Bowl

Terms of Service

Effective date: November 6, 2026

These Terms of Service ("Terms") are a binding agreement between Elis Group LLC, a Florida limited liability company doing business as Bowl ("Bowl", "we", "us"), and the business that creates a Bowl account ("Customer", "you"). By clicking "I agree", creating an account, or using the Bowl application or website (the "Service"), you accept these Terms and our Privacy Policy. If you do not agree, do not use the Service.

1. Who may use Bowl. The Service is for businesses only. You represent that you are at least 18 years old and are authorized to bind the restaurant or business you register. You are responsible for every user you invite to your account. Bowl is currently offered by invitation during a beta period.

2. What the Service does. Bowl lets you photograph or upload supplier invoices and bills, extracts the data from them using automated tools, including artificial intelligence, and calculates food cost, labor cost and related metrics from the data you provide. During the beta period, features may change or be removed. We will give you notice of material changes that affect your data.

3. Your account. Keep your credentials confidential and tell us right away at support@get-bowl.com if you suspect unauthorized use. You are responsible for activity under your account, except activity caused by our breach of these Terms.

4. Your data belongs to you. You own all invoices, bills, recipes, costs, sales figures and other content you upload or enter, and all results Bowl derives from them for you ("Customer Data"). You grant Bowl a non-exclusive license to host, copy, process, display, back up and review Customer Data to provide, secure, support and improve the Service, including reviewing invoices and extracted values for accuracy, and to operate the Bowl Buying Program described in Section 5A. We do not sell Customer Data. We do not show one customer's data to another customer or to advertisers, and we never share your restaurant's name or individual prices with a supplier without your opt-in under Section 5A.

5. De-identified, aggregated data. We may create and use data that has been aggregated across customers and stripped of anything that identifies you, your restaurant, your prices or your recipes (for example, how a particular supplier formats its invoices, or regional ingredient price trends) to operate and improve the Service. We will never publish or share anything that could reasonably be used to identify you or re-create your Customer Data.

5A. Bowl Buying Program. Bowl may use purchase data aggregated across customers, such as typical market prices and total volumes for a product, to ask suppliers for better prices and terms. Bowl may tell a supplier the market price it sees for a product (for example, "restaurants are paying around $35 a case"), but will never tell a supplier which restaurant pays it, which supplier charges it, or anything else that identifies you. Bowl quotes a market price only when it is based on enough restaurants that no single restaurant can be identified from it. When a supplier offers a better price, Bowl may present the offer to you in the app. Bowl introduces you to a supplier only if you accept a specific offer, and you can opt out of offers at any time. Bowl may show you how your prices compare with de-identified regional averages, but will never show you another restaurant's identifiable prices. Participation is optional and does not affect your use of the Service. If Bowl receives a fee or rebate from a supplier for an introduction, it will disclose that in the offer.

6. Accuracy; not professional advice. Extraction is automated and can contain errors. The Service shows you each extracted amount so you can review, correct and confirm it before it is saved, and you agree to do so. Bowl's calculations, trends and suggestions are for your information only. They are not accounting, tax, legal or financial advice, and you should not rely on any factual assertion produced by an automated system without independently checking it. Decisions about your business remain yours.

7. Acceptable use. You agree not to: (a) upload data you do not have the right to upload, including other people's Social Security numbers or full payroll records, which the Service does not need; (b) reverse engineer, scrape, copy or resell the Service or use it to build a competing product; (c) interfere with the Service's security or other customers' use; (d) upload unlawful, infringing or malicious content; or (e) misrepresent who you are. We may suspend an account that violates this section, with notice where practical.

8. Fees. The Service is free during the beta period. If we introduce fees, we will tell you at least 30 days in advance, and you will not be charged until you agree to a paid plan. Prices will exclude applicable taxes.

9. Third-party services. Your point-of-sale, payroll, bank and utility providers are not part of the Service. Your use of them is governed by their own terms. Bowl uses the sub-processors listed in the Privacy Policy to operate the Service.

10. Confidentiality. Bowl treats Customer Data as your confidential information. Access is limited to Bowl personnel and sub-processors who need it to operate, secure, support, review or improve the Service or to run the Bowl Buying Program, and all of them are bound by confidentiality obligations. Every access by Bowl personnel to a customer's invoices is logged. We will not use Customer Data for any other purpose, except as required by law or as permitted in Sections 5 and 5A.

11. Security and data processing. The Data Security & Processing Terms below are part of these Terms and describe how we protect, retain, export and delete Customer Data and how we respond to security incidents.

12. Intellectual property. Bowl and its licensors own the Service, including its software, design, trademarks and the models and methods it uses. These Terms do not transfer any of that to you. If you send us feedback, we may use it without obligation to you.

13. Term, suspension and termination. Either party may end this agreement at any time. You can delete your account in the app (Settings → Account → Request account deletion) or by emailing support@get-bowl.com. After termination you may export your Customer Data for 30 days; we then delete it within 30 days, and from backups within 90 days, except where the law requires us to keep it. We may suspend the Service immediately to prevent a security threat, abuse or legal exposure, and will tell you why as soon as practical.

14. DISCLAIMER OF WARRANTIES. THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE". TO THE FULLEST EXTENT PERMITTED BY LAW, BOWL DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE OR THAT EXTRACTED DATA OR CALCULATIONS WILL BE ACCURATE.

15. LIMITATION OF LIABILITY. TO THE FULLEST EXTENT PERMITTED BY LAW, BOWL WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST DATA OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY. BOWL'S TOTAL LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE FEES YOU PAID BOWL IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM AND (B) ONE HUNDRED US DOLLARS ($100). THESE LIMITS DO NOT APPLY TO LIABILITY THAT CANNOT BE LIMITED BY LAW.

16. Indemnification. You will defend and indemnify Bowl against third-party claims arising from Customer Data you upload, your violation of these Terms or of the law, or your use of the Service in a way we did not authorize. Bowl will defend and indemnify you against third-party claims that the Service, as provided by Bowl, infringes a United States patent, copyright or trademark, except to the extent the claim arises from Customer Data or your combination of the Service with other products. Each party must notify the other promptly of a claim and cooperate reasonably.

17. Governing law and dispute resolution. These Terms are governed by the laws of the State of Florida, without regard to its conflict-of-laws rules. Before filing a claim, either party will give the other written notice and 30 days to resolve the dispute informally. Any dispute not resolved informally will be settled by binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, by a single arbitrator, in Miami-Dade County, Florida, or by video conference. Class action waiver: claims may be brought only in a party's individual capacity, not as a plaintiff or class member in any class, consolidated or representative proceeding. Either party may bring an individual claim in small claims court, or seek injunctive relief in court to protect its intellectual property or confidential information. You may opt out of arbitration by emailing support@get-bowl.com within 30 days of first accepting these Terms; if you do, disputes will be resolved exclusively in the state or federal courts located in Miami-Dade County, Florida, and both parties consent to that venue.

18. Changes to these Terms. We may update these Terms. For material changes we will notify you in the app or by email at least 30 days before they take effect, and the app will ask you to accept the new version. Continued use after the effective date means you accept the change.

19. General. These Terms, the Privacy Policy and the Data Security & Processing Terms are the entire agreement between us about the Service and replace any prior agreement. You may not assign them without our consent; we may assign them to a successor of our business with notice to you. Neither party is liable for delays caused by events beyond its reasonable control. If any provision is unenforceable, the rest remains in effect. Notices to Bowl go to support@get-bowl.com and [postal address]; notices to you go to your account email. Clicking "I agree" or using the Service is your electronic signature and has the same effect as a handwritten signature under the Florida Uniform Electronic Transaction Act. Failure to enforce a provision is not a waiver.

Contact: Elis Group LLC (doing business as Bowl), [postal address], support@get-bowl.com.

Data Security & Processing Terms

1. Roles. Customer owns and controls Customer Data. Bowl processes it only to provide, secure and support the Service under the Terms, and on Customer's documented instructions. Bowl acts as a service provider / processor; Customer is responsible for having the right to upload the data it uploads.

2. Tenant isolation. Each restaurant's records carry its restaurant identifier, and database row-level security policies restrict every read and write to the signed-in user's own restaurant. There is no feature that shows one customer's data to another customer or to a supplier. Isolation is verified by automated tests on every release.

3. Encryption. Data is encrypted in transit with TLS and at rest with AES-256 by Bowl's hosting provider, which holds SOC 2 Type 2 and ISO 27001 certifications. Access tokens and keys are encrypted at the application layer before storage.

4. Access control. Bowl follows least privilege. Bowl personnel may view Customer Data to operate, support, secure, review for accuracy and improve the Service, and to run the Bowl Buying Program; administrative access requires multi-factor authentication, and every view of a customer's invoices is recorded in an access log that Bowl retains and will provide to the Customer on request.

5. Sub-processors. Bowl uses the sub-processors listed in the Privacy Policy. Bowl will notify Customer at least 30 days before adding a sub-processor that will handle Customer Data; Customer may object, and if the objection cannot be resolved, may terminate and export its data without penalty.

6. AI processing. Documents are sent to Anthropic's API solely to extract text, amounts and dates. Under Anthropic's commercial terms, that content is confidential, is not used to train models, and is deleted within 30 days except where flagged for abuse or retention is required by law. Extracted values are shown to Customer for confirmation before they are saved.

7. Retention, export and deletion. Customer may export its data at any time in a machine-readable format (CSV). On termination, export remains available for 30 days; Bowl then deletes Customer Data within 30 days and purges backups within 90 days, except records the law requires Bowl to keep. On written request, Bowl will confirm deletion in writing.

8. Security incidents. If Bowl confirms unauthorized access to Customer Data, Bowl will notify Customer without undue delay and no later than 72 hours after confirmation, describe what is known about the incident and the data affected, and cooperate with Customer on any notices Customer must give. Where Bowl itself is the entity required to notify individuals or regulators under the Florida Information Protection Act, it will do so within the statutory deadlines.

9. Backups and availability. Bowl's database is backed up daily. During the beta period Bowl does not commit to an uptime percentage; it will give at least 24 hours' notice of planned maintenance that affects availability.

10. Secure development. Changes are tested automatically, including tests that each restaurant can only see its own rows, before they are released. Dependencies are kept current and secrets are never stored in the app's code.

11. Assistance and compliance. Bowl will assist Customer, at reasonable cost, with requests from individuals about their personal information and with security questionnaires. Bowl complies with the Florida Information Protection Act's duty to take reasonable measures to protect personal information, and with other laws that apply to it.

12. Changes. Bowl may update these terms to strengthen protections at any time, and otherwise with 30 days' notice; it will not reduce the protections for existing Customer Data without Customer's agreement.