Privacy Policy

Effective date: August 12, 2026

Mosto is operated by MOSTO LLC ("Mosto," "we," "us"), a Minnesota company based in Saint Paul, Minnesota. Mosto helps restaurants handle employee sick calls: logging illness reports, sending wellness check-ins, and applying health-code guidance. This policy explains what information we collect through our websites (getmosto.com and mosto.app) and our service, how we use it, and the choices you have. Questions? Email hello@getmosto.com.

Information we collect

• Manager accounts. When a restaurant manager creates an account: name, email address, restaurant name, phone number, and a password (stored only as a secure hash — we cannot see it).
• Employee information entered by employers. Managers may enter employee names and phone numbers into Mosto so the service can send workplace notifications and check-ins.
• Illness reports. Information submitted in a report or check-in: symptoms selected, relevant dates, and return-to-work status. We treat these as sensitive workplace records — see "Health-related information" below.
• Interest signups. If you leave your email on getmosto.com asking to hear from us, we collect that email address.
• Technical data. Standard server logs (IP address, browser type, timestamps) and cookies strictly necessary to keep you signed in. We do not use advertising or cross-site tracking cookies.

How we use information

We use the information above only to provide and secure the service: operating illness logs, sending the notifications described below, responding to support requests, and preventing abuse. We do not sell personal information, and we do not use it for third-party advertising.

Text messaging (SMS)

Mosto sends workplace notification text messages — for example, a wellness check-in link when an employee reports illness, or an alert to a manager when a report is submitted. Managers consent to receive texts when they create their account; employees consent during employment onboarding, when they provide their phone number to their employer for workplace notifications and their employer records that consent in Mosto.

• Message frequency varies; message and data rates may apply.
• Reply STOP at any time to opt out of texts, or HELP for help. You can also contact hello@getmosto.com.
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be shared with any third parties, except with service providers acting on our behalf solely to deliver the messages (see "How we share information").

Health-related information

Illness reports exist so restaurants can follow food-safety rules. They are visible only to the authorized managers of the restaurant that created them, and to Mosto personnel when strictly required to operate or support the service. We never use illness information for advertising and never disclose it except as described in this policy or as required by law. Mosto is a workplace tool, not a healthcare provider, and the information we handle is not medical-record data covered by HIPAA.

How we share information

We share information only with service providers that process it on our instructions to run Mosto: Twilio (text-message delivery), Postmark (email delivery), and our hosting providers Railway and Vercel. Each receives only what it needs to perform its function. Beyond that, we disclose information only if required by law or to protect the safety and integrity of the service. We do not sell or rent personal information to anyone.

Retention and deletion

We keep information for as long as the associated restaurant account is active, and for a reasonable period afterward as required for legal and food-safety record-keeping. You may request deletion of your information — or, for employers, your restaurant's data — by emailing hello@getmosto.com. Employees may also direct requests about their information to their employer, who controls the workplace records.

Security

All connections to Mosto are encrypted in transit (HTTPS). Passwords are stored only as salted hashes. Access to production systems and data is restricted and logged. No system is perfectly secure, but we design Mosto to hold the minimum information it needs and to protect what it holds.

Children

Mosto is a workplace service for businesses and is not directed to children under 13, and we do not knowingly collect information from them.

Changes to this policy

If we make material changes, we will update this page and its effective date, and for significant changes we will notify account holders by email.

Contact

MOSTO LLC · Saint Paul, Minnesota · hello@getmosto.com