This Policy explains how Cornerstone Technology Systems, LLC, doing business as Ridge POS ("Ridge," "we"), collects, uses and shares information when you use the Ridge app, dashboard and website (the "Service"). It covers three groups: merchants and their staff who use Ridge; customers of those merchants; and visitors to our website.
1. Information we collect
From merchants and staff
- Account information: business legal name, trade name, entity type, address, phone, email, taxpayer identification number, owner names and dates of birth, and government ID where Stripe requires it for verification
- Bank account details for payouts and billing, and a card for subscription billing
- Staff names, roles, PINs (stored hashed), email addresses and hours
- Catalog, inventory, pricing, orders, sales, tips and reports you create in the Service
- Device information: device model, operating system, app version, IP address, approximate location (required by Apple and Stripe for contactless acceptance), and diagnostic logs
- Support communications
From merchants' customers (on behalf of the merchant)
- Name, phone number and email address when a customer gives them for a receipt, loyalty program, appointment or marketing
- Purchase history, tips and visit history at that merchant
- Card brand, last four digits and payment outcome; full card numbers are handled by Stripe and never stored by Ridge
From website visitors
- Pages viewed, referring site, browser and device type, and cookie identifiers described in Section 6
2. How we use information
- To provide the Service: process orders, accept payments through Stripe, send receipts, run reports, sync devices
- To verify identity and prevent fraud, abuse and prohibited use
- To bill subscriptions and add-ons
- To support merchants and respond to requests
- To improve the Service, including with aggregated and de-identified data
- To send merchants service notices and, with consent where required, marketing about Ridge
- To comply with law, card-network rules and legal process
We use customers' information only on the merchant's instructions and for the purposes above. We do not sell personal information and do not use customers' information to market to them on our own behalf.
3. How we share information
- Stripe, which processes payments, verifies merchants and holds funds, under its own privacy policy (stripe.com/privacy)
- Apple and Google, for app distribution and contactless acceptance on their devices
- Microsoft Azure, which hosts the Service in the United States
- Messaging providers that deliver receipts, notifications and marketing on merchants' behalf
- Analytics and error-monitoring providers, which receive usage and diagnostic data but not customer contact details
- The merchant whose register you used, for your purchase and contact information
- Professional advisers, successors and authorities when required by law, to protect rights and safety, or in a merger or sale
Each provider is bound by contract to use information only to provide its service to us. Our current list is at ridgeapp.app/subprocessors.
4. Your choices
- Merchants can view and update account information in Settings, export their data, and close their account. We keep data available for export for 90 days after closure.
- Customers can ask the merchant to correct or delete their information. Reply STOP to any marketing text or use the unsubscribe link in any marketing email; the Service honors these automatically. If you contact us directly, we will refer your request to the merchant and help them respond.
- Marketing from Ridge to merchants can be turned off in Settings or by the unsubscribe link.
- Location can be turned off in device settings, but contactless acceptance will not work without it.
5. Security
We protect information with encryption in transit and at rest, access controls, logging, and regular testing. Card data is handled by Stripe's and Apple's or Google's certified components and never enters our systems. No method is perfectly secure; tell us at security@ridgeapp.app if you believe your account has been compromised.
6. Cookies and analytics
Our website and dashboard use essential cookies to keep you signed in and analytics cookies to understand usage. You can block cookies in your browser; essential functions may stop working. We do not respond to browser "Do Not Track" signals because no standard exists, but we honor Global Privacy Control signals where the law requires.
7. Retention
We keep merchant account and transaction records for as long as the account is open and for seven years afterward, as tax, card-network and dispute rules require. Customer contact information is deleted 180 days after the merchant closes its account unless the merchant exports it sooner. Diagnostic logs are kept for 90 days.
8. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect information from children; a merchant that learns it has done so should delete it.
9. Where we operate
Ridge operates in the United States and stores information in the United States. At the Effective Date we serve merchants in Ohio. If we begin serving merchants in a state whose privacy law gives residents additional rights, we will add a section describing those rights.
10. Changes
We will post changes here and, for material changes, notify merchants by email or in the Service at least 30 days before they take effect.
11. Contact
Privacy questions: privacy@ridgeapp.app. By mail: Cornerstone Technology Systems, LLC, 5008 Farmhouse Road, South Bloomfield, OH 43103.