Privacy Policy

Scope

This policy applies to Crimini websites, mobile apps, restaurant workspaces, and connected temperature-monitoring services operated by NNS, LLC. A restaurant controls the business and employee records placed in its workspace. NNS, LLC processes those records to provide Crimini.

Data We Collect

Account and contact data: names, email addresses, phone numbers, login credentials, communication choices, business roles, and permissions.

Business and operational data: restaurant details, branding, schedules, availability, time-off requests, lists, recipes, tasks, announcements, menus, documents, reports, waste logs, and related activity.

Employee and onboarding data: profile details, address, date of birth, emergency contacts, employment forms, acknowledgements, identity-verification records, and payroll, tax, or bank information submitted through an employer's onboarding process. Some of this data is sensitive.

Billing data: plan, entitlement, renewal, transaction, and purchase-verification details. Apple, Google, or another authorized billing provider processes payment-card information; Crimini does not receive a complete payment-card number from app-store purchases.

Device and technical data: session and device identifiers, push-notification tokens, IP address, user agent, security and audit events, uploaded files, and temperature-sensor serial, temperature, humidity, battery, signal, gateway, and status data.

How We Use Data

We use data to create and secure accounts, provide tenant-scoped restaurant workspaces, process purchases and entitlements, deliver schedules and operational tools, support employee onboarding, deliver requested email, text, and push communications, operate sensor monitoring, maintain audit records, prevent abuse, troubleshoot failures, and improve service reliability.

Crimini does not use customer data for third-party advertising or cross-app tracking.

Business Access

Workspace owners and authorized managers may access employee and operational data according to their assigned permissions. Employees can access only the workspace and functions made available to them. A business may export or retain records when required for its employment, tax, safety, or other legal responsibilities.

Service Providers And Disclosure

We do not sell personal data. We disclose data only as needed to operate Crimini, including to Cloudflare for hosting, databases, file storage, security, and delivery; Resend for transactional email; Apple and Google for app distribution, purchases, and notifications; and professional or legal providers when necessary. We may also disclose information to comply with law, protect rights and safety, investigate misuse, or complete a business transaction subject to appropriate protections.

Retention

We retain information while an account or workspace is active and as needed to provide the service. Retention varies by record: operational readings may be kept for shorter periods, while billing, security, employment, tax, acknowledgement, and audit records may be retained longer when required by the business, law, or a legitimate security need. Data is deleted or de-identified when it is no longer needed, subject to backups and required retention.

Security

Crimini uses HTTPS, authenticated sessions, tenant-scoped access, role and permission controls, encryption for designated sensitive records, audit logging, rate limits, and restricted production access. No system can guarantee absolute security. Users must protect account credentials and report suspected unauthorized access promptly.

Choices And Rights

Users may update profile information and communication choices in Crimini. Depending on location, you may request access, correction, export, restriction, or deletion of personal data. Employment record requests may need to be handled by the restaurant that controls the workspace. We may verify identity and authority before completing a request.

Submit a deletion request through Account Deletion or contact support@criminiops.com. We do not discriminate for exercising applicable privacy rights.

Communications

Transactional messages may be sent for account security, invitations, onboarding, billing, and service operations. Optional email or text notifications are sent according to recorded consent and can be changed in account settings. Carrier message and data rates may apply to text messages.

Children And Processing Location

Crimini is a business service and is not directed to children under 13. Data may be processed in the United States and other locations where service providers operate, subject to applicable legal protections.

Changes And Contact

We may update this policy as Crimini changes. Material updates will be posted here and communicated when required. Questions may be sent to support@criminiops.com.