NAARU Privacy Policy

Effective Date: January 1, 2026 Last Updated: January 1, 2026

1. Who We Are

NAARU ("NAARU," "we," "our," or "us") is a restaurant analytics and operations intelligence platform. We provide video-based operational analytics, staffing insights, and related services to restaurant operators ("Clients") through our software platform.

This Privacy Policy describes how we handle information in connection with our platform and website (naaru.ai).

Note for restaurant operators: If you are a business using NAARU's services, your use of the platform is governed by your Master Services Agreement and Data Processing Agreement, not this page. This policy is directed at visitors to our website and end users.

2. What Data We Collect

2a. Data Processed on Behalf of Clients (B2B)

When restaurant operators use our platform, we process the following categories of data on their behalf and under their instruction:

• Video footage, still frames, clips, and visual recordings from cameras at enrolled locations
• Operational metadata: timestamps, camera identifiers, location identifiers, event markers, and system logs
• Derived analytics: occupancy counts, guest counts, staffing ratios, flagged event records, and region activity data
• Authorized User account data: login credentials, authentication records, usage logs, and support communications
• Operational event history data (where enabled under a specific Order Form)

We do not perform facial recognition, facial verification, or biometric identification unless separately and expressly enabled in a signed written amendment.

Guest and visitor data: NAARU does not perform person tracking, re-identification, or persistent profiling on general guests or visitors. Person re-identification is applied only to flagged operational events for the limited purpose of identifying potential repeat offenders as configured by the restaurant operator. No guest profiles, movement histories, or behavioral records are created or retained.

2b. Data We Collect Directly (Website Visitors)

When you visit naaru.ai, we may collect:

• Contact information you voluntarily provide (e.g., name, email, company name via contact forms)
• Basic usage data: browser type, IP address, and pages visited via server-side logs

3. How We Use Data

We use data to:

• Provide, operate, maintain, and improve the NAARU platform and services
• Generate operational analytics, alerts, dashboards, and reports for Clients
• Detect events and anomalies as configured by Clients
• Respond to support requests and communications
• Monitor platform security, performance, and availability
• Create aggregated and de-identified data for benchmarking and service improvement (this data cannot identify any individual or Client)
• Comply with applicable law

We do not sell or share Client Personal Data for cross-context behavioral advertising or any other purpose not described in our agreements.

4. Data Retention

Unless otherwise specified in a Client's Order Form or written configuration:

Upon expiration or termination of services, Client Personal Data is deleted or rendered inaccessible within a commercially reasonable period, except where retention is required by law or reasonably necessary for backups, dispute resolution, or enforcement of legal rights.

5. Who We Share Data With

We do not sell your data. We may share data with:

• Subprocessors: Third-party service providers who help us deliver the platform (e.g., cloud infrastructure, storage). We impose contractual data protection obligations on all subprocessors. You may request our current subprocessor list by contacting us.
• Legal compliance: We may disclose data if required by law, court order, or governmental authority, with notice to the Client where legally permitted.
• Business transfers: In connection with a merger, acquisition, or sale of assets, data may be transferred subject to equivalent protections.

6. Security

We maintain commercially reasonable administrative, technical, and organizational safeguards designed to protect data against unauthorized access, acquisition, disclosure, alteration, or destruction.

In the event of a confirmed security incident affecting Client Personal Data, we will notify the affected Client without undue delay, along with available information about the nature of the incident and steps taken to contain and remediate it.

7. Cookies

This website does not use cookies or third-party tracking technologies. We do not track visitors across websites or serve behavioral advertising.

8. Your Rights

Depending on your location, you may have rights under applicable law including the right to:

• Access, correct, or delete your personal data
• Object to or restrict certain processing
• Request data portability
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at: [email protected]

Note for individuals appearing in restaurant footage: Requests from employees, guests, or other individuals regarding footage collected at a restaurant location should be directed to the restaurant operator. NAARU processes this data on the operator's behalf and under their instruction.

9. Children

Our platform is not directed to individuals under 18. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to Clients with at least 30 days' notice. The "Last Updated" date at the top of this page reflects the most recent revision.

11. Contact Us

NAARU 2332 N Brandon Cir, Wichita, KS 67226 Email: [email protected] Website: naaru.app

NAARU is a sole proprietorship operating in Kansas.