NX Restaurant, Inc.

Privacy Policy

Effective Date: March 27th, 2026
Published at: https://joinnx.com/privacy/
Version: 2.0

This Privacy Policy describes how NX Restaurant, Inc. ("NX," "we," "us," or "our") collects, uses, shares, and protects personal information in connection with the NX Restaurant platform, our websites, and related services (collectively, the "Services"). It also describes your rights with respect to your personal information and how to exercise them.

Please read this policy carefully. By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who This Policy Covers

NX Restaurant serves multiple groups of people, and this policy applies to all of them:

Partners and Dealers — businesses and individuals who have entered into an NX Partner Agreement or Referral Agreement with NX to resell or refer NX products and services;
End Users — restaurant operators, managers, and staff who use the NX Restaurant platform through a subscription;
Diners — individuals who interact with NX-powered features at restaurant locations, including loyalty programs, online ordering, gift cards, and payment processing; and
Website Visitors — individuals who visit joinnx.com or related NX web properties.

Where this policy applies differently to different groups, we say so explicitly.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you or your organization provides when:

Signing up for a Partner, Dealer, or End User account;
Completing onboarding or registration forms;
Enrolling in a restaurant loyalty program powered by NX;
Placing an order through NX-powered online ordering;
Purchasing or redeeming a gift card through the NX platform;
Contacting NX support through the Partner Portal or by email; or
Subscribing to NX marketing communications.

This information may include: name, email address, phone number, mailing address, business name, job title, payment information (processed through our payment partners — see Section 4.3), and loyalty account details.

2.2 Information Collected Automatically

When you use the NX platform or visit our websites, we may collect certain information automatically, including:

Device information (device type, operating system, browser type);
IP address and approximate location;
Usage data and interaction logs;
Session data collected through monitoring tools (see Section 6); and
Cookies and similar tracking technologies (see Section 6).

2.3 Information Collected Through Restaurant-Facing Features

When diners interact with NX-powered features at restaurant locations — including loyalty enrollment, online ordering, gift card purchase or redemption, and payment processing — NX may collect:

Name and contact information provided during enrollment;
Transaction history and purchase data;
Loyalty account activity; and
Online ordering preferences and history.

This information is collected on behalf of the restaurant operator and is also used by NX as described in Section 3.

2.4 Information From Third Parties

NX may receive personal information about prospective Partners and Dealers from third-party sources, including data providers, sign-up forms, and lead generation sources. NX uses this information solely for business-to-business marketing and sales outreach directed at restaurant industry professionals and potential partners.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Providing and Operating the Services

Creating and managing accounts for Partners, Dealers, and End Users;
Processing transactions and managing subscriptions;
Providing customer support through the Partner Portal and support channels;
Enabling loyalty, online ordering, gift card, and payment features for restaurant operators and their customers; and
Maintaining and improving the NX Restaurant platform.

3.2 Analytics and Platform Improvement

Analyzing platform usage to improve features, fix bugs, and optimize performance;
Using aggregated and anonymized transaction and behavioral data to improve our Services; and
Providing restaurant operators with anonymized benchmarking data. When a restaurant views a specific diner's profile, they may see that diner's average spend within their restaurant's category (e.g., quick service restaurants). This data is category-level only — individual restaurant names are never disclosed to other restaurants, and a diner's identity is not shared across unaffiliated restaurant operators.

3.3 Marketing and Communications

Sending NX marketing communications to Partners, Dealers, End Users, and prospective customers who have provided contact information or opted in to receive communications;
Enabling End Users (restaurant operators) to use NX marketing tools to communicate with their own customers (diners) through the platform; and
Sending transactional and operational communications related to your account or subscription.

You may opt out of NX marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at legal@joinnx.com.

3.4 Legal and Compliance Purposes

Complying with applicable laws, regulations, and legal process;
Enforcing our agreements and protecting our legal rights; and
Responding to lawful requests from government authorities.

4. How We Share Your Information

NX does not sell your personal information.

We share personal information only as described below.

4.1 Restaurant Operators

When diners interact with NX-powered features at a restaurant location, NX shares relevant diner information with that restaurant operator to enable the services (e.g., loyalty redemption, order fulfillment). Sharing is limited to information relevant to that restaurant's relationship with the diner. Diner information is not shared across unaffiliated restaurants.

4.2 Service Providers

NX engages third-party service providers ("subprocessors") to process personal information on our behalf to operate and improve the Services. These providers are contractually required to protect personal information consistent with this policy and applicable law, and may not use personal information for their own independent purposes.

A complete and current list of NX's subprocessors, including their names, locations, and the categories of data they process, is available at:

https://joinnx.com/subprocessors

NX will provide notice of material changes to our subprocessor list as described on that page.

4.3 Payment Processing

Payment card data is handled by our payment processing partners at the point of capture. NX does not store or process raw cardholder data. Our payment technology is designed to encrypt card data before it reaches NX's infrastructure. See our Subprocessor List for details on our payment processing partners.

4.4 Email and Marketing Platforms

NX uses third-party email delivery and marketing platforms to send communications to Partners, Dealers, End Users, and prospective customers. Contact information used for NX marketing communications is processed through these platforms. See our Subprocessor List for details.

4.5 Business Transfers

If NX is acquired, merges with another company, or transfers all or substantially all of its assets, personal information held by NX may be transferred as part of that transaction. We will notify affected users of any such transfer and any material changes to this policy that result from it.

4.6 Legal Requirements

We may disclose personal information if required to do so by law, legal process, or a valid government request, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of NX, our customers, or the public.

5. Data Retention

NX retains personal information for as long as necessary to provide the Services, maintain business records, comply with legal obligations, and enforce our agreements.

Upon cancellation of a subscription, End User data is retained in an accessible format for 30 days following the cancellation date, during which the customer may request data export. After 30 days, data is archived. Archived data is permanently destroyed within 180 days of the archival date unless retention is required by applicable law or compelled by legal process.

For Diner data collected through restaurant-facing features, retention periods may vary depending on the nature of the data and applicable legal requirements. Diners may request deletion of their data at any time through the process described in Section 7.

6. Cookies and Tracking Technologies

NX and our service providers use cookies and similar tracking technologies on our websites and platform to:

Maintain session state and authentication;
Analyze platform usage and performance;
Support session monitoring for diagnosing user experience issues; and
Enable marketing and analytics functions.

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Some features of the Services may not function properly if cookies are disabled. NX does not currently respond to browser "Do Not Track" signals, but we honor opt-out requests submitted through the mechanisms described in Section 7.

7. Your Rights and Choices

7.1 General Rights

Regardless of where you are located, you may:

Access — Request a copy of the personal information NX holds about you;
Correct — Request correction of inaccurate personal information;
Delete — Request deletion of your personal information, subject to legal retention requirements; and
Opt Out — Opt out of marketing communications at any time.

7.2 California Residents — CCPA/CPRA Rights

California residents have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know — The right to know what personal information NX has collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared;
Right to Delete — The right to request deletion of your personal information, subject to certain exceptions;
Right to Correct — The right to request correction of inaccurate personal information;
Right to Opt Out of Sale or Sharing — NX does not sell personal information. NX does not share personal information for cross-context behavioral advertising;
Right to Limit Use of Sensitive Personal Information — Where NX processes sensitive personal information, you have the right to limit its use to what is necessary to provide the Services; and
Right to Non-Discrimination — NX will not discriminate against you for exercising any of your CCPA/CPRA rights.

7.3 How to Submit a Request

To exercise any of the rights described in this Section, submit a request at:

https://joinnx.com/data-request

You may also submit requests by email to legal@joinnx.com with the subject line "Privacy Request."

NX will respond to verifiable requests within 45 days of receipt. Where additional time is required, NX will notify you within the initial 45-day period and may extend the response period by an additional 45 days.

NX will verify your identity before processing deletion or access requests.

8. Children's Privacy

The NX Restaurant platform is not directed at children under the age of 13, and NX does not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at legal@joinnx.com.

9. Security

NX maintains administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. For a detailed description of our security practices, see our Security Policy at:

https://joinnx.com/security

No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security.

10. Third-Party Links and Services

The NX platform and websites may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services, and NX is not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

11. Changes to This Policy

NX may update this Privacy Policy from time to time to reflect changes in our practices, platform features, or applicable law. We will notify you of material changes by posting the updated policy at https://joinnx.com/privacy/ and, where required, by sending notice to the email address on file for your account.

Continued use of the Services following notice of a material change constitutes acceptance of the updated policy.

12. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or NX's privacy practices, contact us at:

NX Restaurant, Inc. Attn: Privacy 30 Gould Street, Ste R Sheridan, WY 82801 legal@joinnx.com

Data requests: https://joinnx.com/data-request Subprocessor list: https://joinnx.com/legal/subprocessors