Privacy Policy
Last updated
Mise Services Inc. (“Mise”, “we”, “us”) is an Ontario corporation. This policy explains how we handle personal information when you visit miseservices.com (the “website”), use the Mise app at app.miseservices.com (the “app”), or deal with us by email or phone. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the provincial privacy laws that apply to us.
Mise is built for restaurant businesses, so most of what we handle is business information: supplier receipts, ingredient prices, recipes, sales. This policy covers the parts of it that identify a person, such as the names and contact details of owners and staff. How we treat your business data as a whole is set out in our Master Subscription Agreement.
1. What we collect
When you book a demo or contact us
Your name, your restaurant’s name, your email address and, if you give it, your phone number. The contact form also asks about your menu size, your point-of-sale system and anything you’d like to tell us.
With a demo request we also record some technical details: your IP address, your browser and device type, the campaign tags in the link you followed, and the click identifiers Meta or Reddit add when you arrive from one of their ads.
When you use the app
- Account details: your name, email address and password (stored in scrambled form by our sign-in provider, never as plain text), and your restaurant’s name and settings.
- Billing details: payments are handled by Stripe. We can see your billing name and email, your subscription status, and details like your card type and last four digits. We never see or store your full card number.
- What you put into Mise: photos of supplier receipts and invoices, supplier names, line items and prices, ingredients, recipes and portions, menu items and selling prices, sales data you upload or bring in from a connected point-of-sale system, and inventory counts. Receipt photos sometimes show personal details by accident, such as a driver’s name or a signature. We only use them to read the line items.
- Usage and device information: sign-in times, the features you use, errors, your IP address and browser type, recorded in our service logs so we can keep the app working and secure.
When you email or call us
What you tell us, and our replies.
2. How we use it
- To run Mise for you: reading your receipts, matching each line to your ingredients, working out what each dish costs, and producing your dashboard, reports and alerts.
- To send you service email: sign-in links, your weekly digest and monthly report, billing receipts, and notices about your account or changes to Mise.
- To bill you and keep the accounting and tax records the law requires.
- To answer your questions, give support, and set up your account or menu if you’ve asked us to.
- To keep Mise secure and to stop spam, fraud and abuse.
- To improve Mise, including the shared matching dictionary described in section 4.
- To follow up on a demo or contact request, and to measure which of our ads work (section 6).
We won’t use your information for a purpose that isn’t described here without asking you first.
3. How receipts are read
When you upload a receipt, the image and the text read from it are sent to Anthropic, the company that makes the Claude AI models. Claude reads the line items and suggests which of your ingredients each line matches. Anthropic does this as our service provider, and its commercial terms don’t allow it to train its models on what we send.
We don’t use your data to train AI models either.
4. The shared matching dictionary
Supplier receipts are full of shorthand: “CHKN BRST BNLS 4KG” is chicken breast. Once a match like that is confirmed, we may add the receipt wording, the ingredient it maps to and the supplier’s name to a dictionary that helps Mise read receipts for every restaurant that uses it. That’s how matching gets faster and more accurate over time.
The dictionary holds wording only. It doesn’t record which restaurant a line came from, and it contains none of your prices, quantities, recipes, sales or margins.
5. Who we share it with
We never sell personal information. We never share your costs, prices, recipes, supplier relationships or sales with other restaurants or with suppliers.
We share information only in these cases:
Service providers that run parts of Mise for us
They act on our behalf and are bound by contract to protect what we share with them.
| Provider | What they do for us |
|---|---|
| Supabase | Database, sign-in and file storage for the app |
| Vercel | Hosts the website and the app |
| Anthropic | AI that reads receipts and suggests ingredient matches |
| Stripe | Subscription billing and payments |
| Resend | Delivers our emails |
| Cloudflare | Protects our forms from bots |
| Web3Forms | Delivers contact-form messages to our inbox |
| Titan | Our business email |
If you connect your point-of-sale system (Square, for example), we receive sales data from it under the permissions you grant, and that system’s own terms and privacy policy apply to it.
Meta and Reddit, to measure our ads
See section 6.
People who advise us
Our accountants, lawyers and other professional advisers, who are bound to keep it confidential.
When the law requires it
For example, to respond to a court order or a lawful request from a government authority, or to protect the rights, property or safety of our customers, the public or Mise.
If Mise is sold or merged
If Mise is merged, sold or reorganized, your information may be transferred to the new owner, who must handle it in line with this policy. We’ll tell you if that happens.
6. Cookies, pixels and ad measurement
Our website uses:
- Vercel Web Analytics to count page visits. It doesn’t use cookies, and we can’t identify you from it.
- The Meta Pixel and the Reddit Pixel, small pieces of code from Meta (Facebook and Instagram) and Reddit. They set cookies in your browser and tell those platforms that someone visited our site, so we can measure our ads and show them to people likely to be interested. Meta and Reddit may combine this with what they already know about you, under their own privacy policies.
When you submit the demo form, we also send Meta and Reddit a hashed copy of your email address and phone number (and, to Meta, your name), together with your IP address, your browser type and their click identifiers, so they can tell us whether an ad led to your request. Hashing turns your details into a code that can’t simply be read back, but the platforms can match it to accounts they already have. They don’t receive anything you put into the app.
The app uses only the cookies it needs to keep you signed in and secure. It doesn’t use advertising pixels.
Your choices. You can block or delete cookies in your browser settings, use a browser or extension that blocks trackers, and change your ad settings in your Meta and Reddit accounts. The website works the same either way. If you’d rather your details not go to Meta and Reddit at all, email us at info@miseservices.com instead of using the demo form.
7. Email from us
Service email (sign-in links, reports, billing and account notices) is part of using Mise. We send marketing email only when the law allows it, for example after you’ve asked us about Mise or agreed to hear from us. Every marketing email has an unsubscribe link, and we act on unsubscribe requests within 10 business days.
8. Where your information is stored
Our main database is in the United States (northern Virginia), and most of our service providers process information in the United States. Information stored outside Canada is subject to the laws of the country where it’s held, and may be accessed by that country’s courts, law enforcement and national security authorities. We choose providers with strong security practices and contracts that protect your information.
9. How long we keep it
- Your account and everything you put into Mise: for as long as you subscribe. When your subscription ends, or your free trial ends without one, we keep it for 90 days so you can come back or ask for a copy, then delete it. Backup copies are overwritten on a regular cycle after that.
- Billing and accounting records: for as long as tax law requires, generally six years in Canada.
- Demo and contact requests: up to two years after our last conversation, unless you become a customer.
Entries in the shared matching dictionary (section 4) don’t identify you or your restaurant, and stay part of the service.
10. How we protect it
Every connection to Mise is encrypted, and our database provider encrypts data at rest. Each restaurant’s data is walled off from every other restaurant’s at the database level. Only the people at Mise who need access to support you have it.
No system is perfectly secure. If a breach of our safeguards creates a real risk of significant harm to you, we’ll tell you and report it to the Privacy Commissioner of Canada, as the law requires.
11. Your rights
You can ask us:
- what personal information we hold about you, and for a copy of it;
- to correct anything that’s wrong or out of date;
- to delete it, or to stop using it for a particular purpose, subject to legal and contractual limits (we have to keep billing records, for example);
- how it’s been used and who it’s been shared with.
Email info@miseservices.com. We’ll respond within 30 days, and we may need to confirm who you are first. Depending on where you live (in Quebec, for example), you may have further rights, such as receiving your information in a structured, commonly used format.
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Office of the Privacy Commissioner of Canada or to your provincial privacy regulator, such as the Commission d’accès à l’information in Quebec.
12. Staff and others in your account
If you give staff access to your account, or upload documents that name other people, you’re responsible for having the right to share that information with us. We handle it on your behalf under this policy and our Master Subscription Agreement.
13. Children
Mise is a business service and isn’t meant for anyone under 18. We don’t knowingly collect personal information from children.
14. Changes to this policy
If we change this policy, we’ll post the new version here with a new date. If a change is significant, we’ll tell customers by email before it takes effect.
15. Contact
Questions, requests and complaints go to our Privacy Officer, who is accountable for how Mise handles personal information:
Privacy Officer, Mise Services Inc. · info@miseservices.com