Legways Privacy Policy

This Privacy Policy explains how Legways collects, uses, stores, and protects information when you use legways.systems, including onboarding, dashboard, support, billing, account security, and related platform services.

Definitions

• A tenant is a restaurant business account approved to use Legways. Tenant data may include business onboarding details, dashboard activity, billing state, and storefront-related operational records.
• A tenant storefront is the customer-facing restaurant website or ordering experience connected to a tenant. The platform workspace is the Legways-controlled environment on legways.systems used for onboarding, account administration, support, security, and developer operations.

Information We Collect

• Restaurant application and onboarding information, including business details, owner details, requested subdomains, verification state, and review records.
• Account and authentication data, including provider links, password/reset events, session records, device metadata, and security or recovery actions.
• Support, operational, and audit records, including support tickets, onboarding review notes, approval decisions, and administrative changes.
• Billing and connected-account data needed to activate payments, manage subscriptions, operate platform services, and manage delinquency or retained-content workflows for add-ons.

How We Use Platform Data

• Review and approve restaurant onboarding applications.
• Secure accounts, investigate abuse, enforce platform policies, and manage recovery workflows.
• Provide dashboard access, support tools, add-ons, billing, notifications, and operational features.
• Maintain auditability for security, fraud prevention, compliance, and dispute handling.
• Apply add-on access restrictions, retained-content policies, delinquency review, and related enforcement decisions when billing obligations are not met.

Cookies, Sessions, and Devices

• We use essential authentication and session technologies to sign users in, maintain secure sessions, and protect dashboard access.
• We may store tenant-scoped cookie preferences, security/session data, and device or browser metadata to support platform operations and security controls.
• Platform and tenant cookie behavior may differ from tenant storefront customer-facing notices.

Notifications and Installed Experience

• When enabled, we may store device-level notification subscription details and related metadata needed to deliver platform or order-related notifications.
• Installed PWA or home-screen experiences may require device, session, and notification state to function correctly.

Sharing and Service Providers

• We use service providers for authentication, hosting, storage, payment processing, and operational infrastructure.
• We do not sell platform account data. We share information only as needed to operate the platform, comply with law, enforce policies, or protect users and the service.

Retention and Security

• We retain platform records only as long as needed for operations, security, legal obligations, billing, and dispute resolution.
• We use access controls, encryption in transit, operational logging, and administrative safeguards to protect platform data.