Features How it works Pricing Private events AI call answering POS insights About Book a demo
Legal

Privacy policy.

Last updated: 1 May 2026

This privacy policy describes how Tableflo ("we", "us", "our") collects, uses, and protects information when you use our restaurant automation services. We take privacy seriously, both for our restaurant clients and for the guests they serve.

1. Information we collect

We collect three categories of information:

  • Account information: name, email, phone, role, and the restaurant you are associated with.
  • Restaurant operating data: menus, hours, reservations, blocked slots, private event details, and call logs.
  • Guest information: names, phone numbers, optional emails, visit history, and any notes the restaurant chooses to store.

2. How we use it

We use this information solely to operate the Tableflo service: to handle calls, take reservations, send confirmations, process deposits, generate proposals, and provide reporting to authorised users at the restaurant.

3. What we never do

  • We never sell guest data.
  • We never rent guest data.
  • We never share guest data with advertisers or marketing partners.
  • We never train third-party models on your data without explicit, written consent.

4. Voice recordings

Calls handled by the Tableflo AI host may be recorded for quality assurance and dispute resolution. Recordings are retained for a limited period and accessible only to authorised restaurant staff and Tableflo personnel.

5. Data sharing

We share data with the limited subprocessors required to deliver the service: hosting (Railway, Netlify), database (Supabase), email delivery (Resend), payments (Stripe), telephony and voice (Retell), and SMS providers. Each is bound by data processing agreements.

6. Data security

We use industry-standard practices: TLS in transit, encrypted databases, role-based access controls, and audit logging. Despite our efforts, no system is perfectly secure — we will notify affected parties promptly in the event of a breach.

7. Your rights

You may request access to, correction of, or deletion of personal information held about you by contacting us at the email below. Restaurant clients may export their guest database at any time from the dashboard.

8. International transfers

Tableflo is operated from Canada. Data may be processed by our subprocessors in other jurisdictions, including the United States and the European Union, with appropriate safeguards in place.

9. Children

Tableflo is not intended for use by individuals under the age of 16. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to active customers by email.

11. Contact

Questions or requests? Email us at tableflo.ai@gmail.com.