Privacy Policy

What we collect

Account details: your name, email address, a secure hash of your password, your language, time zone and, if you arrived through one of our links, the campaign that referred you.

Your workspace: restaurant details, menus and the original menu files, photos, logos, drafts, schedules, posts and your settings.

Connected accounts and reviews: the identifiers and names of the social accounts you connect (we don’t receive your social passwords) and, on the Pro plan, your Google reviews, including the reviewer’s public name, rating and text, plus the replies you approve.

Billing: your plan, subscription status and Stripe customer and subscription identifiers. Stripe collects your card details; we never see or store your full card number.

Communication and technical data: messages you send us, whether our emails were delivered, and technical data such as IP address, browser type, request times and security events. When you sign up or reset a password, your browser solves a small calculation that proves it is not an automated bot; this check runs on our own server and uses no cookies or tracking.

How we use it

We use this information to run your account and workspace, read your menus and create images and captions, publish the posts and replies you approve, handle payments and subscriptions, send account, billing and service emails, provide support, keep Tavolista secure and prevent abuse, meet legal obligations, and understand in aggregate how Tavolista is used so we can improve it.

We do not sell your personal information, do not share it for cross-context behavioral advertising, do not show ads in Tavolista and do not use your content to train AI models.

AI processing

To read menus and write captions, we send the menu content and dish details needed for the task through OpenRouter to AI models from providers such as Google; for these text requests we only use providers that do not keep your data after answering. To create food images, we send the dish details and, if you choose one, your own dish photo through OpenRouter to OpenAI, which does not use this data to train its models and may keep it for a limited time to prevent abuse. We do not send your account password or payment details to AI providers.

Who we share it with

We share information only with the service providers we need to run Tavolista, under agreements that limit their use of it: OpenRouter, Google and OpenAI for AI processing; Zernio for connecting social accounts, publishing and syncing Google reviews; Meta, Google and TikTok when you connect and publish to their platforms; Stripe for payments; Cloudflare for secure network delivery; and Hetzner for encrypted backups. Our email is sent from our own mail server.

We may also disclose information when the law requires it, to protect the rights, safety and security of our users, us or others, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to your information.

Sales partners

If you signed up through a Tavolista sales partner, that partner sees your restaurant’s name, when you signed up, whether you are on a trial or a paid plan, and the commission your payments earned them. Partners never see your content, contact details or payment details.

If you are a sales partner, we keep the name, email address, phone number, city, state and website you give us, your referrals and commissions, to run the partner program. Stripe collects your identity, bank and tax details directly for payouts. When you use the phone demo, the menu photo is read and then deleted; the dishes found and the sample post are kept for 30 days.

Cookies and similar technology

We use one essential cookie, restaurant_session, to keep you signed in; it expires after 30 days. Your browser’s local storage remembers your language, your selected restaurant, which notices you have seen and, if you arrived through one of our links, that link’s campaign code for up to 30 days, or a sales partner’s code for up to 90 days. Sales partners who sign in to their partner page get a second essential cookie, partner_session, which expires after 30 days. We don’t use advertising cookies, tracking pixels or third-party analytics. We count visits to our website ourselves, without cookies and without third parties; we only keep daily totals, and the anonymous key that recognizes a visitor for one day is deleted at the end of that day. Stripe checkout and the sign-in pages of Instagram, Facebook, Google and TikTok have their own privacy and cookie notices. Because we don’t track you across sites, there is nothing to change for "Do Not Track" signals.

Where we process data

Tavolista runs on servers in Germany, and our encrypted backups are stored in Germany. SCINTILLA MEDIA LLC is based in the United States, and our providers may process data in the United States and other countries under their own safeguards.

How long we keep it

We keep account and workspace data while your account is open. When you delete content, it is removed from Tavolista right away and from backups within about 35 days. After an account ends, we delete its data within 30 days, except records we must keep, such as billing records for tax purposes (generally up to 7 years), and information needed to prevent abuse or resolve disputes. Technical logs are kept for a short period for security.

How we protect it

We protect your information with encrypted connections, hashed passwords, access controls, encrypted off-site backups that we test regularly and monitoring for misuse. If a security incident affects your personal information, we will notify you as the law requires.

Your choices and rights

You can view and change most of your information in your workspace, download your images and captions, and turn off reminder emails under Automation; we will still send essential account and billing emails.

You can also ask us to confirm what personal information we hold about you, to give you a copy, to correct it or to delete your account and its data. Email [email protected] from your account email and tell us what you need. We verify your identity before we act and reply within 45 days. Depending on the state you live in, such as California, Colorado, Connecticut, Texas or Virginia, you may have these rights by law, and you can appeal a decision by replying to our answer. You can make a request through an authorized agent; we may ask for your signed permission. We will not treat you differently for using your rights.

Restaurant guests: if you wrote a Google review of a restaurant that uses Tavolista, we process it on behalf of that restaurant. Please contact the restaurant first; we will help it respond to your request.

Children

Tavolista is not intended for anyone under 18, and we do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

Changes and contact

We update this policy when our practices change. For material changes, we notify you by email or in Tavolista before they take effect; the effective date at the top shows the current version. Questions or requests: [email protected], or SCINTILLA MEDIA LLC, 30 N Gould St, STE R, Sheridan, WY 82801, United States.