MealMatrix Inc. (“MealMatrix,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit mealmatrix.ai, use our web applications, dashboards, APIs, or related services (collectively, the “Services”), or otherwise interact with us.
This Policy is designed for users and customers in Canada and, more broadly, North America. We process personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws, and we honor applicable privacy rights for individuals in the United States and elsewhere in North America where those laws apply.
1. Who we are
The Services are operated by MealMatrix Inc., a company based in Canada. For privacy questions or requests, contact us at hello@mealmatrix.ai (subject line: “Privacy Request”).
2. Scope
This Policy applies to personal information we process about:
- Website visitors and prospective customers;
- Authorized users of customer accounts (for example, employees of restaurant brands and foodservice operators);
- Individuals who contact us by email, forms, or other channels; and
- Individuals whose information appears in customer-supplied or publicly available business data that we process to provide the Services.
This Policy does not apply to third-party websites, products, or services that link to or integrate with MealMatrix, which are governed by their own privacy practices.
3. Information we collect
3.1 Information you provide
- Account and profile data: name, work email, company name, role, password or authentication credentials, and preferences.
- Communications: messages, support requests, and contact-form submissions (including name, email, subject, and message content).
- Billing and commercial data: where applicable, billing contacts, invoicing details, and related records (payment card data, if any, is typically handled by our payment processors and not stored by us in full).
3.2 Information collected automatically
- Usage and device data: IP address, browser type, device identifiers, pages viewed, referring/exit pages, timestamps, and approximate location derived from IP.
- Cookies and similar technologies: session cookies, authentication cookies, and security/bot-protection tools used to operate and secure the Services.
3.3 Information from customers and public sources
Our Services analyze foodservice and brand performance data, which may include store/location metadata, point-of-sale or operational metrics supplied by customers, and publicly available customer reviews and related content from third-party platforms. That content may incidentally include personal information published by third parties (for example, a reviewer display name). We process such information only as needed to provide analytics and insights to our business customers.
3.4 Information from service providers
We may receive information from authentication, hosting, security, analytics, email, and other vendors that help us operate the Services (for example, identity providers used for single sign-on).
4. How we use personal information
We use personal information to:
- Provide, operate, maintain, and improve the Services;
- Create and manage accounts, authenticate users, and prevent fraud or abuse;
- Deliver analytics, reports, dashboards, and related insights to customers;
- Respond to inquiries and provide customer support;
- Send service, security, and administrative notices;
- Send marketing or product communications where permitted by law (including Canada's Anti-Spam Legislation (CASL)), with a clear way to unsubscribe;
- Comply with legal obligations, enforce our terms, and protect our rights; and
- Perform internal analytics, quality assurance, and product development.
We do not sell personal information. We do not use personal information to make automated decisions that produce legal or similarly significant effects about individuals without human involvement, except as otherwise disclosed and permitted by law.
5. Legal bases and Canadian consent principles
Under PIPEDA and similar Canadian laws, we collect, use, and disclose personal information with meaningful consent where required, or as otherwise permitted (for example, where necessary to fulfill a contract, protect vital interests, investigate fraud, or meet a legal obligation). For U.S. residents, we process personal information as described in this Policy and as permitted by applicable state privacy laws.
6. How we share information
We may share personal information with:
- Service providers / processors that host infrastructure, provide authentication, security (including bot protection), email delivery, analytics, or support tools, under contractual confidentiality and purpose limitations;
- Customers and their authorized users, when information is processed on a customer's behalf within the Services;
- Professional advisors (legal, accounting, insurance) under confidentiality obligations;
- Authorities or counterparties when required by law, court order, or to protect MealMatrix, our users, or the public; and
- Business transferees in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.
7. Cross-border transfers
MealMatrix is based in Canada. Personal information may be stored or processed in Canada, the United States, or other jurisdictions where we or our service providers operate. When information is transferred outside your province or country, it may be subject to the laws of that jurisdiction, including lawful access by foreign authorities. We use contractual and organizational safeguards appropriate to the sensitivity of the information.
8. Retention
We retain personal information only as long as reasonably necessary for the purposes described in this Policy, to provide the Services, to comply with legal and accounting requirements, to resolve disputes, and to enforce our agreements. Retention periods vary by data type and customer configuration. When information is no longer needed, we delete or de-identify it in accordance with our retention practices.
9. Security
We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure; you use the Services understanding that residual risk remains. Please use strong unique passwords and protect your account credentials.
10. Your privacy rights
10.1 Canada
Subject to limited exceptions under applicable law, you may request access to, correction of, or information about our use and disclosure of your personal information. You may also withdraw consent where consent is the basis for processing, subject to legal or contractual restrictions and reasonable notice.
10.2 United States and other North American jurisdictions
Depending on your place of residence, you may have rights to know, access, correct, delete, or obtain a portable copy of certain personal information, and to opt out of certain processing (such as targeted advertising, if we engage in it). We will not discriminate against you for exercising privacy rights.
10.3 How to exercise rights
Email hello@mealmatrix.ai with “Privacy Request” in the subject line. We may need to verify your identity before fulfilling a request. Authorized agents may submit requests where permitted by law, subject to verification. If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your applicable provincial/state privacy regulator.
11. Cookies and tracking
We use cookies and similar technologies that are necessary for authentication, security, load balancing, and remembering preferences. Where non-essential cookies or similar technologies are used, we will provide choices consistent with applicable law. You can control cookies through your browser settings; disabling certain cookies may affect Service functionality.
12. Children
The Services are intended for business use by adults. We do not knowingly collect personal information from children under 16 (or the higher age required in your jurisdiction). If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
13. Third-party links and content
The Services may link to third-party sites or display publicly available third-party content (including reviews). We are not responsible for the privacy practices of those third parties.
14. Changes to this Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be posted on this page and, where appropriate, communicated through the Services or by email. Continued use of the Services after an update constitutes acceptance of the revised Policy to the extent permitted by law.
15. Contact
MealMatrix Inc.
Email: hello@mealmatrix.ai
Web: https://mealmatrix.ai
Privacy Policy URL: https://mealmatrix.ai/privacy
This Policy is provided for transparency and compliance purposes. It does not create rights beyond those required by applicable law or your written agreement with MealMatrix, except as expressly stated.