Legal

Privacy Policy

Last updated: 27 September 2026

Dineator ("Dineator", "we", "us") provides a software-as-a-service platform for restaurants, covering point of sale, menu management, orders, tables, reservations, staff management and analytics. This Privacy Policy explains what information we collect and how we use it when it is processed through the Dineator platform — both for restaurant owners and staff who run their business on Dineator (the "Restaurant" or "Customer") and for the diners who order from or book a table with a restaurant's own storefront ("End Users" or "Guests").

Dineator is a multi-tenant platform: each restaurant's data is logically kept separate from other restaurants' data. In most cases the restaurant is the data controller for its guests' data and Dineator acts as the data processor or service provider that operates the platform on the restaurant's behalf.

Information we collect

We collect the following categories of information in the course of operating the platform:

  • Restaurant staff and owner account data — name, email address and phone number, used to create and secure accounts and to assign roles and permissions.
  • Guest order and reservation data — name, email address, phone number, and details of the order or reservation placed on a restaurant's storefront (items ordered, party size, date and time, special requests).
  • Payment information — payments are processed by third-party payment processors (Stripe and/or Square). Dineator does not collect or store full card numbers; card details are entered directly with the payment processor.
  • Push notification tokens — Firebase Cloud Messaging device tokens, used to deliver order, kitchen and service-request alerts to the Dineator Staff mobile app.
  • Usage and analytics data — how the platform and a restaurant's storefront are used, to operate features such as sales and performance analytics.
  • Uploaded images — menu photos, restaurant gallery images and profile pictures uploaded by a restaurant, stored in our cloud object storage provider (Backblaze B2).
  • Communications data — messages sent through contact forms, and the content needed to deliver notifications by email, SMS, WhatsApp or push, depending on what a restaurant has enabled.

How we use information

We use the information above to:

  • Provide, operate and maintain the platform, including order taking, kitchen ticketing, table management, reservations and staff scheduling;
  • Authenticate accounts and enforce role-based access within a restaurant;
  • Process payments through our payment processors and send order/reservation confirmations and updates;
  • Send notifications a restaurant has configured, over email, SMS, WhatsApp or push, and deliver push alerts to the staff app;
  • Generate analytics and monthly performance reports for a restaurant's own use;
  • Use AI (Google Gemini) to help generate storefront designs and performance report summaries;
  • Maintain the security, integrity and availability of the platform, and diagnose or fix issues.

Advertising

Restaurants on our FREE plan will have advertising shown on the public-facing storefront pages their diners see. These ads may come from a third-party ad network (for example, Google AdSense) and/or may be ads the restaurant itself uploads and manages. Restaurants on paid plans (BASIC, PREMIUM or ENTERPRISE) do not have platform ads shown on their storefront.

Where a third-party ad network is used, that network may set cookies or use device identifiers on the storefront page to select and measure ads, and may collect data about that visit under its own privacy policy — it is not controlled by Dineator. For more information about how such networks use data, see the ad network's own policy (for example, Google's advertising and privacy policies at policies.google.com/technologies/ads).

Who we share information with

We share information only as needed to operate the platform, with:

  • Payment processors (Stripe, Square) — to process transactions; they receive payment details directly.
  • Cloud infrastructure and storage providers (including Backblaze B2) — to host the platform and store uploaded images.
  • AI providers (Google Gemini) — to help generate storefront theme designs and report narration.
  • Notification delivery providers — to send email, SMS, WhatsApp and push notifications a restaurant has enabled, and Firebase Cloud Messaging for staff app push alerts.
  • Advertising networks — on FREE-plan storefronts only, as described above.

We do not sell personal information. We may disclose information if required to do so by law, or to protect the rights, property or safety of Dineator, our customers, or others.

How long we keep information

We retain information for as long as an account is active and as needed to provide the platform, and afterwards for as long as reasonably necessary to comply with our legal obligations, resolve disputes and enforce our agreements. Restaurants can request deletion of their data as described below.

Cookies and similar technologies

We use essential cookies to keep users signed in and to maintain session state on the platform and on restaurant storefronts. On FREE-plan storefronts, third-party advertising cookies may also be set by an ad network as described in the Advertising section above. You can control cookies through your browser settings, though disabling essential cookies may prevent parts of the platform from working.

Your rights

You may ask us to access, correct or delete the personal information we hold about you, or ask questions about how it is used, by contacting us at hello@dineator.com. If you are a guest of a specific restaurant, you can also contact that restaurant directly, as they control their own guest data.

Children's privacy

Dineator is not directed at children and is not intended for use by children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and material changes will be communicated where appropriate.

Contact us

If you have questions about this Privacy Policy or how your information is handled, contact us at hello@dineator.com.