Privacy Policy

This Privacy Policy explains how Rio Grande Marketing Agency, LLC, operating as RiaRai ("RiaRai," "we," "us," or "our"), collects, uses, discloses, and retains personal information in connection with RiaRai websites, platforms, and services.

This Privacy Policy applies to RiaRai Site, RiaRai Order, RiaRai Book, riarai.com, and related RiaRai websites and subdomains that link to this Privacy Policy (collectively, the "Services").

It applies to:

Visitors to RiaRai websites;
Businesses that inquire about, purchase, or use RiaRai Services;
Customers who place orders through RiaRai Order;
Clients who request or schedule services through RiaRai Book; and
Other people who communicate with RiaRai.

This Privacy Policy does not automatically apply to a website owned and operated by a RiaRai Site client. That business may have its own privacy policy and is responsible for the information it collects through its website.

1. Information we collect

The information we collect depends on how you interact with the Services.

1.1 Website visits and inquiries

When you visit a RiaRai website, request information, submit a contact form, or communicate with us, we may collect:

Your name, email address, phone number, and preferred contact method;
Your business name, industry, location, website, and information about the services you are interested in;
The contents of messages, support requests, feedback, and other communications you send us; and
Information about how you learned about RiaRai.

1.2 Business and client information

When a business uses or purchases a RiaRai Service, we may collect:

The business's legal and public-facing names, addresses, phone numbers, email addresses, and website information;
The names, titles, and contact information of owners, employees, contractors, and authorized representatives;
Account credentials and access permissions;
Service selections, account settings, subscription or billing information, signed agreements, and support history;
Menu items, services, schedules, prices, policies, locations, staff information, and other content the business provides for use in the Services;
Payment-account identifiers, account connection status, transaction summaries, and related information received from Stripe or another payment provider; and
Technical, security, and usage information associated with the business account.

For RiaRai Site projects, we may also receive website content, logos, images, product or service information, domain and hosting information, and access to third-party accounts that the client authorizes us to use for the project.

1.3 RiaRai Order information

When you place or attempt to place an order through RiaRai Order, we may collect:

Your name and phone number;
The restaurant selected;
Items ordered, quantities, modifications, special instructions, prices, taxes, tips, fees, and complete order total;
Order status, acceptance or rejection, timestamps, pickup information, cancellations, substitutions, refunds, and customer-service records;
Payment authorization status, payment capture status, transaction identifiers, canceled authorizations, disputes, and refund information;
Text-message consent records, including the consent language presented, whether you selected the consent option, the date and method of consent, and opt-out or help requests; and
Communications you send to RiaRai or the participating restaurant through the platform.

1.4 RiaRai Book information

When you request or schedule a service through RiaRai Book, we may collect:

Your name, phone number, email address, and other contact information requested for the booking;
The participating business, service, provider, location, date, time, duration, price, deposit, fee, and booking status;
Booking requests, confirmations, changes, cancellations, rescheduling, late-arrival or no-show information, and refund records;
Notes, preferences, or other information you choose to provide in connection with the booking;
Payment authorization status, payment status, transaction identifiers, disputes, and refund information when payment applies;
Text-message consent records, including the consent language presented, whether you selected the consent option, the date and method of consent, and opt-out or help requests; and
Communications you send to RiaRai or the participating business through the platform.

Please avoid including sensitive personal information in an order or booking note unless the participating business requests it and it is reasonably necessary for the transaction.

1.5 Payment information

Payments are processed by Stripe or another disclosed payment provider. Depending on the Service, payment may be processed through RiaRai's account or a participating business's connected payment account.

RiaRai may receive limited payment and transaction information needed to authorize, capture, cancel, reconcile, dispute, or refund a payment. This may include the payment method type, card brand, last four digits, billing postal code, transaction identifier, payment status, and fraud or risk signals.

RiaRai does not receive or store your complete payment-card number or card security code.

1.6 Technical and usage information

When you use the Services, we and the providers that support the Services may automatically collect limited technical information, such as:

Internet Protocol address;
Browser, device, and operating-system information;
Pages or screens viewed and actions taken;
Referring page or source;
Dates, times, and approximate location derived from an IP address;
Cookie, local-storage, or similar identifiers; and
Application, security, error, and system logs.

2. Sources of information

We may collect personal information:

Directly from you;
From a business you represent;
From a participating restaurant or service business;
Automatically when you use the Services;
From Stripe, Twilio, hosting providers, analytics providers, security providers, and other vendors that support the Services;
From publicly available business sources; and
From another person when they place an order, make a booking, or communicate with us on your behalf.

3. How we use information

We may use personal information to:

Provide, operate, maintain, and improve the Services;
Respond to inquiries and provide proposals, onboarding, support, and account assistance;
Create and manage business accounts and service relationships;
Design, build, host, maintain, or support client websites as agreed;
Route orders and bookings to the participating business selected by the customer or client;
Allow participating businesses to review, accept, manage, fulfill, cancel, or refund transactions;
Authorize, capture, cancel, reconcile, and refund payments;
Provide confirmations, receipts, status information, reminders, support responses, and other transactional communications;
Send transactional text messages when a person has provided the required consent;
Record and honor text-message consent, opt-out, and help requests;
Personalize settings and remember preferences;
Diagnose errors, monitor performance, and improve reliability;
Protect the Services, users, and participating businesses from fraud, abuse, unauthorized access, and security incidents;
Enforce our Terms of Service and signed agreements;
Maintain transaction, consent, tax, accounting, support, and business records;
Comply with legal, regulatory, court, and law-enforcement requirements; and
Establish, exercise, or defend legal claims.

RiaRai does not use consent provided for transactional text messages to send marketing or promotional text messages.

4. Participating businesses

4.1 RiaRai Order and RiaRai Book

When you place an order or make a booking, RiaRai discloses information reasonably necessary to manage and fulfill the transaction to the participating restaurant or service business you selected.

Depending on the transaction, this may include your name, contact information, order or booking details, special instructions or notes, payment status, transaction status, communications, cancellations, refunds, and relevant history with that business.

The participating business is independently responsible for its products or services and for its use of personal information outside RiaRai. It may retain information for fulfillment, customer service, scheduling, accounting, legal compliance, dispute resolution, and other legitimate business purposes. Its own privacy policy may also apply.

Questions about a participating business's independent privacy practices should be directed to that business.

4.2 Websites operated by RiaRai Site clients

RiaRai may design, build, maintain, or support a website for a client business. Unless the website states otherwise, the client business owns or operates that website and determines why and how personal information submitted through it is used.

When RiaRai accesses or processes personal information for a Site client, we may do so on the client's behalf and as needed to provide the contracted services. The client is responsible for providing an appropriate privacy notice, obtaining any required consent, responding to privacy requests, and complying with laws that apply to its website and business.

This RiaRai Privacy Policy does not replace the privacy policy of a RiaRai Site client.

5. How we disclose information

We may disclose personal information to:

Participating businesses: The restaurant or service business selected for an order or booking.
Payment providers: Stripe or another disclosed provider for payment authorization, capture, fraud prevention, connected accounts, disputes, refunds, and transaction management.
Messaging and communications providers: Twilio and other providers that transmit or manage transactional messages and communications.
Hosting and technology providers: Vendors that provide cloud hosting, databases, content delivery, domain, email, analytics, monitoring, security, backups, customer support, and technical services.
Professional advisers: Accountants, attorneys, insurers, and other advisers when reasonably necessary for professional services or legal compliance.
Government and legal recipients: Courts, regulators, law enforcement, government agencies, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, property, users, participating businesses, or the Services.
Business transaction recipients: A potential or actual buyer, successor, lender, or adviser involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of the business, subject to appropriate confidentiality and legal protections.
Other recipients at your direction: A person or organization when you request or authorize the disclosure.

Service providers may process personal information only for the services they provide to RiaRai or as otherwise permitted by their agreements and applicable law.

6. Text messages and mobile information

When a separate text-message consent option is presented, you may choose to receive automated transactional text messages from RiaRai about an order or booking with the participating business you selected.

Messages may include order or booking confirmations, status updates, changes, cancellations, appointment reminders, and ready-for-pickup notifications, as applicable.

For RiaRai Order, message frequency is generally no more than two transactional messages per accepted order. For RiaRai Book, message frequency varies based on the status and needs of the booking.

Message and data rates may apply.

Reply STOP to opt out or HELP for help. You may also contact us at contact@riarai.com for assistance. After an opt-out request, one final message may be sent to confirm that the opt-out has been processed. No additional transactional text messages will be sent unless you provide consent again.

Opting out of text messages does not cancel an order or booking. After opting out, use the applicable confirmation page or account tools, or contact the participating business directly, for transaction updates.

Consent to receive text messages is optional and is not a condition of placing an order, making a booking, or purchasing a service. RiaRai does not send advertising or promotional text messages through this transactional messaging program.

Consent applies only to the RiaRai messaging program and the subject matter described when consent is requested. Consent is not sold, rented, or transferred to another business for its own messaging or marketing.

We do not share, sell, rent, or provide your mobile phone number or text-message consent information to third parties, affiliates, or lead generators for marketing or promotional purposes.

Mobile information may be provided to Twilio and other service providers only as necessary to deliver and manage the transactional messaging program, maintain consent and opt-out records, prevent abuse, troubleshoot delivery, or comply with law.

7. Cookies and similar technologies

RiaRai and the providers that support the Services may use cookies, local storage, pixels, and similar technologies to:

Keep the Services working;
Remember settings and preferences;
Maintain sessions and account security;
Understand how the Services are used;
Diagnose errors and measure performance; and
Prevent fraud and abuse.

You can usually control cookies through your browser settings. Blocking some cookies or storage technologies may affect the availability or function of parts of the Services.

If RiaRai later uses advertising or cross-site tracking technologies that require additional notice or consent, we will provide the controls required by applicable law.

8. Sale of personal information and targeted advertising

RiaRai does not sell personal information for money.

RiaRai does not use or disclose mobile phone numbers or text-message consent information for third-party marketing, promotional purposes, lead generation, or targeted advertising.

We do not currently disclose personal information for cross-context behavioral advertising as that term is defined under certain state privacy laws.

9. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

Provide and document the Services;
Maintain business accounts and service relationships;
Process and document orders, bookings, payments, cancellations, disputes, and refunds;
Provide support and resolve complaints;
Maintain tax, accounting, transaction, contract, and business records;
Detect and prevent fraud, misuse, and security incidents;
Establish, exercise, or defend legal claims;
Enforce our Terms and agreements; and
Comply with legal, regulatory, and contractual obligations.

Retention periods vary based on the type of information, the Service involved, the relationship with the user or business, and the reason the information was collected.

We retain evidence of text-message consent for at least as long as needed to document the consent and until the recipient withdraws it, and longer when reasonably necessary for legal compliance, dispute resolution, or enforcement.

Participating businesses, Stripe, Twilio, and other service providers may retain information under their own legal obligations and retention policies.

When personal information is no longer reasonably necessary, we may delete it, deidentify it, or retain it in a form that no longer identifies an individual.

10. Security

RiaRai uses reasonable administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No internet-based service or electronic storage system can be guaranteed to be completely secure. You are responsible for providing accurate contact information, protecting access to your own devices and accounts, and notifying us if you suspect unauthorized account activity.

11. Your choices and privacy requests

You may contact us to request access to, correction of, or deletion of personal information maintained by RiaRai.

Depending on where you live, you may have additional rights concerning your personal information, such as the right to obtain a copy, request correction or deletion, or limit or object to certain processing. We will respond to verified requests as required by applicable law.

We may need to verify your identity and authority before completing a request. We may deny or limit a request when an exception applies, including when information must be retained for transaction records, accounting, fraud prevention, security, dispute resolution, legal compliance, or the rights of another person.

A request submitted to RiaRai does not automatically delete information separately retained by a participating business, RiaRai Site client, Stripe, Twilio, financial institution, or another independent third party. Contact those organizations directly regarding information they independently maintain.

To stop receiving transactional text messages, reply STOP to a RiaRai message. You may reply HELP for assistance.

You may submit a privacy request by emailing contact@riarai.com with the subject line "Privacy Request."

12. Third-party services and links

The Services may link to or integrate with third-party websites, applications, payment providers, communications providers, social networks, maps, or other services.

RiaRai does not control the independent privacy practices of those third parties. Review their privacy policies before providing information directly to them.

13. Children's privacy

The Services are not directed to children under 13, and RiaRai does not knowingly collect personal information directly from children under 13.

A parent or legal guardian may place an order or make a booking for a minor. If you believe a child under 13 has provided personal information to RiaRai without appropriate authorization, contact us so we can review and address the matter.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with an updated "Last updated" date.

If a change materially affects how we use previously collected personal information, we will provide additional notice when required by law.

15. Contact us

For questions about this Privacy Policy, RiaRai's privacy practices, or a privacy request, contact:

Rio Grande Marketing Agency, LLC Operating RiaRai Email: contact@riarai.com