Log inTry It Free

Privacy Policy

Last updated: 21 August 2026

1. Who we are

MyTableView ("we", "us") is a guest-service platform for restaurants, bars and hotels, operated as a sole proprietorship established in Spain. For anything in this policy, write to us at … or through the contact page.

Operator
…
NIF (NIE)
…
Address
…
Phone
…
Email
…

For data belonging to a venue's guests, the venue you visit is the data controller and we act as its processor; for venue accounts and this website, we are the controller.

2. If you run a venue (accounts)

When you create and use a MyTableView account we process:

  • Your name, email address and password (stored by our authentication provider in hashed form — we never see it).
  • Your venue's details: name, time zone, languages, menu, floor layout, settings.
  • Team data you enter: the names and email addresses of staff you invite, their role, and when their screen last talked to the service.
  • Subscription status. Payments are handled by Stripe — we never receive or store card numbers.
  • How you arrived, if you followed an invite or referral link (a short code identifying the campaign or referrer).

3. If you are a guest at a venue

Guests do not create accounts, and we do not ask for your name, email or phone number. When you scan a table or room code, we record a table session for the venue: the table or room, timestamps, the requests you tap, the contents and total of any order you place, an optional note you write, and a party size if staff enter one. The venue uses this to run service and see its own statistics.

Guest session data is not used for advertising, not used to profile you across venues, and never sold. The codes on tables are long random identifiers so nobody can guess another table's link.

4. Cookies and device storage

We use essential cookies only — no advertising or third-party tracking cookies:

  • Sign-in session (staff accounts only).
  • Which of your venues this device is working with.
  • Your language choice.
  • A short-lived attribution cookie if you arrive through an invite or referral link.
  • Device preferences such as night mode, kept in your browser's local storage and never sent to us.

We measure page views on our own website with a first-party beacon (page visited, coarse referrer). No third-party analytics or ad networks run on our pages.

5. Service providers

We use a small set of processors, each receiving only what its job requires: Vercel (website hosting), Supabase (database and authentication), Stripe (subscription billing), Resend (transactional email such as invites and trial reminders), and DeepL (machine translation of menu text — dish names and descriptions only, never personal data).

6. Legal bases

We process data to perform our contract with venues (running the service), on our legitimate interest in securing and improving the service and providing venues with their own service statistics, and on consent where the law requires it.

7. Retention

Account data is kept while the account exists. Service history (requests, orders, sessions) is kept so venues can see their statistics over time; it contains no direct guest identifiers. When an account is deleted we remove its data within 30 days, except what we must keep for legal or accounting reasons.

8. Your rights

Under the GDPR you may request access to, rectification or erasure of your data, restriction of processing, data portability, or object to processing. Write to … and we will respond within one month. You may also lodge a complaint with the Spanish supervisory authority (AEPD, aepd.es) or the authority in your own country.

9. International transfers

Data is hosted within the EU/EEA where our providers offer it. Where a provider processes data outside the EEA, the transfer is covered by an adequacy decision or Standard Contractual Clauses.

10. Changes

If we change this policy in a meaningful way, we will note it here and, for material changes affecting venue accounts, tell you by email or inside the product.