Draft — pending legal review

What we collect

• Reservations: guest name, party size, requested time, optional phone + email — stored on the merchant’s tenant in our database, used to fulfil and confirm the booking.
• Payments: deposits and gift cards are processed by Stripe Connect. We never see card numbers; Stripe holds them.
• WhatsApp messages: when a guest messages a merchant’s WhatsApp number, we relay the message and our Claude concierge may reply on the merchant’s behalf. Transcripts are retained for the merchant’s reference.
• Analytics: anonymous conversion events (page views, reservation starts) tied to a session id, used to improve flows. No third-party trackers.

Sub-processors

• Stripe (payments)
• Anthropic (AI replies via Claude)
• Meta WhatsApp Business Cloud (messaging transport)
• Google Business Profile (review ingest, on opt-in)
• Cloudflare R2 (media storage)
• Hetzner (hosting, EU)

Your rights

Email [email protected] to access, correct, or delete your data, or to revoke consent for messaging.

Replace with a jurisdiction-appropriate notice (GDPR for DACH/EU) before launch.