Privacy Policy

1. Introduction

The Pasta House Co ("Company," "we," "us," or "our") operates the workforce management platform known as The Noodle, available at schedule.pastahouse.com and through our mobile apps for iOS and Android (together, the "Platform"). This Privacy Policy describes how we collect, use, and protect information from our employees and managers ("you") who use the Platform and who receive text messages and notifications from us.

Your use of the Platform is also subject to our Terms & Conditions.

2. Who This Applies To

The Platform is an internal workplace tool for active Pasta House Co staff. It is not a consumer service, and there is no public sign-up. Accounts are created by the Company as part of employee onboarding, and access ends when employment ends. If you do not have a Company account, there is nothing in the Platform for you to access.

3. Information We Collect

We collect the following information for the purpose of workforce management and internal communications:

• Contact information: Name, phone number, and email address provided during employee onboarding
• Employment information: Job position, role, work location, employee identifiers, and employment status
• Schedule and time data: Assigned shifts, availability, time-off and shift-change requests, and clock-in/clock-out records
• Compensation-related data: Pay rate and tip allocation information, used to produce schedules, labor reports, and payroll exports
• Training and performance data: Training assignments and completions, test results, check-offs, evaluations, and manager feedback
• Operational records you enter: Logbook entries, daily balance and cash-handling counts, inventory counts, forms, and electronic signatures
• Communications: Messages you send and receive in the Platform's messaging channels, including any attachments
• Platform usage data: Login activity, security audit records, and interactions with the Platform
• Device and notification data: If you enable notifications, a push notification token plus basic device and browser information used to deliver them
• Message delivery data: SMS/RCS delivery status and opt-in/opt-out preferences

We do not collect location data, contacts, photos, or advertising identifiers, and the Platform contains no advertising or tracking for advertising purposes.

4. How We Use Your Information

Your information is used exclusively for internal business operations, including:

• Building, publishing, and updating work schedules
• Sending work schedule notifications and updates
• Recording time worked and producing labor and payroll reports
• Communicating policy reminders and operational alerts (e.g., weather closures)
• Sharing daily task assignments and weekly specials information
• Providing employee performance feedback and recognition
• Distributing training material and recording training progress
• Securing accounts, investigating misuse, and maintaining audit records
• Other internal workplace communications

We do not use your information for advertising, and we do not make automated decisions about your employment without human review.

5. The Mobile App

Our mobile apps provide the same Platform in a more convenient form. A few points specific to the app:

• Notifications. If you allow notifications, your device provides us a push token so we can alert you about schedule publishes, messages, and similar work matters. You can turn notifications off at any time in your device settings.
• Fingerprint / face unlock. If you enable it, the app can be locked behind your device's own screen lock. This check is performed entirely by your phone. We never receive, see, or store your fingerprint, face data, or passcode.
• Staying signed in. The app stores a secure credential on your device so you are not asked to sign in every time. You can sign out from within the app, and the Company can revoke a device's access remotely — for example if a phone is lost or an employee leaves.
• No advertising identifiers. The app does not use the advertising ID and contains no third-party advertising or analytics SDKs.

6. Information Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your information may be shared only with:

• Service providers who help us operate the Platform, only as needed and under contract. These include Supabase (database and storage), Vercel (application hosting), Amazon Web Services (email delivery), RingCentral and Sentext (text message delivery), Google Firebase Cloud Messaging and the Apple Push Notification service (notification delivery to mobile devices), Microsoft (store file storage), and SpotOn (point-of-sale and timekeeping data).
• Payroll and benefits providers, such as ADP, where required to pay you correctly.
• Legal requirements: When required by law, regulation, or legal process

Within the Company, your information is visible to managers and administrators who need it to do their jobs — for example, your manager can see your schedule, hours, and training progress.

7. SMS/RCS Messaging

By providing your phone number during onboarding, you consent to receive work-related SMS and RCS text messages from The Pasta House Co. Message frequency varies based on operational needs. Message and data rates may apply.

You may opt out of text messages at any time by replying STOP to any message. You may request help by replying HELP. Opting out of text messages does not affect your employment status.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encrypted data transmission (HTTPS/TLS), encryption of stored data, hashed passwords, secure authentication, and access controls limiting data access to authorized personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information for the duration of your employment and for a reasonable period thereafter as required by applicable labor and tax laws. Message delivery records are retained for compliance purposes. Information that is no longer needed for these purposes is deleted or anonymized.

10. Your Choices and Rights

• Access and correction. You can view much of your information in the Platform. To request a copy of your information, or to correct something that is wrong, contact us using the details below.
• Notifications. Turn push notifications off at any time in your device settings.
• Text messages. Reply STOP to any message to opt out.
• Deletion. You may ask us to delete your personal information (see below).
• Depending on where you live, you may have additional rights over your personal information.

Requesting account or data deletion

To request deletion of your account or personal information, email phc@thepastahouse.com from the address on your account, or ask your manager. We will confirm your identity and respond within 30 days. Full instructions are on our data deletion page.

Please note an important limit: because this is an employment platform, some records cannot be deleted on request. Records of time worked, pay, tips, and related payroll information must be kept for the periods required by federal and state labor and tax law, and records may also be retained where needed to resolve a dispute or comply with a legal obligation. When you leave the Company your Platform access is removed, and we delete what we are not required to keep. We will tell you what was deleted and what had to be retained, and why.

11. Minors

The Platform is provided to people in connection with their employment. Accounts are created by the Company only for employees, and our minimum employment age is 15, so the Platform is not intended for and is not made available to anyone younger. We do not knowingly collect information from children under 13.

Where an employee is a minor under applicable labor law, their information is collected and used for the same employment purposes described in this policy, handled in accordance with those laws, and — as for every employee — is never used for advertising and never sold. The Platform contains no public or anonymous chat: messaging is limited to identified coworkers and managers within the Company. A parent or guardian may contact us using the details below with any question about a minor employee’s information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page, and we will tell you about significant changes through the Platform.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact:

The Pasta House Co
Attn: Privacy Inquiries
700 N. New Ballas Rd., St. Louis, MO 63141
Email: phc@thepastahouse.com