Privacy Policy
Last updated October 9, 2026
This is the plain-language version, and it is also the real version. Merci is provided by MerciApp LLC.
What we collect
Account details (name, email), the order emails you forward or paste, your recipe book, staffing schedules you upload, the crew details a manager adds (names, job titles, PINs, and the sign-in details crew choose), photos and documents the crew file through the portal, camera clips a manager asks for from a store box, and standard technical logs (IP address, timestamps) for security. If you write to us through the request-access or investor pages, we keep what you typed so we can reply.
Cookies
Merci sets one cookie to keep you signed in (merci_session for owners and managers, merci_crew for crew) and one that remembers which store you were looking at (merci_loc). There are no advertising or analytics cookies and no third-party trackers of any kind.
How it is protected
Recipe books and guest information (customer names, order summaries) are encrypted at rest with AES-256 using a key unique to your company. Our own staff see operational counts, never your recipes or your guests. Transport is TLS-only.
For every place Merci uses AI, what it sees and whether a person checks it, see How Merci Uses AI.
Processors we use
Anthropic (AI reading of the documents and photos you submit; not used for model training), Postmark (email delivery), Cloudflare (network security and inbound email), ElevenLabs (turns Merci's written replies into speech; receives only that text), Amazon (the optional Alexa skill; receives only the spoken question and Merci's answer), and our hosting provider, which runs the server and holds the encrypted database and backups. Each receives only what is necessary for its function.
Retention and deletion
Crew proof photos are deleted after 60 days; their fingerprints stay so the record still shows one was filed. Incident video is kept one year (five years when the incident is about an employee), a small version a second year, then the file is removed and the still and the record remain. Everything else is kept while your account is active. On request we delete your company and destroy its encryption key. Backups are kept at least 14 days.
Your rights
Access, correction, export, and deletion: email [email protected] and we will handle it. EU and UK users: we honor GDPR data subject requests on the same address.
Changes
When this policy changes, the date at the top changes and we tell account owners by email.