Data processing addendum
Who is the controller
| Data | Controller | Processor |
|---|---|---|
| Menu content and allergen declarations | The tenant (the food business operator) | The platform operator |
| Tenant user accounts | The platform operator | — |
| Guest interaction events | The tenant | The platform operator |
The tenant is the Food Business Operator and the controller of their menu data. That matters for both privacy law and food-law liability.
What we process for the tenant
- Host and publish the menu the tenant writes
- Store allergen and dietary declarations they enter
- Record aggregate guest events (menu view, QR scan, language choice) without a persistent guest identity
Transfers and subprocessors
Categories of subprocessors are listed on the subprocessor list. A payment provider is not attached in this environment.
Assistance
Export of menu data is available in the owner console on every plan. Statutory erasure of personal account data is specified for a later release (not a self-serve control on this page).