TableReview privacy notice

Two groups of people use TableReview: restaurant owners and staff who hold an account, and restaurant guests who tap a table card and leave feedback. Guests do not create an account and are not asked to sign in.

• Account details — the email address, name and password you register with, plus your restaurant name, address details, timezone and the Google review link you choose to add.
• Guest feedback — the star rating, any topics selected, any written comment, and any name or contact detail a guest chooses to add. Guests are never required to identify themselves.
• Usage and safety data — a count of taps on your Google review link, and a one-way hashed value derived from a sender's network address, used only to limit abuse of public forms. We do not store the raw address against feedback.
• Requests you send us — the name, email and message you submit on the contact page.
• Billing details — if you start a paid subscription, payment is handled on Stripe's own hosted pages. Card numbers never reach TableReview; we keep only subscription status and identifiers.

• To run the service: show your feedback to you and nobody else.
• To sign you in securely and protect accounts.
• To prevent spam and abuse of public forms.
• To manage subscriptions and trials when you choose to start one.
• To answer support, privacy and account requests you send us.

We do not sell personal information, and we do not use guest feedback to build profiles or advertising audiences.

Feedback submitted through your table cards is stored against your restaurant only. Database access rules restrict every row to the owning account, so other restaurants cannot read your feedback. A platform operator can open an account in a read-only view for support and safety reasons; that access requires two-step sign-in and every such view is written to an internal access log.

Public Google reviews are different: they are posted by the guest, on Google, using Google's own page. TableReview never posts a review for anyone and cannot edit or remove what a guest writes on Google.

• Supabase — database, authentication and file storage for the application.
• Lovable — application hosting and build platform.
• Stripe — payment processing, used only when you choose to start a paid subscription.

These providers process data on our instructions so the service can run. They may store data outside Canada.

Account and feedback data is kept while your account is open, so your history stays available to you. If you ask us to close your account, we remove or anonymise personal details within a reasonable period unless we must keep records for billing, tax or security reasons. Abuse-prevention records and access logs are short-lived or kept only as long as they remain useful for security.

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account. Use the contact page and choose the matching request type. We will ask you to confirm the request comes from the account holder before acting on it, and we aim to respond within 30 days.

If a guest wants feedback removed, the restaurant that received it can raise the request on their behalf.

Traffic is served over HTTPS. Passwords are handled by our authentication provider and never stored by us in readable form. Database row-level security restricts data to its owner, privileged operations run only on the server, operator access requires two-step sign-in and is logged, and public forms are validated and rate limited. No system is perfectly secure, so we also keep the amount of personal information we collect small.

The site sets only what it needs to work: a sign-in session and basic security protections. The site currently loads no optional analytics scripts. The preference you choose in the banner is stored in your own browser only, and is kept for the future in case optional analytics are ever added — choosing "Allow optional" does not start any analytics today.

TableReview is a business tool and is not directed at children.

We may update this notice as the product changes. The date at the top always shows the current version, and material changes will be highlighted to account holders in the app or by email.

Send privacy questions, data requests and complaints through the contact form. It reaches the operator of this service directly.