Privacy Policy

SOpti Inc. – Privacy Policy
Effective Date: October 14, 2026
Last Updated: October 14, 2026
Website: https://sopti.ai

Introduction

SOpti Inc. ("SOpti," "we," "us," or "our") is committed to protecting the privacy, confidentiality, and security of the information entrusted to us by our customers, their employees, and their authorized users.

SOpti provides an intelligent store operations platform that helps businesses manage daily operations, equipment and sensor monitoring, food safety and checklists, inventory and production, workforce activities, compliance, analytics, and connected devices.

This Privacy Policy explains how we collect, use, disclose, store, and protect information through our websites, web and mobile applications, connected devices, integrations, and related services (together, the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy. Where applicable law requires consent, we will ask for it separately.

Our Commitment to Customer Data

  • Customers own their data. Business records, operational information, employee information, and other information a customer provides or collects through the Services ("Customer Data") belong to that customer.
  • We use it to serve you. We process Customer Data to provide the contracted Services, keep them secure, and meet our legal obligations.
  • We do not sell it. SOpti does not sell or rent Customer Data or personal information.

1. Information We Collect

We collect information directly from customers and their authorized users, automatically through the Services and connected devices, and from third-party systems a customer chooses to connect.

a) Account and Contact Information

  • Name, business email address, and telephone number.
  • Company name, store locations, job title, and role.
  • Usernames, account identifiers, and sign-in information. Passwords are stored using one-way cryptographic hashing, never in readable form.
  • User permissions, access levels, and account preferences.
  • Support requests and communications with us.

b) Employee and Workforce Information

When a business customer enables these features, SOpti may process:

  • Employee names, identifiers, and assigned stores.
  • Schedules, shifts, attendance, time-off requests, and task assignments.
  • Training and micro-learning completion records.
  • Checklist activity, sign-offs, and compliance acknowledgments.
  • Operational performance metrics and other workforce information the customer enters or authorizes.

The business customer is responsible for having a lawful basis to collect employee information and for giving employees any required notices.

c) Device, Application, and Usage Information

  • IP address, browser type, operating system, device identifiers, and app version.
  • Sign-in attempts, session information, and access logs.
  • Pages and features used, error reports, diagnostics, and performance logs.
  • Security events and indicators of suspicious activity.

d) Sensor, Equipment, and Operational Information

Through connected devices and SOpti modules, we may collect:

  • Temperature, humidity, and other environmental readings.
  • Refrigeration and equipment conditions, including compressor vibration, electrical measurements, door open/close events, and equipment health indicators.
  • Device information such as battery level, signal strength, and gateway status.
  • Alerts, maintenance and service records, and diagnostics.
  • Restroom servicing and facility maintenance records.
  • Inventory levels, product usage, production, prep, waste, and discard records.
  • Opening, closing, and food safety checklists, temperature logs, and other compliance records.
  • Store performance metrics and operational event history.

What is collected depends on the products, devices, and features each customer activates.

e) Video and Camera Information

If a customer connects cameras to the Live Monitoring features, SOpti may display, transmit, or store video and still images from those cameras as configured by the customer. Video may capture employees, visitors, or customers in the store. The business customer decides where cameras are placed and is responsible for posting any required notices and complying with applicable laws on video monitoring and recording.

f) Point-of-Sale and Third-Party Integration Data

When a customer authorizes it, SOpti may connect to point-of-sale systems, delivery platforms, supplier and inventory systems, scheduling tools, accounting platforms, spreadsheets, and other business applications. Depending on the integration, this may include:

  • Sales transactions and summaries, product identifiers, quantities, and prices.
  • Payment status, refunds, and reconciliation information.
  • Inventory movements, orders, and purchasing records.
  • Customer or employee information contained in the connected records.

SOpti does not need full payment card numbers or card security codes for store analytics, and customers should not send them to us. Subscription payments are handled by our payment processor (see Section 3).

g) Location Information

Certain features, such as SOpti GeoSense and connected device management, may process store addresses and coordinates, device installation locations, and location-based events. The mobile app may use a device's precise location only when a feature needs it and the user has granted permission. Users can turn location access off in their device settings.

h) Mobile App Permissions

The SOpti mobile app may ask for permission to send notifications, use the camera (for example, to photograph service proof or scan items), and access location. Each permission is used only for the related feature and can be changed at any time in the device settings.

i) Cookies and Similar Technologies

We use cookies and similar technologies to keep users signed in, remember preferences, protect accounts, and understand how the Services are used. See Section 8 for details.

2. How We Use Information

a) Providing the Services

  • Create and manage accounts, authenticate users, and enforce permissions.
  • Provide dashboards, reports, checklists, monitoring, and other subscribed features.
  • Run customer-authorized integrations and keep connected devices working.
  • Process subscription billing and manage plans and add-ons.

b) Alerts and Notifications

We use contact details to send operational alerts (for example, temperature out of range, a door left open, or a device offline), reminders, and summaries by email, SMS text message, and push notification, according to the alert settings the customer configures.

c) Operational Intelligence and Analytics

  • Detect equipment problems and maintenance needs.
  • Generate alerts, recommendations, and equipment health indicators.
  • Analyze store performance, inventory discrepancies, and waste.
  • Support staffing, scheduling, and operational planning.
  • Produce reports and summaries requested by the customer.

d) AI-Assisted Features

Some features, such as the SOpti AI Assistant, daily summaries, insights, and predictive equipment analysis, use algorithms, statistical models, and AI technologies, which may include models operated by third-party AI service providers acting on our behalf. When a user asks the AI Assistant a question or a feature generates an AI summary, the relevant information is sent to that provider only to produce the result.

  • AI outputs support business decisions and may be inaccurate or incomplete. Customers remain responsible for reviewing them before acting.
  • SOpti does not use identifiable Customer Data to train general-purpose AI models, and we require our AI service providers not to use it to train their models.

e) Security and Fraud Prevention

We use information to detect and investigate unauthorized access or misuse, protect accounts and infrastructure, and keep audit and security records.

f) Support and Communications

We use contact information to answer support requests and send service notices, security alerts, product updates, maintenance announcements, and billing messages. Marketing messages are sent only as permitted by law, and you can opt out at any time.

g) Legal Obligations

We may process or keep information when reasonably necessary to comply with the law, respond to lawful requests, enforce our agreements, or establish, exercise, or defend legal claims.

3. How Information Is Shared

a) Service Providers

We share information only as needed with providers who help us run the Services, under contracts that limit their use of it and require appropriate security. These include:

  • Cloud hosting, storage, and backup providers.
  • Email, SMS, and push notification providers.
  • Payment processing and subscription billing providers (for example, Stripe). Card details are entered with and held by the payment processor, not stored by SOpti.
  • Electronic signature providers used for customer agreements.
  • AI service providers that power AI-assisted features.
  • Security monitoring, analytics, and technical support providers.

b) Customer-Authorized Third Parties

When a customer turns on an integration or directs us to exchange information with another service, the relevant information is sent to that service, which handles it under its own terms and privacy policy.

c) Within the Customer's Organization

Information in a customer account is visible to that customer's authorized users according to the roles and permissions the customer sets, including franchisors or multi-store owners the customer gives access to.

d) Legal Disclosures

We may disclose information when required by law, such as in response to a valid court order, subpoena, or regulatory request. Where legally permitted and practical, we will notify the affected customer first.

e) Business Transfers

If SOpti is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy and appropriate confidentiality protections.

f) No Sale of Personal Information

SOpti does not sell or rent personal information or Customer Data, does not share it with data brokers, and does not allow service providers to use it for their own purposes.

4. SMS Text Messages

Users who provide a mobile number and opt in may receive operational SMS alerts and account messages from SOpti. Message frequency varies with the alerts configured. Message and data rates may apply. Reply STOP to opt out or HELP for help at any time.

Mobile numbers and SMS opt-in consent are not shared with third parties or affiliates for their marketing or promotional purposes. They are shared only with the messaging providers that deliver our messages.

5. Data Security

SOpti maintains administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, alteration, or disclosure. Depending on the system, these include:

  • Encryption of data in transit using TLS.
  • Encryption of stored data and backups where implemented.
  • Role-based access controls, two-factor authentication options, and per-store access checks.
  • Logging and monitoring of important system activity.
  • Security updates, vulnerability management, and restricted administrative access to production systems.
  • Backup and recovery procedures and incident response procedures.
  • Confidentiality obligations for our personnel and service providers.

Access to Customer Data is limited to people and systems with a legitimate business need. No system or transmission method is completely secure, so we cannot guarantee absolute security.

Security incidents. If we confirm a security incident affecting Customer Data, we will investigate, contain, and remediate it, and notify affected customers or individuals as required by law or contract.

6. Data Retention and Deletion

  • Active accounts: Customer Data is kept while the customer's subscription is active, subject to product settings and the customer agreement.
  • After termination: we keep Customer Data for a limited period so the customer can request an export and so we can close the account, resolve disputes, and meet legal obligations. After that period it is deleted or de-identified, unless the law requires us to keep it longer.
  • Backups: deleted information may remain in secure backups until the backup cycle expires.
  • Legal holds: information may be kept longer when needed for legal proceedings, regulatory requirements, fraud prevention, or enforcing our agreements.

De-identified and Aggregated Information

SOpti may create and use information that has been aggregated or de-identified so that it no longer reasonably identifies an individual or customer. We use it to improve the Services, analyze performance and equipment reliability, produce benchmarks and statistics, and develop and validate predictive analytics. We do not attempt to re-identify it.

7. Your Privacy Rights and Choices

Depending on where you live and your relationship with SOpti, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete eligible personal information.
  • Receive a portable copy of certain information.
  • Withdraw consent where processing is based on consent.
  • Opt out of marketing communications and SMS messages.
  • Exercise other rights available under applicable privacy laws, without discrimination for doing so.

Information controlled by your employer or another business. When SOpti processes information on behalf of a business customer, that customer decides how it is used. If your employer or another business uses SOpti, please contact them first; we will help them respond to your request as required.

How to make a request. Email privacy@sopti.ai. We may need to verify your identity before acting on a request, and we will respond within the time required by law.

8. Cookies, Tracking, and Analytics

We use cookies and similar technologies to:

  • Keep users securely signed in and protect against unauthorized access.
  • Remember settings and preferences.
  • Measure performance and understand how the Services are used, so we can improve them.

These may be strictly necessary, preference, or analytics cookies. You can manage cookies in your browser settings. Turning off necessary cookies may stop some features from working. Where the law requires it, we ask for consent before using non-essential cookies.

9. Data Location

SOpti is based in the United States, and information is processed and stored in the United States. If you use the Services from another country, your information will be transferred to and processed in the United States, with the protections described in this Privacy Policy.

10. Children's Privacy

SOpti is a business platform and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Customers must not submit children's personal information except as permitted by law. If we learn that we have collected such information in violation of the law, we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy as our Services, technology, practices, or legal obligations change. When we make material changes, we will notify customers through the website, in the app, or by email, and update the "Last Updated" date above. Where the law requires it, we will give additional notice or obtain consent. Changes to this policy do not override specific data protection commitments in a signed customer agreement.

12. Contact Us

For questions, requests, or concerns about this Privacy Policy or our data practices, contact:

SOpti Inc.
Website: https://sopti.ai
Privacy requests: privacy@sopti.ai
General inquiries: admin@sopti.ai

SOpti Inc. — Smarter Stores. Brighter Tomorrows.