZE when an individual is no longer authorized to act on their behalf.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to the Services;
  • New integrations or features;
  • Changes to our data practices;
  • Legal or regulatory developments; or
  • Security and operational requirements.

The updated policy will be posted with a revised “Last Updated” date.

Where required by law, we will provide additional notice or obtain consent before a material change takes effect.

20. Contact Us

Questions, concerns or privacy requests may be directed to:

NGAZE / The Digital Restaurant
1444 N. Farnsworth Avenue, Suite 100
Aurora, Illinois 60505
United States

Email: info@ngaze.ai
Telephone: (877) 461-0422
Website: https://ngaze.ai