Privacy Policy — Wehanda

Sumiland & Sub Studio LLC (“Wehanda,” “we,” “us,” or “our”) operates the Wehanda platform at https://wehanda.comand related mobile and web applications (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service, and describes your privacy rights.

By using the Service you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use.

1. Who This Policy Covers

This policy applies to two groups of people:

Restaurant operators — businesses and individuals who sign up to use the Wehanda platform to manage their restaurant.
Restaurant customers — individuals who place orders, join loyalty programs, or otherwise interact with a Wehanda-powered ordering page.

2. Information We Collect

A. Information you provide directly

Account & profile data: name, email address, phone number, restaurant name, business address, and website when you register or update your profile.
Payment & billing data: credit or debit card details submitted when subscribing to a Wehanda plan. Card data is processed and stored by our payment processor (Square) and is never stored on our servers.
Restaurant configuration: menu items, hours, photos, pricing, tax settings, and loyalty program rules you enter into the platform.
Customer order data: name, email, phone number, and order details customers submit when placing an order through a Wehanda-powered storefront.
Loyalty & marketing preferences: birthday, anniversary, accumulated points, and whether a customer has opted in to marketing communications.
Feedback: written feedback customers submit through our private feedback form.

B. Information collected automatically

Usage data: pages visited, features used, timestamps, and referring URLs.
Device data: IP address, browser type, operating system, and device identifiers.
Cookies and similar technologies: we use session cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies.
Push notification tokens: if you grant permission for browser or app notifications, we store a device token to deliver alerts.

C. Information from third parties

Square: when you connect Square for platform billing, Square shares subscription status and billing events with us.
Stripe: when a restaurant connects Stripe to accept customer payments, Stripe returns a payment confirmation; we do not receive raw card data.
Google: when a customer clicks a “Leave a Review” link and completes a review on Google, Google’s own privacy policy governs that interaction.

3. How We Use Your Information

We use the information we collect to:

Create and manage accounts, process subscriptions, and provide the Service.
Process customer orders and payments on behalf of restaurants.
Operate loyalty programs — track points, send birthday rewards, and notify customers of milestones.
Send AI-generated marketing emails to restaurant customers who have explicitly opted in. Email content is personalized using Anthropic’s Claude AI and delivered via Resend.
Send transactional messages such as order confirmations, reservation updates, and review requests.
Analyze aggregate usage trends to improve the platform.
Prevent fraud, enforce our Terms of Service, and comply with legal obligations.
Respond to support requests and communications sent to us.

Marketing emails: restaurant customers only receive marketing emails if they explicitly opt in when placing an order or creating an account. Every marketing email includes an unsubscribe mechanism. Opting out removes you from future marketing sends for that restaurant.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

Service providers

We share information with trusted third-party vendors who help us operate the Service. Each is contractually required to protect your data:

Provider	Purpose
Supabase	Database hosting and authentication
Vercel	Application hosting and content delivery
Square	Platform subscription billing
Stripe	Per-restaurant customer payment processing
Resend	Transactional and marketing email delivery
Anthropic (Claude)	AI generation of personalized email content

Restaurant operators

When you place an order or join a loyalty program through a Wehanda-powered storefront, your name, email, phone number, and order history are visible to the restaurant operator who runs that storefront. That restaurant is responsible for their own use of your data under their own privacy practices.

Legal and safety

We may disclose information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of Wehanda, our users, or the public.

Business transfers

If Sumiland & Sub Studio LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service. Restaurant operators may request deletion of their account and associated data at any time by contacting us at support@simplidone.com.

Customer data associated with a restaurant (orders, loyalty points, marketing preferences) is retained for as long as the restaurant subscription is active. When a restaurant account is closed, associated customer data is deleted within 90 days.

Some information may be retained longer where required by law or for legitimate business purposes such as fraud prevention and financial record-keeping.

6. Cookies

We use strictly necessary cookies to maintain authentication sessions. We do not use advertising cookies or cross-site tracking cookies. You can disable cookies in your browser settings, but doing so will prevent you from signing in to the Service.

7. Your Privacy Rights

Depending on where you live, you may have the right to:

Access: request a copy of the personal data we hold about you.
Correction: ask us to correct inaccurate or incomplete information.
Deletion: request that we delete your personal information, subject to certain legal exceptions.
Opt-out of marketing: unsubscribe from marketing emails at any time using the link in any email, or by contacting us directly.
Data portability: request your data in a structured, machine-readable format.

To exercise any of these rights, email us at support@simplidone.com. We will respond within 30 days.

California residents: under the California Consumer Privacy Act (CCPA), you have additional rights including the right to know what personal information is collected, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

8. Children's Privacy

The Wehanda platform is intended for use by adults and restaurant businesses. We do not knowingly collect personal information from children under 13 years of age. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at support@simplidone.com and we will promptly delete it.

9. Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. However, no system is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

10. Third-Party Links

The Service may contain links to third-party websites such as Google Maps, your restaurant’s social media pages, or Google Business Profile. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or through a notice within the Service. Continued use of the Service after an update constitutes acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Sumiland & Sub Studio LLC (operating as Wehanda)

Arizona, United States

Email: support@simplidone.com

Website: https://wehanda.com