Privacy Policy
Naki, LLC, an Illinois limited liability company doing business as Everyday Mise (“Mise”, “we”, “us”) provides cost-intelligence software for restaurants and restaurant groups. Naki, LLC is the controller responsible for the account and billing data described below, and acts on the restaurant’s behalf for restaurant business content. This policy explains what personal information we handle, why, and the choices and rights you have.
1. Whose data it is
Mise handles two kinds of data, and they are treated differently:
- Restaurant business content — the invoices, vendor records, recipes, inventory, and any payroll figures that appear on documents a restaurant uploads or generates in the app. This belongs to the restaurant. We handle it on the restaurant’s behalf and only to provide the service.
- Account and billing data — the identity of the people who log in, authentication, subscription and payment records, support, and security logs. We handle this to run the service.
2. Information we handle
| Category | Examples | Handled for |
|---|---|---|
| Account & profile | Name, work email, profile photo, role, last-active timestamp | Mise |
| Restaurant / business | Business name, locations, addresses, phone numbers | Restaurant |
| Invoice & purchasing | Vendor names, line items, prices, quantities. The invoice images and PDFs themselves stay in the restaurant’s own Google Drive — Mise stores only a reference to the file (see §6) | Restaurant |
| Financial & HR within documents | Payment details on invoices, and any employee names or salary figures that appear on uploaded documents | Restaurant |
| Billing & payment | None today — the beta is free and we hold no card details. If paid plans begin: plan, billing contact, and a payment token + card brand/last-4 held by our payment processor (see §6) | Mise |
| Usage & technical | Log data, device/browser, IP address, audit events | Mise |
We practice data minimization: we ask for only what the service needs, and we do not request speculative or “nice to have” personal data.
3. Sensitive information
Some documents you upload may contain sensitive information — for example, financial account details or salary figures. We use this only to provide the service you requested (e.g., extracting and organizing invoice data), never to infer characteristics about individuals, and never for advertising.
4. Why we use it
- To provide the service you signed up for.
- Security, fraud prevention, and product reliability.
- Billing and tax.
- Optional analytics and product communications — only with your consent, which you can withdraw at any time.
5. AI processing of your documents
Mise uses AI models to read invoices and recipes and to generate summaries. Documents are sent to our AI sub-processor (Anthropic, see §6) solely to return a result to you. This content is not used to train models and is transmitted over encrypted channels. A restaurant’s AI processing can be disabled by a platform administrator at any time. See §7.
6. Sharing and sub-processors
We do not sell your personal information. We share data only with the sub-processors listed here, each selected for its security posture and each operating under its own published data-protection terms:
- Google Cloud / Firebase — hosting, database, authentication.
- Anthropic — AI processing of documents (no training on your data).
- Stripe — payment processing (PCI-DSS Level 1). Mise does not store full card numbers.
- Google Drive — your own account. If you connect Drive, the invoice and recipe images and PDFs you capture are written into your Google Drive, under the one root folder you pick. Mise stores only references, not second copies. You can disconnect at any time from Settings, or from your Google account permissions.
- Google (transactional email) — invitations, account notices, and similar service email are sent from our own
hello@everydaymise.commailbox through Google. This covers the recipient address and the message content. - Error telemetry — the app may forward a crash report when something goes wrong. Reports are scrubbed in your browser before they are sent and carry no document content.
- Google reCAPTCHA (via Firebase App Check) — bot and abuse protection. It sends your IP address and interaction signals to Google to score requests. See §11.
- Google Web Speech API — only if you use a microphone feature (the optional “dictate” button on a form, or voice inventory count) and your browser supports live transcription, the audio you speak is sent to Google’s browser speech service to convert it to text. The app may also record the audio on your device to transcribe your counts; we keep only the text you review and send, not the recording. Don’t use these features if you would rather not share the audio.
A current list of sub-processors is available on request at privacy@everydaymise.com.
7. Where data is processed
Naki, LLC is based in the United States. Mise and its service providers may process and store data in the United States and other countries where they operate. We take steps to keep your data protected wherever it is handled. Documents you capture are stored in your own Google Drive and are subject to the region and retention settings of your Google account, not ours.
8. Retention
We keep personal data only as long as needed for the purposes above. Account data is retained for the life of the account; restaurant business content is retained for as long as the customer keeps it in the app; billing records are retained as required by tax law. On account closure or a valid deletion request, data is deleted or anonymized, except where we must retain it to meet legal obligations. To request deletion, email privacy@everydaymise.com; we verify requests before acting and respond promptly. Documents in your own Google Drive are yours and are not removed by us — disconnecting Drive or closing your account leaves them in place for you to keep or delete.
9. Your choices and rights
You can:
- Access the personal information we hold about you.
- Correct information that is inaccurate.
- Delete your data.
- Request a copy of your data in a portable format.
- Withdraw consent for any optional processing (such as analytics).
We do not sell your personal information. For restaurant business content, we route requests to the relevant restaurant and assist them.
10. How to exercise your rights
Email privacy@everydaymise.com to request a copy of your data or to delete it. We verify requests before acting and respond within a reasonable time.
11. Cookies and similar technologies
We use strictly necessary cookies and similar technologies to keep you signed in and to keep the service secure. This includes Google reCAPTCHA (§6), which may set a Google cookie. Because it is an essential security measure it operates without a separate opt-in. Any non-essential cookies, for example product analytics, remain off by default and would be set only with your consent.
12. Security
We protect your data with encryption, strict access controls, tenant isolation, and audit logging. See our for details.
13. Changes
We will update this policy as our practices evolve and revise the “last updated” date. Material changes will be communicated in-app or by email.
14. Contact
Naki, LLC d/b/a Everyday Mise. Privacy questions: privacy@everydaymise.com