← Back

Privacy Policy

Last updated: [DATE]

Before publishing: this is a starting template, not finished legal advice. Replace every [bracketed] placeholder with your real details, and have a solicitor review it before relying on it — requirements vary by country and change over time.

Who we are

Tablecloth is operated by [YOUR BUSINESS NAME], [YOUR BUSINESS ADDRESS]. You can contact us at [YOUR CONTACT EMAIL] with any questions about this policy or your data.

What we collect

We collect two kinds of information:

  • From restaurants: the email address and password used to sign in, the restaurant name, and billing information processed by our payment provider, Stripe.
  • From guests placing a preorder: the name you type in, the dishes you choose, and any note you add (for example, an allergy). We do not require or collect an email or phone number from guests.

How we use it

Restaurant account details are used to provide the service and process subscription payments. Guest order details are shown only to the restaurant staff running the event the guest is ordering for, so that kitchen and front-of-house staff know what to prepare and serve.

Who can see your data

Each restaurant's events, menus, and guest orders are kept private from every other restaurant using Tablecloth. We use industry-standard database access controls to enforce this. We do not sell personal data to third parties.

We use the following third-party services to operate Tablecloth, each of which processes data on our behalf under their own privacy and security terms:

  • Supabase — database hosting and account login
  • Stripe — payment processing for restaurant subscriptions
  • Vercel — website hosting

How long we keep data

[Describe your retention approach here — for example: "Event and order data is kept for as long as the restaurant's account is active, plus [X] days, after which it is permanently deleted. Restaurants can delete individual events and guest orders at any time."]

Your rights

Depending on where you live, you may have rights to access, correct, or request deletion of your personal data. To make a request, contact [YOUR CONTACT EMAIL].

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.