Privacy Policy

Effective October 12, 2026

StreetKiosk is run by StreetKiosk LLC ("StreetKiosk", "we", "us"). This policy covers getstreetkiosk.com, app.getstreetkiosk.com, the kiosk, kitchen screen, admin and dashboard pages, the Help assistant, and our emails. Questions: [email protected].

Two kinds of people, two roles

Truck owners and their staff ("you") have an account with us. For your account details we decide what's collected and why, as described below.

Your customers place orders on your kiosks. Their order details belong to your business: we handle them only to run StreetKiosk for you, on your instructions, and you're responsible for telling your customers how you use them. If one of your customers asks us about their data, we'll pass the request to you.

What we collect

• Account details: the owner's and team members' email addresses and roles, and the password (stored only as a one-way hash by our sign-in provider).
• Business setup: business name and logo, trucks, tax settings, time zones, menu items, prices, photos you upload, stations, tablet names, and the email address for daily reports.
• Orders: what was ordered, prices, tax, tips, totals, payment status, time, the truck, and the first name a customer types on the kiosk (if your kiosk asks for one). For card orders we keep Square's payment and checkout IDs, never card numbers.
• Text receipts: when staff send a receipt from the kitchen screen, the phone number is used to send that text and then discarded. We keep only that a receipt was sent.
• Billing: your plan, trucks billed and subscription status. Stripe handles card details for your StreetKiosk subscription; we never see your full card number.
• Contact form and "Email a person": the name, email, business, number of trucks, phone and message you send us.
• Help assistant: the questions you ask and the answers. On the admin page, while you're signed in, the assistant can look at your own setup (trucks, tablets, menu, today's orders) to answer, read-only. It never sees passwords, tablet tokens, PINs or Square/Stripe keys.
• Security data: the bot check on public forms, and a one-way hash of your internet address for rate limits. Our hosting and database providers keep standard server logs for a short time.
• On tablets and browsers: each paired tablet keeps its own access token and settings in the browser's storage so it keeps working when the internet drops. We don't use advertising or analytics cookies.

How we use it

• To run the service: take orders, send them to your screens and your Square Terminal, show sales, email your daily report, and send text receipts you ask for.
• To run your account and billing, and to email you about it (sign-in links, invites, trial and payment notices).
• To answer your questions, by the Help assistant or by a person.
• To keep StreetKiosk secure and working: stopping abuse and bots, finding and fixing problems.
• To follow the law, including tax and accounting rules.

We don't sell personal information, share it for advertising, or use your business's sales to market to your customers.

Who helps us run StreetKiosk

We use these service providers. Each gets only what it needs to do its job for us:

• Supabase: database, sign-in and server functions.
• Cloudflare: website hosting and the bot check on public forms.
• Square: card payments, through your own Square account (under Square's own terms and privacy policy, which you agreed to with Square).
• Stripe: billing for your StreetKiosk subscription.
• Twilio: text receipts.
• Resend: email (reports, sign-in links, replies from us).
• Anthropic: the AI model behind the Help assistant. Conversations are sent to it to write answers; under its commercial terms it doesn't use them to train its models.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of StreetKiosk (in which case this policy keeps applying to it). These providers may process data in the United States.

How long we keep it

• Your account, setup and order history: while your account is open, so your reports and history keep working.
• After you cancel: you can still sign in to export your data. Ask us and we'll delete your business's data within 30 days, except records we must keep for tax, accounting or legal reasons.
• Contact form messages and Help conversations: as long as they're useful for answering you and improving the help, and deleted on request.

Your choices

• See and export: owners can download menus and orders as CSV files from the admin page.
• Correct: change your business details, menu and team on the admin page, or ask us.
• Delete: email [email protected] from your account's email address.
• Emails: account and billing emails are part of the service; we don't send marketing email unless you've asked for it, and every marketing email has a way to stop it.

Depending on where you live, you may have further rights over your personal information (for example, to know what we hold, to delete it, or to appeal a decision). Email us and we'll respond within 45 days. We won't treat you differently for asking.

Security

Connections are encrypted (HTTPS). Passwords, tablet tokens and PINs are stored only as one-way hashes; Square connection tokens are encrypted at rest. Each business's data is kept separate and only its own signed-in team and paired tablets can reach it. No system is perfectly secure: if something goes wrong that affects your information, we'll tell you as the law requires.

Children

StreetKiosk accounts are for businesses and adults. We don't knowingly collect personal information from children under 13 for any purpose of ours.

Changes

If we change this policy, we'll update the date at the top. For significant changes we'll email account owners before they take effect.

Contact

StreetKiosk LLC
208 NE Madison Ave
Elkhart, IA 50073
[email protected]