Privacy Policy (Canada)

Effective October 18, 2026 · Version 2026-10-21.1

This Privacy Policy explains how Bite Wise ("Bite Wise," "we") collects, uses and shares personal information when you use the Bite Wise website and services as a customer or restaurant partner in Canada. It is written to meet the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, the private-sector privacy laws of Alberta, British Columbia and Quebec (including Quebec's Law 25). By creating an account you consent to the collection, use and disclosure of your personal information as described here; you can withdraw your consent at any time (Section 7), although we may then be unable to provide the service.

1. Information we collect

Account information: email address, user name and a securely hashed password (stored by our authentication provider, Supabase). For restaurant partners, business name, address, phone number, cuisine, map location, sales-tax rate, menus and photos.
Orders: items, quantities, prices, fees, taxes, pickup PIN, order status and timestamps.
Payment information: card numbers are collected and processed by our payment processor (Stripe) and never stored on Bite Wise servers. We store a processor reference and the card brand, last four digits and expiry date so you can recognise saved cards and receipts.
Payouts (restaurant partners): payouts are made through Stripe Connect. Stripe collects and verifies the partner's identity and bank account. Bite Wise stores only the Stripe account ID, whether payouts are enabled, and a masked description of the bank account (bank name and last four digits) for payout records.
Platform Credit: a ledger of credit issued to you, used on orders and returned, with dates and reasons.
Location: if you choose "Use my location," your browser shares your approximate location with us to show nearby deals. We use it for that search and do not store it on our servers. You can also search by city or postal code instead.
Where you are: the country, province or territory and city you give when you sign up, so we can show you the right terms and taxes.
Legal acceptances: which versions of our terms you accepted, when, and the IP address and browser used, as a record of your agreement.
Technical information: IP address, browser type and server logs needed to operate and secure the service.

2. How we use information

We use personal information to create and secure accounts; show deals; process orders, payment holds, charges and refunds; send receipts and service messages; let restaurants fulfil orders; prevent fraud and abuse (for example, limiting PIN and login attempts); comply with tax, accounting and other legal obligations; and improve the service. We do not sell personal information and do not use it for targeted advertising.

3. How we share information

With restaurants: when you order, the restaurant sees your user name, the order details and the order status, but not your email address or full card details.
With service providers: our payment processor (Stripe), our database, authentication and file storage provider (Supabase), and our hosting, email and map providers, only as needed to provide the service and under confidentiality obligations. Maps load tiles from a map provider (by default, OpenStreetMap), which receives your IP address when your browser requests map images.
For legal reasons: to comply with law, legal process or requests from government authorities (including the Canada Revenue Agency, Revenu Québec and provincial tax authorities for tax purposes), or to protect the rights, safety and property of users, restaurants or Bite Wise.
Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.

Information stored outside Canada. Bite Wise and several of its service providers (including Supabase, Stripe and our hosting provider) store and process information in the United States. While it is there, it is protected by contracts and security measures, but it may be accessed by courts, law enforcement and national security authorities of that country under its laws.

4. Cookies

We use essential cookies to keep you signed in (your authentication session). They are not used for tracking. Your browser's local storage may remember simple preferences such as list or map view and whether order sounds are on. We do not use advertising or analytics cookies.

5. Retention

We keep account information while your account is open. We keep order, payment and tax records for at least 7 years, as needed for accounting and tax obligations, and records of terms acceptance for as long as the agreement applies plus the applicable limitation period. Sign-in sessions expire automatically.

6. Security

We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, database row-level access controls, rate limiting and a payment processor certified to PCI DSS. No system is completely secure; please use a strong, unique password.

7. Your choices and rights

You can review and update your information, remove saved cards, and close your account. You may ask us to access, correct, export or delete your personal information by emailing support@bitewise.app. We will respond within 30 days and may need to verify your identity. We may keep information we are legally required to retain. We will not discriminate against you for exercising these rights.

You may withdraw your consent, subject to legal or contractual limits, and ask us how your information is used and shared. Our Privacy Officer is responsible for our compliance and can be reached at support@bitewise.app. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada or, where it applies, your provincial privacy commissioner (such as Quebec's Commission d'accès à l'information). We send service emails about your account and orders; we send promotional emails only with your consent, as required by Canada's Anti-Spam Legislation (CASL), and every one has a way to unsubscribe.

8. Children

The service is not directed to children. You must have reached the age of majority in your province or territory to create a customer account. We do not knowingly collect personal information from minors; if you believe we have, contact us and we will delete it.

9. Changes

We may update this Policy. We will post the new version with a new effective date and, for material changes, notify you and ask you to review it before continuing to use the service.

10. Contact

Bite Wise · Seattle, Washington · support@bitewise.app