Last updated: October 03, 2026
The data controller for this Service is:
As a restaurant SaaS platform, we also process data that your end customers provide when interacting with your restaurant through our Service, including reservation details, order history, and chat conversations with the AI assistant. This data is processed on your behalf as a data processor.
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining the Service | Contract performance |
| Generating and hosting your restaurant website | Contract performance |
| Processing reservations and online orders | Contract performance |
| Powering AI chat responses | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Product optimization and analytics | Legitimate interest |
| Legal compliance | Legal obligation |
| Marketing (optional) | User consent |
We may aggregate or de-identify data for statistical analysis. Such data cannot be traced to specific individuals.
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly Necessary | Maintain login, core functionality | No |
| Functional | Language preferences, personalized settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing (optional) | Targeted advertising and performance measurement | Yes |
Analytics tools used: [Insert tool name and link to its privacy policy, e.g., Google Analytics]. You can adjust preferences through browser settings or our Cookie Preference Center.
We do not sell your personal information, including "selling" as defined by applicable laws such as CCPA. We only share information in the following circumstances:
In the event of a security incident affecting your rights, we will notify you and relevant regulatory authorities within [timeframe, e.g., "72 hours of discovery"] as required by law. Please keep your account credentials safe and do not share them with others.
| Data Type | Retention Period | Action on Expiry |
|---|---|---|
| Account Information | During active period; [X] years after account deletion | Delete or anonymize |
| Transaction Records | As required by law, typically [X] years | Delete or archive |
| Customer Support Records | [X] years | Secure deletion |
| Security Audit Logs | [X] months | Secure deletion |
| Restaurant Data (Menus, Reservations) | During subscription; 90 days after cancellation | Delete per your request or archive |
To exercise the following rights, please contact us. We will process your request within [e.g., "30 calendar days"].
| Right | Description |
|---|---|
| Right to be informed | Understand what data we collect and how we use it |
| Right of access | Obtain a copy of your personal data |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request data deletion under specific conditions |
| Right to restrict processing | Pause data processing under specific circumstances |
| Right to data portability | Obtain your data in machine-readable format |
| Right to object | Object to processing based on legitimate interests or marketing |
| Right to withdraw consent | Withdraw consent for processing based on consent |
If you believe we have not properly handled your data, you have the right to lodge a complaint with your local data protection authority.
With your consent, we may send marketing information related to [describe types of marketing content] via email, SMS, or in-app notifications. You may unsubscribe at any time: click the "unsubscribe" link in emails, disable marketing notifications in account settings, or contact us. Opting out does not affect service-essential notifications (such as billing, security reminders).
Our servers and partners may be located in [insert major regions, e.g., Singapore, United States]. For cross-border transfers, we ensure data security through:
This Service is intended for users who are at least [13 / 16 / 18] years of age. We do not knowingly collect information from minors below this age. If you believe your child has provided us with information, please contact us immediately and we will delete it as soon as possible.
This Service may contain links to third-party websites or integration with third-party services. This Policy applies only to information we collect directly. We are not responsible for third parties' data practices and recommend reviewing their policies before using them.
For material changes, we will notify you at least [X, e.g., 15] days in advance via platform announcements or your registered email, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance.