Privacy policy
Last updated 15 September 2026
How Moreplan collects, uses and protects information about you and your restaurant.
Who we are
Moreplan is operated by Moreplan LLC, a Texas limited liability company (“Moreplan”, “we”, “us”). This policy explains what we collect, why, and what you can do about it. It applies to this website and to the Moreplan application.
Questions about this policy or about your data go to rb@moreplan.ai.
Information we collect
Information you give us. When you request a demo we collect your first and last name, email address, phone number and the name of your restaurant or group. If you become a customer we also collect billing contact details and the account information needed to set up your locations.
Information your restaurant uploads. To build floorplans, Moreplan processes reservation data, staff rosters, shift times, section assignments, rotation and cut history, and notes attached to a reservation. This can include personal information about your employees and your guests. Your restaurant is the controller of that data; we process it on your instructions as described in our agreement with you.
Information we collect automatically. Server logs recording IP address, browser and device type, pages viewed and timestamps, together with the cookies and similar identifiers described below.
Payment information. Card details are collected and stored by our payment processor, not by us. We receive only the last four digits, card brand and expiry so we can show you what is on file.
How we use information
We use the information above to:
- provide and operate the service, including generating floorplans and tracking rotation fairness;
- respond to demo requests and communicate with you about your account;
- send service messages such as billing notices, security alerts and changes to these terms;
- send marketing email and SMS where you have agreed, and measure whether it works;
- monitor, secure, debug and improve the service;
- meet our legal, tax and accounting obligations, and enforce our agreements.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
We do not use Customer Data uploaded by your restaurant to train machine-learning models that are made available to other customers. We do use aggregated, de-identified statistics that cannot reasonably be linked back to you, your staff or your guests to operate and improve the service.
SMS messaging
If you tick the SMS consent box on our demo form, we will text you about your demo request and product updates at the number you provide. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Opting out of marketing SMS does not stop service messages about an active account, such as billing or security notices.
We share your number with our messaging provider for the sole purpose of delivering those messages. We do not sell or rent it, and we do not share it with third parties for their own marketing.
Legal bases for processing (EEA and UK)
Where the UK GDPR or EU GDPR applies, we rely on the following legal bases: performance of a contract, to operate the service and administer your account; legitimate interests, to secure, debug and improve the service and to carry out business-to-business marketing you may object to at any time; consent, for SMS marketing and non-essential cookies, which you may withdraw at any time; and compliance with a legal obligation, for tax, accounting and lawful requests.
Sharing
We share information with:
- Service providers who host, secure, analyse or support the service — cloud hosting and storage, error monitoring and analytics, email and SMS delivery, payment processing, and customer support tooling. They act only on our documented instructions and are bound by written confidentiality and data protection terms. A current list of our sub-processors is available on request from rb@moreplan.ai;
- Integrations you connect, such as your reservation or scheduling system, and only to the extent that integration requires;
- Professional advisers and authorities, where we are legally required to disclose, or where disclosure is necessary to establish, exercise or defend legal claims;
- A buyer or successor, if we are involved in a merger, acquisition, financing or sale of assets — in which case this policy continues to apply to the information transferred.
Cookies and similar technologies
We use cookies that are strictly necessary to run the site and keep you signed in, and analytics cookies that tell us which pages are used and where people get stuck. Where consent is required, we ask for it before setting non-essential cookies, and you can change your mind at any time. You can also block or delete cookies through your browser settings, though parts of the application may stop working if you block the necessary ones.
We honour Global Privacy Control signals where our systems receive them.
Retention
We keep demo-request details for 24 months from your last interaction with us, unless you ask us to delete them sooner. For customers, floorplan history, rotation records and MoreScore™ archives remain available for export for 30 days after cancellation and are then permanently deleted from our production systems, with backups expiring on a rolling 35-day cycle. Billing and tax records are kept for as long as applicable law requires, typically seven years.
Security
We encrypt data in transit with TLS and at rest, restrict access on a least-privilege basis, require multi-factor authentication for administrative access, log and monitor activity, and review our providers periodically. We test changes before release and patch known vulnerabilities promptly.
No system is perfectly secure and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and any regulator within the timeframes the law requires.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to receive it in a portable format, to restrict or object to how we use it, and to withdraw consent at any time without affecting processing already carried out.
California residents may request disclosure of the categories and specific pieces of personal information collected, the purposes for collecting it and the categories of recipients, and may request deletion or correction. We do not sell or share personal information as the CCPA and CPRA define those terms, and we do not discriminate against anyone for exercising their rights.
To exercise any of these rights, write to rb@moreplan.ai. We will verify your identity before acting and respond within the period the applicable law allows. You may use an authorised agent where the law permits.
If your restaurant uploaded the data and you are one of its employees or guests, please contact the restaurant directly — it controls that data. Tell us and we will pass your request on to them.
International transfers
We are based in the United States and use service providers in the United States and elsewhere. Where we transfer personal information out of the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK Addendum where applicable, and supplementary technical and organisational measures. A copy of the relevant clauses is available on request.
Children
Moreplan is a business tool, is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We will post any change on this page and update the date above. Where a change is material we will give notice by email or in the product before it takes effect.
Contact
Moreplan LLC — rb@moreplan.ai. If you are in the EEA or UK and are not satisfied with our response, you also have the right to complain to your local supervisory authority.