Privacy Policy

This policy covers the NASDrink Exchange iOS app, the NASDrink web dashboard and TV board at nasdrink.com, and the APIs behind them (together, “NASDrink”). NASDrink is operated by GOATS Arena. Contact: cv@goatsarena.us.

The people who use NASDrink are bar owners, managers, and bartenders. Bar guests do not have accounts and are not identified by the system.

Account details. An email address and a password, so you can sign in, plus the venue and role your account is permitted to operate. Authentication is handled by Google Firebase Authentication; we never see or store your password in readable form.

Session data. A signed, http-only session cookie that keeps you logged in for up to five days, and ordinary server logs (IP address, timestamp, requested URL, error traces) kept for operational security and troubleshooting.

Venue operating data. Your drink catalogue, prices, market settings, scheduled events, and the actions staff take from the app (open, close, crash, surge, boost, sync). Anonymous sales lines arriving from your POS are used to move prices — they contain the item, quantity, and time, not the guest.

Push notification token. If you enable push alerts, Apple issues a device token that we store to deliver market alerts. Push is not active in this release.

No biometrics. The app can lock behind Face ID or your device passcode. That check happens entirely inside iOS and returns only pass/fail. Your face and fingerprint data never leave your device and are never transmitted to us.

No tracking. We do not track you across other apps or websites, we do not use advertising identifiers, and we run no third-party analytics or ad SDKs in the app.

No guest identities and no payment data. NASDrink never receives your customers’ names, contact details, or card numbers. Payments are handled entirely by your point-of-sale provider.

No location tracking. The app does not request or use your device’s location.

Only to run the product: to sign you in and enforce which venue you may control, to price drinks and render the TV board, to show your own revenue analytics, to keep the service secure and debug faults, and to reach you about the service.

We do not sell personal information, we do not share it with data brokers, and we do not use it to build advertising profiles.

Only with the vendors that make the service run, each acting on our instructions: Google Cloud and Firebase (hosting, database, authentication), Apple (push delivery, if enabled), and your own point-of-sale provider — currently Toast — which we connect to on your behalf using credentials your venue authorises.

We may disclose information if legally compelled, or to protect the safety, rights, or property of NASDrink, our customers, or the public.

Account records live for as long as the account is active. Venue operating data is retained while your venue is a customer. Server logs are kept for up to 30 days. When a venue leaves, we delete or irreversibly anonymise its data within 60 days of a written request.

All traffic runs over HTTPS. Data is stored in Google Cloud in the United States with encryption at rest, point-in-time recovery, and daily backups. Access is scoped by role and by venue and enforced on the server, not just in the interface. Sensitive credentials — POS keys and secrets — are held in Google Secret Manager and are never exposed to the browser or the app.

You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account. Owners can also remove a staff account at any time from the dashboard, which revokes access immediately.

Depending on where you live — for example California, or the EU and UK — you may have additional rights to access, portability, correction, deletion, and to object to certain processing. We honour these requests regardless of where you are. We do not sell or share personal information as those terms are defined under California law. Write to cv@goatsarena.us and we will respond within 30 days.

NASDrink is a workplace tool for licensed venues and is not directed to children. We do not knowingly collect information from anyone under 16. The app is rated 17+ because it concerns the sale of alcoholic beverages.

If we change this policy we will update the date at the top of this page, and for material changes we will notify account holders by email before the change takes effect.

Questions, requests, or complaints: cv@goatsarena.us.