Version v1.1, 2026-07-18.This Privacy Policy explains how Pachako (the “Platform”, “we”, “us”), collects, uses, shares, and protects information collected through www.pachako.com (the “Service”). It covers people who request a free mockup, people who run the “Grade My Restaurant” report, and restaurant operators who create an account and subscribe.
1. Information we collect
- You give us directly: your name, restaurant name, mobile phone number, email address, restaurant address, current website URL or social handle, and, for accounts, a password and optional point-of-sale information.
- Report Card inputs and results:the restaurant you search for, the website analyzed, and the report's scores and findings.
- Public business data we look up: information about your business from sources such as Google Places / Business Profile and similar public listings, used to build your report and your site.
- Usage and device data: standard server logs, limited analytics, IP address, and browser / user-agent, used to operate and secure the Service.
- Consent records: when you agree to our Terms and Privacy Policy, we record that agreement, the version agreed to, your marketing choice, and the IP address, user-agent, and timestamp of the click.
2. How we use information
- to design and text you a mockup, run your report, and follow up;
- to create and operate your account and build and host your site;
- to provide support and send service-related (transactional) messages;
- to send product updates, tips, and offers where you have opted in (marketing);
- to secure the Service, prevent abuse, and comply with law.
We do not sell your personal information, and we do not sell or rent your restaurant's customer list. We may use aggregated and anonymized data to improve the Service.
3. SMS and email consent; how to opt out
By submitting a form or providing your mobile number, you consent to receive messages from the Platform related to your request (including a texted mockup, a verification code, and follow-up). Message and data rates may apply. You can opt out of non-essential marketing messages at any time: reply STOP to any marketing SMS to stop texts, and use the unsubscribe link in any marketing email to stop emails. Even after you opt out of marketing, we may still send transactional messages needed to operate the Service (for example, a verification code, an account or billing notice, or a reply to your request). Separately, any marketing you send to your own customers through the Service is subject to your consent obligations as the operator (see the Terms of Service).
4. Cookies and analytics
We use strictly necessary cookies to run the Service (for example, to keep you logged in) and limited analytics to understand usage and improve the Service. You can control cookies through your browser settings; disabling some cookies may affect functionality.
5. Third parties and subprocessors
We use trusted vendors to host data, look up business information, send messages, and (when live) process payments. They may access information only as needed to perform services for us and are bound to protect it. These include, and may change over time:
- Google (business listings and search data);
- Supabase (database and authentication hosting);
- Telnyx (SMS and voice);
- Zoho (email);
- Cloudflare (hosting, content delivery, and security);
- Stripe (payment processing, when billing is enabled).
When payments are enabled, card payments are processed by a third-party processor; the Platform does not store full card numbers.
6. Data retention
We keep mockup-request and report information for as long as needed to follow up and for a reasonable period thereafter. Account information is kept for the life of the account and as required by law. Consent records are kept as our proof of agreement. You may request deletion as described below.
7. Security
We use administrative and technical safeguards, including access controls and encryption in transit, to protect information. No system is perfectly secure, and we cannot guarantee absolute security.
8. Your rights and choices
You may request access to, correction of, or deletion of your personal information, request a portable copy of it, and opt out of non-essential messages at any time. Contact [email protected] and we will respond as required by applicable law.
New Jersey residents. Under the New Jersey Data Privacy Act (effective January 15, 2025), New Jersey residents have the right to: confirm whether we process their personal data and access it; correct inaccuracies; delete it; obtain a portable copy in a usable format; and opt out of the sale of personal data, targeted advertising, and profiling that produces legal or similarly significant effects. We do not sell personal data and we do not use it for targeted advertising or such profiling. To exercise a right, email [email protected]; we will verify the request and respond within the period the law allows, and if we decline you may appeal by replying to our response, which we will review and answer.
Other states. Residents of other states with comprehensive privacy laws (for example California, Colorado, Connecticut, and Virginia) have similar rights and may use the same contact to exercise them.
9. Children
The Service is intended for businesses and is not directed to children under 18, and we do not knowingly collect information from them.
10. Changes
We may update this Policy; the updated version is posted here with a new version string and effective date.
11. Contact
Privacy questions: [email protected] or 201-970-2580.