Who this notice is for
This notice covers the platform: this website, the restaurant workspace, the till, the kitchen screen, the waiter board, the driver app, the desktop and phone apps that open them, and the menus guests open from a table QR code or a link.
Two kinds of people use it. Restaurants sign up and run their service on it; their guests read a menu, order and pay. For a restaurant's account and its staff, we decide what is kept, and this notice is ours. For a restaurant's guests, the restaurant decides: we keep that data on its behalf and use it only to run its service.
What we keep
Only what the service needs in order to work:
- Restaurant accountsThe restaurant's name, its branches and their contact details, its menu, prices and photos, and its owner's name, email address and phone number. A restaurant that issues tax invoices also gives its tax and registration numbers. Passwords are stored scrambled (hashed), so nobody can read them back.
- StaffEach staff member's name, role, branch and photo, the email address or phone number they sign in with, and their till PIN, also stored hashed. Discounts, voids, refunds and cash counts are recorded with who made them, and an unusual number of them raises an alert for the owner.
- Guests' ordersThe dishes, the table or the delivery address, the totals and how they were paid. A name and phone number only when the guest gives them, for delivery, takeaway, a reservation or a loyalty pass. A guest's location only when they tap to share it for a delivery.
- A restaurant's regularsFrom a guest's past orders with one restaurant, the platform works out for that restaurant how often they come, what they like and when they might return, so it can recognise its regulars. This is never combined across restaurants.
- WhatsApp messages and voice notesWhen a guest orders over WhatsApp, their number, the messages and voice notes they send, and the written-out text of those voice notes, so the order can be checked against what was said.
- PaymentsCard details are typed on the payment provider's own page; the platform never sees or stores them. We keep the amount, whether it went through, the provider's reference, and the payer's name and phone number if they were given.
- Drivers' locationWhile a driver is on shift, their phone's location, so the restaurant can follow a delivery and the guest can see it coming. Nothing is collected off shift. A delivery photo and the name of whoever received the order are kept as proof of delivery.
- Feedback, reservations and loyaltyThe rating and comment a guest leaves after a meal; the name, phone number and party size of a reservation; and the points or passes a guest collects with a restaurant.
- What the AI is givenPhotos of a printed menu or a dining room that a restaurant uploads, the questions a guest asks the menu helper, and what a restaurant asks its assistant. A guest's conversation with the menu helper is not stored.
- Technical recordsThe internet address a request came from and the browser that sent it, kept with sign-ins and with records of what happened, such as an order being placed, to keep the service secure and to settle disputes.
What we use it for
To run the service: to show the menu, send the order to the kitchen, add up the bill, take the payment, deliver the food, and let the restaurant see what it sold and who its regulars are. To keep accounts safe, answer support requests, bill restaurants for their plan, and send the messages the service depends on, such as a password reset, an "order ready" alert, a reservation reminder or a request for feedback.
We do not sell personal data, we do not show advertising, and we do not use one restaurant's guests for anything but that restaurant's service. Promotional messages reach a guest only from a restaurant that has recorded their agreement, under that restaurant's name, and replying STOP on WhatsApp ends them.
How long we keep it
Orders, guests, payments, invoices, reviews and records of what happened stay for as long as the restaurant's account is open, so the restaurant keeps its history. Some things go much sooner:
- A driver's location trailDeleted 24 hours after it is recorded.
- WhatsApp voice notesThe recordings are deleted after 30 days. Their written-out text and the order made from them stay with the restaurant's orders.
- Drafts from the try-it pageDeleted, photos and all, 7 days after they are made. A restaurant that signs up from one keeps the menu it made.
- When a restaurant leavesIts menu goes offline. On request we delete its account data, apart from the payment and invoice records the law requires us to keep.
On your device
The platform keeps a few small things in your browser, only to make it work: the cookie that keeps you signed in, a security token for forms, the language and country you picked on this site, the branch a shared till is set up for, and a guest's language and basket on the menu. A till also holds orders it could not send yet, with the guest's name and phone number if they were given, until the connection comes back. There are no advertising, analytics or tracking cookies.
How it is protected
Every page and app talks to the platform over an encrypted connection. Passwords and PINs are stored hashed, and card details never reach us. Each restaurant's data is kept apart from every other's, staff see only the screens their role allows, and sensitive actions at the till need a manager. No system is perfectly safe: if a breach ever puts your data at risk, we will tell the restaurants affected, and the authorities where the law requires it.
Seeing, correcting and deleting your data
You can ask for a copy of the data we hold about you, have it corrected or have it deleted, and you can refuse promotional messages at any time. A restaurant owner can correct the restaurant's details, menu and staff in the workspace; to close the account, or for anything else, ask us.
Guests: the restaurant you ordered from holds the details of your visit, so it is usually the quickest place to ask. You can also ask us, and we will pass the request to that restaurant and help it answer.
Children
The workspace and the staff apps are for adults working in a restaurant. A guest menu needs no account, and we do not knowingly keep personal data about children.
Changes to this notice
When what we keep or how we use it changes, this page changes first and its date moves. When a change matters to restaurants, we tell them as well.
Questions and requests
Nabusto runs this installation of the platform and is responsible for this notice.
WhatsApp: +96879424863
Say what you would like to see, correct or delete, and which restaurant or account it concerns.