Privacy Policy

1. Data we collect

Business owners: name, email and mobile number; business details (name, city, country, address, logo, photos, items, prices, opening hours); dashboard language; subscription and payment records (plan, amounts, Paddle identifiers; no card details).

Businesses’ customers: when ordering or booking from a storefront: name, mobile number (usually optional), order type, address for delivery or table number, notes, booking date and the language of the order. For a loyalty card: name, mobile number if given, points and visits.

Devices: when notifications are turned on we keep the push subscription address the browser gives us. Your browser keeps (in local storage) the storefront language, the cart and the loyalty card’s code; none of it reaches anyone else.

Site visitors: we count visits with anonymous counters (page and source of the visit only; no cookies, no IP address), and send nothing when “Do Not Track” is on.

2. Why we use it

To provide the service: creating accounts and signing in with an email code, showing storefronts, delivering orders and bookings to the business through WhatsApp and dashboard notifications, sending the customer order updates, running the loyalty program, managing subscriptions, invoices and renewal reminders, answering support requests, and protecting the platform from abuse.

We do not sell personal data, and we do not use businesses’ customer data for our own marketing.

3. Businesses and their customers’ data

Customer data that reaches a business (orders, bookings, loyalty cards) belongs to that business, which is responsible for how it uses it; we process it on the business’s behalf only to provide the service. For questions about an order or booking, contact the business itself.

4. Who we share data with

Paddle.com: our reseller and the Merchant of Record for subscriptions; it processes payments, tax and invoices under its own privacy policy, and we never see card details.

Service providers: server and database hosting; an email provider for sign-in codes and notices; WhatsApp, to deliver the messages a business asks for; browser push services (Google, Apple, Mozilla, Microsoft); Google Maps when the rating card is opened; and Metricool, to measure visits to the marketing pages (home page, guides and demos).

We may also disclose data when the law or a competent authority requires it.

5. Cookies and local storage

We use a necessary session cookie for people signed in to the dashboard or the admin panel, and the browser’s local storage for the language, the cart and the loyalty card. Metricool may use cookies or similar technologies on the marketing pages; it does not run when “Do Not Track” is on.

6. How long we keep data

Account data is kept while the account exists and deleted when you ask for the account to be deleted, except payment records we must keep by law. Queued WhatsApp message texts are deleted once sent; anonymous visit counters are kept for 400 days.

7. Your rights

You can ask to access, correct or delete your data or to receive a copy of it, and change most of it directly in the dashboard. Businesses’ customers can send their requests to the business, and can contact us too.

8. Security

We use encrypted connections (HTTPS), sign-in with one-time codes, hashed or encrypted storage of sensitive values, limits on attempts, and permissions that stop any account from reaching another’s data.

9. Children and updates

The platform is not intended for anyone under 18. We may update this policy and show the date of the last update at the top of the page.