Privacy Policy

MAD Software ("we," "us," or "our") operates the integration and automation platform for multi-unit restaurant operators. This Privacy Policy describes how we collect, use, isolate, protect, and process data on behalf of our customers.

1. Scope and Customer Data Separation

We provide B2B integration services that move employee, schedule, payroll, and tip pool data between systems (e.g., HR platforms, Point of Sale systems, and scheduling engines). Under applicable laws:

• We act as a Data Processor: We process data solely under the direction of our restaurant operator customers ("Data Controllers").
• Zero Data Sharing: Every customer deployment is configured for absolute organizational isolation. We do not sell, rent, share, or cross-reference data belonging to one customer with any other organization or third party under any circumstances.

2. Information We Process

To perform our core integration services, we process the following categories of information as authorized by our customers:

• Employee Demographics: Name, work roles, pay rates, employee IDs, and location assignments.
• Work Schedule & Time Data: Shift times, scheduled hours, worked hours, punches, and locations.
• Tip & Financial Metrics: Declared credit card and cash tips, tip pool distributions, and auto-gratuity allocations.
• Portal Usage Info: Usernames, work emails, and immutable audit logs of actions taken within the MAD Software portal.

3. How We Use Information

We use processed information strictly to execute the automation services defined in our Statement of Work:

• Synchronizing employee data from HR/payroll systems to POS back offices.
• Pushing schedule files to POS environments for clock-in validation.
• Validating and format-transforming labor files to produce clean payroll exports.
• Aggregating and allocating tip pool shares to payroll earning codes.
• Creating immutable audit trails of payroll transactions for compliance and validation controls.

4. Data Security & Storage

Security is a foundational constraint of our platform. We employ enterprise-grade security protocols:

• Encryption: All portals and APIs require TLS encryption in transit. Data at rest is encrypted using standard industry-grade protocols.
• Access Governance: Single Sign-On (SSO) integration ensures access is governed by the customer's identity provider. Access is scoped to specific locations or concept brands using role-based controls.
• Secure SFTP: Batch file transfers to payroll and POS providers are conducted exclusively over secure SFTP connections.

5. Data Retention

We retain integration records, audit logs, and exception files only as long as necessary to perform our services, verify transaction history, or comply with the retention schedules requested by our customers.

6. Your Rights and Inquiries

Individual restaurant employees seeking to access, correct, delete, or limit the processing of their payroll or labor data should contact their employer (the restaurant operator) directly.

For questions or concerns regarding our privacy practices, please contact us at:

MAD Software Security & Compliance Team
Email: info@madsoftware.net