Privacy Policy

Who we are

BeforeTable provides WebAR 3D restaurant menus and a light POS layer for independents (US, Canada, UK, EU English-first). We are not a full Toast-class hardware POS vendor.

Privacy questions: [email protected]. Form inquiries may also be routed to our operations inbox ([email protected]).

Information we collect

Account data: name, email, password credentials (hashed), Google sign-in IDs when used, and restaurant profile details (name, address, hours, phone, logo).

Menu and media: dish names, prices, descriptions, photos, and 3D/AR model files needed to run your public menu.

Orders and operations: order contents, table numbers, tips, payment method labels you record, kitchen/station metadata, and related timestamps.

Contact forms: name, business name, phone, email, topic, and message when you submit /contact.

Careers: name, email, phone, portfolio/LinkedIn links, location, role applied for, and cover letter when you apply on /careers.

Technical data: IP address, device/browser type, and logs needed for security, debugging, rate limiting, and performance.

How we use information

To provide and improve the Service: host menus, AR previews, QR links, dashboards, and optional POS modules.

To process plan upgrades, invoices, support, partnership, and hiring workflows.

To secure accounts, prevent abuse (including form spam), and comply with law.

To send transactional email (signup codes, receipts when configured, important service notices). Marketing email only with appropriate consent where required.

Legal bases (EEA/UK where applicable)

Contract: delivering the Service you signed up for.

Legitimate interests: securing the platform, improving product quality, responding to business inquiries.

Consent: where required for non-essential cookies/analytics or optional marketing.

Legal obligation: tax, accounting, and lawful requests.

Sharing

We use subprocessors for hosting, databases, media storage (e.g. Cloudinary), email delivery (e.g. Resend), and payment-related providers when you enable them. They process data on our instructions.

We do not sell personal information. We may disclose information if required by law or to protect rights and safety.

Public menu pages intentionally show dish content you publish. Do not upload personal data of guests into dish fields.

International transfers

Data may be processed in the United States and other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Retention & security

We retain account and restaurant data while your account is active and as needed for legal, tax, and dispute purposes.

Contact and job applications are kept as needed to respond and for hiring records, then deleted or minimized according to our internal schedules.

We use industry-standard safeguards (encryption in transit, access controls). No method is 100% secure; protect passwords and staff PINs.

Your choices & rights

Update restaurant and profile data in Settings. Request account deletion or data questions via [email protected].

Depending on your region you may have rights to access, correct, delete, restrict, or port data, and to object to certain processing. Contact us to exercise them. You may lodge a complaint with a supervisory authority where applicable.

Children

The Service is directed at restaurants and adults. We do not knowingly collect personal information from children under 16 for marketing accounts.

Changes

We may update this Policy. The “updated” date at the top will change. Material changes may be announced in-product or by email when appropriate.

Contact

Privacy questions: [email protected]. Billing: [email protected].