Privacy Policy

Naya Grill orders are processed by Zay Revenue Group LLC (“we”, “us”), operator of the Zayos ordering platform. Registered address: 555 NE 8th St Apt 107, Fort Lauderdale, FL 33304.

• Account info: name, email address, phone number, hashed password (if set).
• Order info: items, delivery address, special instructions, order history.
• Payment info: processed by Stripe; we store only the last four digits of your card and Stripe's tokenized identifier. We do not store full card numbers.
• Usage info: pages visited, device type, IP address (hashed at rest), and timestamps. Used for fraud prevention and to operate the site.
• Communications: SMS opt-in records, email opens / clicks for marketing emails you've consented to receive, support tickets.

• To fulfill your order (send to the kitchen, dispatch delivery, confirm pickup).
• To send transactional messages: order receipts, status updates, sign-in verification codes. See our SMS Notifications page for the full SMS policy.
• To process payments and refunds via Stripe.
• To prevent fraud and abuse (rate limits, IP-based abuse detection).
• To send marketing emails only if you opt in (you can unsubscribe via the link in any marketing email).
• To send promotional text messages (e.g. limited-time offers, new menu items) only if you separately opt in by adding a mobile number and enabling Text marketing on your account page. Message frequency varies (typically a few messages per month). Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

• We do not sell, rent, or share your phone number, email address, or any personal information with third parties for their own marketing purposes. Mobile numbers and SMS opt-in are never shared with anyone, and text-message consent is not shared with third parties or affiliates.
• We do not track you across other websites.

We share only with vendors that help us operate the service:

• Stripe (payment processing)
• Resend (transactional + opted-in marketing email delivery)
• Twilio (transactional SMS + opted-in marketing SMS delivery)
• Supabase (database + authentication)
• Vercel (web hosting)
• Cloudflare (DNS + DDoS protection)
• Otter (when applicable, to forward marketplace orders from DoorDash / Uber Eats / Grubhub)

Each vendor is contractually bound to use your data only for the service they provide us.

California (CCPA / CPRA) and EU/UK (GDPR) residents may request a copy of their data, correction of inaccuracies, or deletion. To exercise these rights, email support@zayrev.com from the address on file. We will respond within 30 days.

You may opt out of marketing emails at any time via the unsubscribe link in any marketing email, and opt out of marketing texts at any time by replying STOP to any message (or by turning off Text marketing on your account page). You can also email us.

We use session cookies (signed with HMAC, http-only) to keep you signed in and to maintain your cart. We do not use third-party advertising cookies or cross-site trackers.

We keep order history for as long as your account is active, and for up to 7 years after closure for tax + dispute records (Florida commerce law). Hashed IP addresses and rate-limit records are kept for 90 days. Suppressed email addresses (bounces / unsubscribes) are kept indefinitely to honor your opt-out choice.

We'll update this page when our practices change and bump the “Last updated” date at the top. Material changes will be announced via email to opted-in customers.

Zay Revenue Group LLC
555 NE 8th St Apt 107
Fort Lauderdale, FL 33304
support@zayrev.com