Toast - Local Restaurants

"Depending on the Services you use or the Websites you access, we may collect geolocation information from your device when location settings are enabled. For example, we may use this information to show you nearby restaurants in our mobile applications. Location data may be collected through GPS, Bluetooth, cellular or WiFi technologies."

Toast collects precise geolocation data through multiple technologies including GPS, Bluetooth, cellular, and WiFi, and shares this data with merchants, business partners, and service providers for advertising and personalization.

"In certain cases, we permit third-party advertising partners to use cookies, web beacons, and similar tracking technologies on our Websites, mobile applications, and within our Services to collect information about you and your activities for interest-based advertising or other targeted content. The information collected may be linked to your personal information, or may include personal information gathered over time and across different websites and online services. This information may be shared with ad networks and other content providers."

Toast enables third-party tracking across websites, apps, and devices, linking user activity over time and sharing it with ad networks for interest-based advertising and cross-context behavioral profiling.

"Toast may share personal information as part of providing the Services and for the purposes outlined in this Statement, including: With our Merchants and their Employees to provide the Services, fulfil your requests, and support the purposes described in this Statement... With our third-party business partners in order to provide, maintain, improve and expand our Services; With third-party integration partners selected by the Merchant or with whom you do business where Toast is instructed to share your information as part of the Services."

Toast shares personal information broadly with merchants, their employees, merchant management groups, business partners, integration partners, affiliates, and numerous service providers covering hosting, payment processing, marketing, advertising, analytics, and personalization.

"From time to time, we may update, change, modify or amend this Privacy Statement in order to comply with the applicable law or our changing business practices. Unless we are required by the applicable law to provide a prescribed form of notice and/or obtain consent, updated versions of this Statement may be posted on this website with additional communication. An archived version of our previous Privacy Statement can be found here. Please check this website and this Privacy Statement regularly for updates."

Toast reserves the right to change its privacy practices at any time, with no obligation to notify users beyond posting an updated version on their website, placing the burden on users to regularly check for changes.

"We retain personal information as long as reasonably necessary to provide the Services, carry out the purposes described in this Statement or as otherwise required in order to comply with our records retention periods (which reflect the applicable law). For example, we may retain information about users of our Services in order to comply with our legal and regulatory obligations or to protect our interests as part of providing the Services."

The general retention policy is vague ("as long as reasonably necessary"). Even where specific periods are given (e.g., 7 years after merchant relationship ends, 5 years of guest inactivity), these are lengthy, and Toast reserves the right to retain data even longer for legal claims or complaints.

"Information collected automatically by cookies, web beacons or other similar technologies may include: information about your device, such as your device type/model, number and device ID (e.g., MAC address); information about your browser, settings (e.g., language) and operating system; your internet protocol (IP) address (including, in some instances, your perceived location); unique advertising and related identifiers; transactional and purchase information; and browsing and usage activity, such as the referring domain, what websites/content you have viewed or actions you have taken on a particular website."

Toast automatically collects extensive device data including MAC addresses, unique advertising identifiers, browser fingerprint details, and detailed browsing activity across websites, going beyond what's needed for core restaurant POS functionality.

"In certain cases, depending on the nature of your request, there may also be residual information that will remain within our databases and other records, which, due to applicable law or as part of Services that are in the process of being carried out, will not be removed or changed. We will also retain information relating to your request for recordkeeping and compliance purposes."

Even after deletion requests, Toast retains residual data in databases and records. Deletion processes vary by user type, with some requiring contact through support portals or employers rather than offering direct self-service deletion.