Privacy Policy

Registration data

First name, last name, email, password (encrypted), language preferences.

Reservation data

Customer name, phone number, email, reservation date and time, party size, special notes, dietary preferences.

Customer CRM data

Visit history, dietary preferences, first and last visit dates, no-show count.

Newsletter data

Email, name (optional), communication preferences.

Navigation data

IP address, browser type, operating system, pages visited, time spent, technical cookies.

Restaurant app usage

When you scan the table QR, open the menu or open a dish in a restaurant's app, we record anonymously the action, the restaurant, the table, the dish and the screen language. We do not record your name, phone number, IP address or a device identifier. The app creates a random code that stays only in the browser tab and disappears when it is closed; on the server we keep only a hash of that code, which changes every day and is different for each restaurant, so visits on different days cannot be linked. The IP address is used only to limit abuse and is not linked to these records. They are used for aggregated reports to the restaurant, such as how many tables opened the menu and which dishes are viewed most, and are kept for 90 days.

How we measure where you came from

When you reach Tavoloo through one of our links (social media, ads, email or partners), including the short links tavoloo.app/go/, we record which channel brought the visit: the link parameters (UTM), the referring site, the device type (phone, tablet or computer), the country when available, the first 200 characters of the browser identifier and an irreversible technical code derived from your IP address. We do not store your IP address. We do this on the basis of our legitimate interest (Art. 6(1)(f) GDPR; art. 7, IX, LGPD) to understand which channels work. Only if you accept analytics cookies do we keep in your browser, for up to 30 days, the channel of your first visit, so we can link it to a contact or demo request you may make later. For this storage the legal basis is your consent (Art. 6(1)(a) GDPR and Art. 5(3) of the ePrivacy Directive). Without consent, nothing is written to your device. When you fill in a form (demo, diagnostic or chat), the channel you came from is linked to your record. In the demo form you can also tell us, if you wish, how you heard about Tavoloo. Click records are kept for 90 days. The link with your record is kept while the relationship lasts and for up to 24 months after the last interaction. You can exercise your rights over this data (Arts. 15-21 GDPR; art. 18 LGPD) through the contacts in section 11.

Prospecting restaurants from public data

To introduce Tavoloo to restaurants, bars and similar venues in Brazil that are not yet our customers, we collect the business contact details that the venue itself published on its Google Maps listing, using an automated collection tool (Apify). These are: venue name, category, city and country, published email and phone number, website and social media profile, rating and number of reviews. When the published contact belongs to a person, for example the owner's email, it is personal data and gets the same protection. We use this data only to send up to three emails inviting the venue to a demo, from our own mailbox hosted by Hostinger. The text may be drafted with the help of artificial intelligence (OpenAI, via Vercel AI Gateway) from this public data, and we record whether the email was opened and whether the demo link was clicked. We do not sell, rent or combine this data with the data of the customers of restaurants that use Tavoloo.

The legal basis is our legitimate interest (art. 7, IX, of Brazil's LGPD; Art. 6(1)(f) GDPR), assessed in a documented test and respecting the purpose for which the contact was published. Every email says who is writing, where the contact came from and how to stop receiving messages. In the European Union we do not send commercial communications without prior consent. We delete the contact 12 months after the last unanswered email, or sooner if you ask.

At any time you can ask us to stop: reply SAIR (or STOP), click "Não quero receber" (unsubscribe) in the email, or write to us. The link works immediately; email replies are handled within 2 business days. You can also ask what data we hold and where it came from, and have it corrected or deleted, through the contacts in section 11 or our DPO at dpo@fmsolutions.ai. For people who asked not to be contacted we keep only the email address on a block list, so the contact is not repeated.