Privacy Policy for Espressly Operators and services.

Introduction

We use information to operate, protect, and support Espressly services.

Espressly provides Square-connected ordering, analytics, support, communication, and operational tools for merchants and their teams. This policy applies when you use Espressly Operators, sign in to an Espressly account, receive support, or interact with Espressly-operated web and mobile services.

This policy does not control the privacy practices of merchants, Square, Apple, Google, or other third-party services. Those providers may have their own privacy policies when you use their products or sign-in options.

Information We Collect

The information we collect depends on how you use the service.

How We Use Information

We use information for access, support, security, and operational clarity.

• Provide access to Espressly Operators, analytics.espressly.co, merchant.espressly.co, mobile apps, and related services.
• Support merchants and operators, including troubleshooting, account help, and communication workflows.
• Protect accounts, review suspicious activity, maintain session integrity, and support audit logging.
• Review and manage device approval for operator tools and merchant-assigned devices.
• Send notifications, announcements, service messages, and operational updates.
• Prepare operational reporting, diagnostics, and service analytics that help us improve reliability and support.
• Power communication tools such as support messages, announcements, direct messages, and location-based operator notifications.

Messages and Support Data

Espressly may send service and support communications.

We may send support messages, product or service announcements, operator notifications, and email communications related to your account, assigned merchant locations, support requests, security, or service changes.

Some communications are transactional or operational and may be necessary to provide the service. Where optional preferences are available, you can manage them through the product, your account settings, or by contacting us.

Push Notifications

Push notifications use device registration to reach the right operator device.

If you enable push notifications, Espressly may register your device so we can send operator notifications, announcements, support updates, and location-based service messages. Device registration may include a push token or similar identifier provided by Apple, Google, or your device platform.

Notification preferences may be available in the app or account settings. You can also disable push notifications through your device settings. Disabling push notifications may not stop email, SMS, or service communications that are needed for account, security, or support purposes.

Security and Access Controls

We use authentication and access controls to protect accounts.

Espressly supports password-based sign-in and may support Google sign-in, Apple sign-in, or other approved authentication methods. Authentication information is used to verify identity, maintain sessions, protect accounts, and help prevent unauthorized access.

Espressly may use device approvals, access roles, location assignments, login records, and audit logging to support security and accountability. These measures help us review access, troubleshoot issues, and protect merchant and operator workflows.

Data Sharing

We do not sell personal data.

Espressly does not sell personal data. We may share information with service providers that help us operate, host, secure, analyze, support, or communicate through Espressly services. These providers are expected to use information only for the services they provide to us.

Information may also be visible to merchant owners, administrators, or team members when needed to manage assigned operators, locations, devices, support channels, or communications. We may disclose information when required by law, legal process, security needs, or to protect the rights and safety of Espressly, merchants, operators, or others.

Data Retention

We keep information for as long as reasonably needed.

We retain information while it is needed to provide Espressly services, support merchants, maintain security, meet legal or operational obligations, resolve disputes, and keep appropriate business records. Some audit, security, or transaction-related records may be retained after account access ends when necessary for safety, compliance, or recordkeeping.

When information is no longer reasonably needed, we may delete it, de-identify it, or retain it only in limited backup or archival systems for a reasonable period.

User Rights

You may have privacy rights based on where you live.

Depending on your location and the information involved, you may be able to request access, correction, deletion, portability, restriction, or objection related to personal information we process. We may need to verify your request and may be limited by legal, security, merchant recordkeeping, or operational requirements.

To make a privacy request, contact us at info@espressly.co. If your account is managed by a merchant, we may coordinate with that merchant when appropriate.

Children's Privacy

Espressly services are not directed to children.

Espressly services are intended for merchants, operators, team members, and business users. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Espressly, contact us so we can review the request.

Changes To This Policy

We may update this policy as Espressly services change.

We may update this Privacy Policy from time to time. When we make changes, we will update the Last Updated date on this page. If changes are material, we may provide additional notice through the service, email, or other reasonable communication channels.

Contact Us

Questions about this policy can be sent to Espressly.