Statio Privacy Policy

Statio is a restaurant ordering and operating platform provided by DineIn Labs, LLC ("DineIn Labs," "we," "us," or "our"), a Delaware limited liability company. This Privacy Policy explains how we collect, use, and share information in connection with the Statio platform, the website at onstatio.com, and the ordering technology we provide to restaurants (collectively, the "Services").

1. Our Role: Controller and Processor

Statio operates in two distinct roles depending on whose information is involved.

We are the controller of information about restaurant operators and their staff who create and use Statio accounts, and of information about visitors to onstatio.com. This Privacy Policy governs that information.

We are a service provider / data processor for the personal information of diners who place orders through a Statio-powered ordering page. In that context, the restaurant is the controller and determines how diner information is used. We process that information on the restaurant's behalf and under its instructions. Each restaurant maintains its own diner-facing privacy policy, which governs the information you provide when ordering from that restaurant.

2. Information We Collect

Depending on how you interact with the Services, we may collect:

• Account and contact information — name, business name, email address, phone number, and login credentials for restaurant operators and staff.
• Billing information — billing contact and payment details necessary to administer subscriptions and equipment rentals (payment card processing is handled by our payment processors; we do not store full card numbers).
• Order and transaction information — processed on behalf of restaurants when diners place orders, including items ordered, order status, pickup or delivery details, and the mobile number used for order notifications.
• Usage and device information — information about how the Services are accessed and used, such as IP address, browser type, device identifiers, and pages viewed on onstatio.com.
• Communications — information you provide when you contact us for support or otherwise correspond with us.

3. How We Use Information

We use information to:

• provide, operate, maintain, and improve the Services;
• create and administer accounts, process subscriptions, and manage equipment rentals;
• process orders and send order-related notifications on behalf of restaurants;
• provide customer support and respond to inquiries;
• monitor, secure, and troubleshoot the Services and prevent fraud or abuse;
• comply with legal obligations and enforce our agreements.

We do not use diner information for our own marketing.

4. How We Share Information

We share information only as described below:

• Service providers (subprocessors) — vendors that perform services on our behalf, such as hosting, communications delivery, and payment processing, under contractual confidentiality and data-protection obligations.
• Restaurants — diner order information is shared with the restaurant fulfilling the order, which acts as the controller of that information.
• Legal and safety — when required by law, to enforce our terms, or to protect the rights, safety, and property of DineIn Labs, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of all or part of our business.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Text Messages (SMS)

DineIn Labs, LLC operates the Statio SMS program and is the registered sender of record (A2P 10DLC brand) for order-related text messages sent through the Statio platform on behalf of the restaurants that use it.

What the program sends. The program sends only transactional, order-related messages to customers who place an order through a Statio-powered ordering page. Message types include order confirmation, a link to track order status, ready-for-pickup notices, and alerts about delays, payment issues, or cancellations. The program does not send marketing or promotional messages.

How you opt in. You provide express consent to receive order status texts at checkout by affirmatively checking a consent box after entering your mobile number. Consent is not a condition of placing an order or of any purchase.

Message frequency and cost. Message frequency varies based on the status of your order. Message and data rates may apply.

How you opt out. You can opt out at any time by replying STOP to any message. After you opt out, you will receive one confirmation message and then no further order status texts. You can reply START to resubscribe.

Help. Reply HELP for assistance, or contact us at hi@dineinlabs.com.

Your mobile information is protected. No mobile information (including your phone number and SMS opt-in) will be shared with third parties or affiliates for marketing or promotional purposes at any time. We keep records of your consent and opt-out as required by law.

Carriers are not liable for delayed or undelivered messages. The SMS program terms are set out in this section.

6. Data Retention

We keep information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When you ask us to delete information for which we are the controller, we will do so unless we are required to retain it. For diner information we process on a restaurant's behalf, retention is directed by the restaurant.

7. Your Privacy Rights

Depending on where you live, you may have rights to:

• access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• port a copy of your information; and
• opt out of marketing communications and, where applicable, of any "sale" or "sharing" of personal information (note: we do not sell or share your information as those terms are defined by applicable law).

To exercise any of these rights with respect to information for which we are the controller, contact us at hi@dineinlabs.com. We will respond as required by applicable law, and you will not be discriminated against for exercising your rights. If we are unable to verify your identity, we may be unable to fulfill the request. If your request concerns information tied to a specific restaurant's orders, we will direct it to that restaurant as the controller.

8. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, access controls, and separation of each restaurant's data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Third-Party Links

The Services may link to third-party services (such as a delivery provider or map). Their privacy practices are governed by their own policies, not this one.

10. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent version. Material changes will be posted on this page.

12. Contact Us

If you have questions about this Privacy Policy or your information, contact:

DineIn Labs, LLC
208 Tracy Dr, Morganville, NJ 07751
Email: hi@dineinlabs.com