Privacy Policy

What we collect

Restaurant accounts: business name, location and address, owner and staff contact details, and payment method (held by Stripe — we never see full card numbers).

Staff and employee data (entered by the restaurant): name, role, contact email, work schedules, time-clock punches and corrections, hours worked, pay rate and payroll calculations, task completions and any photos submitted as proof, and signed records or notices. If the restaurant turns on geofencing for a time-clock door, we store that door's coordinates and record whether a punch occurred inside the allowed area.

Guest QR scans: a hashed IP address, user agent, scan timestamp, and which review platform was selected. We never collect the identity or content of guest reviews — Google handles reviews on its own platform.

Whose data this is (restaurants and their staff)

When a restaurant uses standley to manage its staff, the restaurant is the party that decides what employee data is collected and why — in privacy terms, the restaurant is the controller of its employees' data, and standley acts as a service provider processing that data on the restaurant's instructions. If you are an employee and want to access, correct, or delete your information, contact your employer first; we will support their reasonable requests. standley uses employee data only to provide the service to that restaurant, to keep it secure, and to comply with law — never to sell it or to advertise to your staff.

If you are an employee, you can also delete your own account at any time from the Account screen in the app. Doing so permanently deletes your login and removes your personal contact details (such as your email address and phone number) from the restaurant's roster. Your employment records — hours worked, pay records, task completions, and documents you signed — remain with your employer, because employment law requires the employer to retain wage and hour records. Deleting your account does not affect those employer records; direct questions about them to your employer.

What we don't collect

We do not track customers across the web, do not use third-party advertising trackers on the scan page, and do not sell data. The customer scan page intentionally ships with the smallest possible footprint — every byte exists for a reason.

Sub-processors we rely on

We use a small set of trusted providers to run standley, and share only the data each one needs:

• Supabase — database, authentication, and file storage (hosts your account and staff data).
• Stripe — subscription billing and payment processing (handles card data; we never store full card numbers).
• Resend — transactional email (invites, account recovery, task alerts).
• Google — the Google Places API, used to read your restaurant's public review count and star rating; and Google's review platform, where guests submit reviews directly.
• Vercel — application hosting and delivery.

Each provider processes data on our behalf under its own terms and security commitments. We do not sell your data or share it with third parties for their own marketing.

How long we keep it

Guest scan logs are retained for 24 months, then deleted.

Time, attendance, and payroll records: because employment law requires employers to keep wage and hour records for several years (generally at least three to four years under the federal Fair Labor Standards Act; some records and some states require longer), standley retains these records for the life of your account so they remain available to you. We delete them when your account is permanently closed, unless you or the law require us to keep them longer. You remain responsible for keeping your own copy of any records the law requires you to retain.

Other business and staff records are kept for the life of your subscription and for 90 days after cancellation, then permanently deleted unless you ask us to remove them sooner or the law requires us to keep them.

Your choices and rights

Depending on where you live, you may have the right to access, correct, or delete personal data we hold about you, or to receive a copy of it. Restaurant account owners can manage most data directly in the app or by emailing us. If you are an employee, please direct requests to your employer, who controls your data; we will assist them. We will honor valid requests to the extent the law allows, keeping in mind that we may need to retain certain wage and time records to meet legal obligations. We do not sell personal data, and we do not use it for third-party advertising.

Contact

Privacy questions or deletion requests? Email hello@standley.app, or write to us at:

noonoo Inc. 13303 SW 135th Ave Miami, FL 33186