Privacy Policy

ROME Intelligence (“ROME,” “we,” “us”) is a restaurant intelligence platform operated by Lucid Ventures LLC, based in St. Louis, Missouri. This policy describes how we collect, use, and protect information when you visit our website, request a demo, or use the ROME platform. Our plain-language architecture overview lives at Data Practices.

From website visitors and demo requesters: the contact details you submit (name, email, restaurant name, message) and basic technical logs (IP address, browser type, pages visited) used for security and troubleshooting.

From restaurant customers: the point-of-sale and operational data you connect or upload — orders, order items, menu and cost data, labor shifts. These are business records about transactions, not profiles of people.

Guest data processed on your behalf: where a restaurant uses guest features, a minimized loyalty profile (e.g., birthday month/day, preferences) and, separately, guest identity fields (name, email, phone). We process these as the restaurant’s service provider; the restaurant remains the owner of its guest relationships.

We use the data described above to provide the service: computing audits, forecasts, and recommendations for the restaurant that owns the data; to operate, secure, and improve the platform; to respond to inquiries; and to meet legal obligations. That is the list.

We do not sell personal information. We do not share your business or guest data with third parties for their own purposes. We do not use your data to advertise to you or anyone else. We do not train AI models on your data.

All data is stored in access-controlled databases encrypted at rest. Guest identity fields (names, emails, phones) receive an additional layer of field-level encryption (AES-256-GCM) with keys held outside the database. Each customer’s data is logically isolated by tenant — one restaurant’s data is never visible to another. Every access to guest identity data is written to an audit log (the access, never the values).

ROME’s AI advisor and analytics answer from aggregates — segments, totals, percentages. No guest name, email, phone, or address is included in anything sent to an AI model, written to a log, or placed in a web address. AI requests are processed by our model provider under terms that prohibit training on the content.

We use a small number of infrastructure providers to run the platform — cloud hosting, managed databases, email delivery, and AI model APIs — each bound by contracts limiting their use of data to providing services to us. We do not use third-party advertising or analytics trackers on the product.

We keep customer data for as long as the customer relationship lasts, and delete or return it on request when it ends. Guests may request an export of the data held about them or the deletion of their identifying data through their restaurant; visit history may be retained in anonymous form so business totals remain accurate.

ROME is a business tool and is not directed at children. Where guest records include occasion data about minors (e.g., a child’s birthday in a family profile), those records are excluded from targeting entirely.

If we change this policy, we will update the date at the top and, for material changes, notify customers directly. Questions, export requests, or deletion requests: rome@romeintel.com.