Legal

Privacy policy

Last updated November 6, 2026

This policy explains how Cloche ("we", "us"), a product of Amiya Solutions LLC, collects, uses, shares and protects information. It covers this website, the Cloche point-of-sale platform, the Cloche hub box installed in restaurants, and our tablet and phone apps (together, the "Service"). The Service is intended for customers in the United States, and information is processed and stored in the United States.

Our role

Website visitors and account holders. For information from people who visit this site, contact us, or sign up for Cloche (including the owners and managers who create an account), we decide how the information is used, and this policy applies directly.
Restaurant staff and diners. Restaurant managers create staff accounts, and restaurants' customers place orders and make reservations. For this information we act as a service provider for the restaurant, which decides how it is used. If you are a restaurant's customer or employee and have questions about your data, please contact that restaurant first. We will help the restaurant respond to you.

What we collect

What you send us. On our Contact form and when you sign up: your name, work email address, phone number, restaurant name and address, whether you're replacing a system or opening a new restaurant, how soon you want to start, and any message you add.
Account and staff setup. Names, job titles, business addresses, billing contacts, sign-in credentials, PIN codes, and the permissions managers give their staff.
Orders and reservations (for restaurants). A diner's name, phone number and, for delivery, address, with the order details.
The app and hub box. The Cloche app uses the internet and your restaurant's local network to reach Cloche and to find the hub box and other devices in the restaurant. The app doesn't currently ask for access to your location, camera, Bluetooth, contacts or notifications. If a future version needs one, it will ask you first and we'll update this policy. The hub box keeps the restaurant running when the internet is down and syncs with Cloche when it returns; we collect its serial number and IP address to identify it and keep it secure.
Audit trail. User IDs, staff actions (such as voiding a ticket or changing a menu), and timestamps, kept so managers can review who did what in their account.
Technical information. IP address, browser or device type, operating system and app version, and the page you came from, used to keep the Service secure, prevent spam and abuse, and keep each restaurant's data separate from others'.

Payments, billing and tax

Cloche doesn't store full card numbers, expiration dates or security codes on our servers. Card payments are handled by Stripe, a PCI-DSS-compliant payment processor, under Stripe's own privacy policy. To manage subscriptions, invoices and sales tax, we share billing contact and subscription details with Chargebee (billing) and Anrok (sales tax).

How we use it

To provide, secure and support the Service, and to reply to your messages.
To process online orders and reservations for restaurants.
To keep audit trails so managers can review account activity.
To manage billing, subscriptions and tax.
To sign users in and enforce permissions.
To prevent fraud, spam and misuse, and to meet legal obligations.

We don't sell personal information, and we don't share it for advertising across other sites. We use sensitive personal information only to provide the Service.

Who we share it with

Service providers handle information only on our behalf and only as needed:

Amazon Web Services: hosting, databases, storage, sign-in (Cognito) and email delivery.
Stripe: card payments.
Chargebee and Anrok: subscription billing and sales tax.
Cloudflare: a robot check on our forms, and web security.
Google Workspace: support email and demo scheduling.

We may also disclose information when the law requires it, or to protect the rights and safety of Cloche, our customers or the public. If Cloche or Amiya Solutions LLC is part of a merger, acquisition or sale of assets, information may be transferred as part of it, and we'll tell you if it becomes subject to a different privacy policy.

Cookies

This website doesn't use advertising or tracking cookies, and we don't use third-party analytics. We use only essential cookies and similar storage for sign-in sessions and for the Cloudflare robot check on our forms. Because we don't sell or share personal information for advertising, there is nothing to opt out of. We treat a Global Privacy Control signal or "Do Not Track" setting the same as everyone else's: we don't track you across other sites.

How long we keep it, and deleting it

We keep personal information while your account is active and as needed for the purposes above. After an account closes, we keep billing and tax records for as long as the law requires (generally up to seven years), and we delete or anonymize other account data within 30 days of a verified request. Audit logs are kept while the restaurant's account is active. Encrypted backups are overwritten on a rolling cycle, so deleted data can remain in backups for up to 35 days. Contact-form messages are kept as long as we need them to respond and for our records.

To ask us to delete your account or data, use our privacy request form. We may need to confirm your identity first.

Security

Sign-in: user authentication is managed with AWS Cognito.
In transit: traffic between apps, browsers and our servers is encrypted with TLS 1.2 or later.
At rest: databases, backups and storage holding account or audit data are encrypted with AES-256.

No method of transmission or storage is completely secure, so we can't guarantee absolute security. If a breach affects your information, we'll notify you and the authorities as the law requires.

Your rights

Depending on where you live, such as California, Texas, Virginia, Colorado or Connecticut, you may have the right to:

know and get a copy of the personal information we hold about you;
correct inaccurate information;
delete your personal information, subject to legal exceptions;
opt out of the sale or sharing of your information, or of targeted advertising (we do none of these); and
not be discriminated against for using these rights.

To make a request, use our privacy request form. We'll confirm your identity by matching what you tell us to what we hold, and respond within 45 days (we may extend once by another 45 days, and will tell you why). You may use an authorized agent to make a request for you; we may ask for proof of their authority. Requests about staff or diner data may be passed to the restaurant, as described under "Our role".

Appeals. If we decline your request, reply to our answer with the word "Appeal", or choose "Appeal an earlier answer" on the request form. We'll respond within 60 days and, if we deny the appeal, tell you how to contact your state attorney general.

Children

Cloche is a business product for restaurant owners and staff. It isn't directed to children, and we don't knowingly collect personal information from anyone under 16. If you think a child has given us information, contact us and we'll delete it.

Changes

We may update this policy from time to time. We'll post the new version here with a new "last updated" date, and we'll tell account holders by email or in the app when a change is significant.

Contact

Questions about this policy? Use our privacy request form or our Contact page.

Cloche is a product of Amiya Solutions LLC.