Legal
The short version: use Yumpit to run a food business, do not break the law, and do not go looking in other people's workspaces.
This policy applies to everyone who uses Yumpit, whether they are the account owner or a team member invited into a workspace. It forms part of the Terms of Service between your business and Yumpit LLC.
The account owner is responsible for the behaviour of everyone they invite. If you give someone access, their use of the platform is treated as yours.
Yumpit is built for restaurants, hotels and food-service operations to manage stock, recipes, costs, purchasing and their own teams. Use it for that and you will not run into this policy.
Do not use Yumpit to break the law, to store or distribute material you have no right to, or to infringe someone else's intellectual property.
Do not attempt to access workspaces, accounts or data that are not yours; probe, scan or test our systems without written permission; or interfere with service availability for other customers.
Do not upload malware, attempt to bypass authentication, plan limits or rate limits, or scrape the service at a volume that degrades it for others.
Do not resell, sublicense or provide access to Yumpit as a service to third parties unless we have agreed that in writing.
Do not use the platform to harass, threaten or surveil individuals. Yumpit holds employee attendance and staffing data, and that data exists to run a rota — not to monitor people covertly.
You are responsible for having the right to upload the data you upload, and for telling your own staff what you record about them. If you enter employee attendance, scheduling or payroll information, you are the controller of that personal data and the obligations that come with it are yours.
Do not upload special categories of personal data — health records, biometric data, and similar — into free-text fields. Yumpit is not designed to hold them and doing so puts obligations on both of us that neither has agreed to.
We welcome genuine security reports. If you believe you have found a vulnerability, email us before doing anything else, give us a reasonable chance to fix it, and do not access, modify or retain data that is not yours.
Reports go to legal@yumpit.com. We will not pursue action against research conducted in good faith and in line with this section.
Where the situation allows, we will contact you and give you a chance to put it right. Where it does not — active abuse, a security threat, or a legal obligation on us — we may suspend access immediately and explain afterwards.
Serious or repeated breaches can end in termination. Where that happens, our normal data-retention terms still apply: your workspace is not deleted the moment access stops, and you keep the right to export what is yours.