PRIVACY
POLICY
Effective: July 2026. Here's exactly what we collect, how we use it, and your rights.
Looking for the rules of use? See our Terms of Service.
Pre-Launch Notice
NachoWorks is a pre-launch demonstration platform. The interactive ordering, loyalty (CHO Points), kiosk, and community features are provided to showcase the concept to guests, investors, and prospective franchise partners. At this stage we do not process real food orders or payments, and CHO Points and rewards are non-monetary and have no cash value. Store and mobile-unit locations shown on the site are illustrative. This Privacy Policy describes how we handle the information you provide while using the platform in this pre-launch state.
Information We Collect
Account information: when you create an account, we collect your email address, your display name/creator handle, an encrypted (hashed) password if you sign up with a password, and — if you sign in with Google — the basic profile information Google returns. Profile and activity data: your saved and claimed builds, build names, photos you upload to the Chomunity Wall, order/build history, CHO Points activity, favorites, referrals, and profile customizations (themes, banners, bio). Communications: contact-form submissions and your email/newsletter and alert preferences. Technical data: authentication session cookies and standard log/session information (such as IP address and browser type) used to operate and secure the service. We collect only what is needed to run the features you use.
How We Use Your Information
We use your information to: create and secure your account and sign you in; display your builds and creator identity on the Chomunity Wall; operate the CHO Points loyalty program and referrals; generate AI build images and shareable build cards; send transactional emails (verification codes, password resets, receipts, alerts) and, for account members, our newsletter and selected updates unless you opt out; respond to contact and volunteering inquiries; and moderate submitted content. We do not sell your personal information, and we do not share it with third parties except the service providers described below who help us operate the platform.
Data Storage & Service Providers
Your data is stored on Amazon Web Services (AWS) infrastructure — including DynamoDB databases and S3 storage — hosted in the United States. We rely on the following third-party providers, each governed by its own privacy policy: • Amazon Web Services — hosting, database, and image storage • OpenAI — powers the CHOpilot assistant and AI image generation • Resend — transactional email and newsletter delivery • Google — optional Google sign-in (OAuth) • Iconify — icon assets • OpenStreetMap / Leaflet and Google Maps — location maps and directions • Meta / Facebook — publishing brand content (see "Social Media Publishing") Data retention: [PLACEHOLDER — owner/legal to confirm retention periods]. You may request deletion of your account and associated data (see "Your Choices & Rights").
Cookies & Local Storage
We use a secure, http-only session cookie to keep you signed in after you log in. We also use your browser's local storage to remember certain preferences and in-progress builds on your device. We do not use Facebook Pixel, Google Analytics, advertising trackers, or similar cross-site tracking on this site. You can clear cookies and local storage at any time through your browser settings, and you can sign out to end your session.
Social Media Publishing
Our systems may automatically publish brand content — such as Chomunity Wall build cards and promotional posts — to our official NachoWorks pages on social platforms (currently Facebook) via their APIs. When your public creation is featured, it may appear with its build name and public creator handle. We do not collect, store, or process the personal data of people who interact with our posts on those platforms; their activity is governed by the platform's own policies.
Your Choices & Rights
You can review and update your profile information, alert preferences, and newsletter subscription from your account settings. Turn off Email for any category and save to unsubscribe from that type of update, or use the unsubscribe link in any newsletter email. You may request access to, correction of, or deletion of your personal information by contacting us. Depending on where you live, you may have additional rights (for example, California residents under the CCPA/CPRA). [PLACEHOLDER — owner/legal to confirm the specific rights and request process, e.g. CCPA/CPRA, and any verification steps.]
Children's Privacy
NachoWorks is not directed to children, and we do not knowingly collect personal information from children under [PLACEHOLDER — owner/legal to confirm age, e.g. 13]. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to remove it.
Changes to This Policy
As NachoWorks develops, this policy may be updated. Material changes will be reflected on this page with an updated effective date. Continued use of the site following changes constitutes acceptance of the revised policy.
Contact
Questions about this policy or your data? Reach out via our Contact page, or email [PLACEHOLDER — privacy contact email]. We aim to respond to all inquiries within 5 business days.