Privacy Policy

1. Who we are and what this policy covers

Tech for Tabs, LLC (“Tech for Tabs,” “we,” “us”) provides an operating system for bars and restaurants. This Privacy Policy explains how we handle personal information in connection with our website (techfortabs.com), our sign-up flow, the Tech for Tabs application and our APIs (the “Services”).

We handle personal information in two different roles:

• As a controller for information about our customers' account holders, billing contacts and website visitors — for example, when you sign up, contact us or request a demo.
• As a processor (service provider) for information our customers enter into or collect through the Services about their own staff, guests and vendors (“Customer Data”). The restaurant or bar that uses Tech for Tabs decides why and how that information is processed, and its own privacy notice applies. Our processing of Customer Data is governed by our agreement with that customer, including our Data Processing Addendum.

If you are a guest or employee of a business that uses Tech for Tabs and want to exercise your privacy rights, please contact that business directly. If you contact us, we will forward your request to them and assist them in responding.

2. Information we collect

Information you give us

• Account and business information: your name, email address, phone number, password (stored only as a salted hash), business name, business type, location names and addresses, and time zone.
• Billing information: billing contact details and subscription choices. Card payments are handled by our payment processor (Stripe); we receive limited details such as card brand, last four digits and expiry date, never the full card number.
• Enquiries and communications: what you send when you contact us, request a demo or ask for Enterprise pricing — such as your name, email, phone, company, number of locations, business type and message — and our correspondence with you.

Customer Data you or your team enter into the Services

• Business records: invoices, vendors and vendor contacts, items and prices, recipes, inventory counts, orders, documents, sales and expenses.
• Staff information: names, email addresses, phone numbers, job titles, roles and permissions, schedules, time-clock punches, timesheets, time-off requests, pay rates and tip allocations, and PINs used for the time clock and manager approvals.
• Guest information: names, phone numbers and email addresses, reservation and waitlist details, party size, notes such as allergies, dietary preferences and occasions, visit history and spend, and checks and orders taken on the point of sale.

Information collected automatically

• Usage and device information: IP address, browser and device type, pages and screens viewed, actions taken, and timestamps, collected in server logs and the in-app activity log.
• Cookies: a strictly necessary session cookie that keeps you signed in. See our Cookie Policy.

Information from third parties you connect

• Point-of-sale systems such as Toast, Square or Clover, when you connect them: sales totals, sales categories and items sold.
• Email and file imports: invoices and statements your vendors email to your Tech for Tabs inbox, and files you import from distributor portals, which may include vendor contact details.

3. How we use information

We use personal information to:

• provide, operate and maintain the Services, including creating accounts and provisioning locations;
• process subscriptions and payments, and send receipts and billing notices;
• authenticate users, keep the Services secure, and detect and prevent fraud and abuse;
• respond to enquiries, provide support and schedule demos;
• send service communications, such as alerts you configure, security notices and changes to our terms;
• send product news and marketing to account holders and people who asked for it — you can opt out at any time using the link in the email;
• understand how the Services are used and improve them, using aggregated or de-identified information where possible;
• comply with law and enforce our agreements.

We process Customer Data only to provide the Services to the customer who controls it and as that customer instructs. We do not use Customer Data to market to a customer's guests or staff.

4. AI processing of invoices

If you use AI invoice capture, the invoice images, PDFs or emails you submit are sent to our AI provider, Anthropic, to read the vendor, invoice details and line items. Anthropic processes this content as our subprocessor under commercial terms that do not permit it to train its models on that content. The extracted data is shown to your team as a draft and is not posted until a person approves it.

5. Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on these legal bases:

• Contract — to provide the Services and process payments under our agreement with you;
• Legitimate interests — to secure and improve the Services, prevent abuse, and communicate with business contacts about our products, balanced against your rights;
• Consent — where we ask for it, such as for certain marketing; you can withdraw consent at any time;
• Legal obligation — to keep records and respond to lawful requests.

6. How we share information

We share personal information only as follows:

• Subprocessors who help us run the Services — hosting, database, payments, email delivery and AI invoice reading — under contracts that require them to protect it and use it only to provide services to us. See our current list of subprocessors.
• Third-party services you connect, such as your point-of-sale provider, at your direction.
• Within your account — information is visible to the Authorized Users your account owner gives access to, according to their roles and locations.
• Professional advisers, such as lawyers and accountants, under confidentiality obligations.
• Legal requirements — when we believe in good faith that disclosure is required by law, subpoena or court order, or is necessary to protect the rights, safety or property of Tech for Tabs, our customers or others. Where lawful, we will notify the affected customer first.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

7. Cookies

We use a strictly necessary cookie to keep you signed in and protect your session. We do not use advertising cookies or cross-site tracking. Details are in our Cookie Policy.

8. How long we keep information

• Account information is kept while your account is open and for as long as needed afterwards to comply with legal, tax and accounting obligations and resolve disputes.
• Customer Data is kept for the life of the customer's subscription. After cancellation, it remains available for export for 30 days, then may be deleted from active systems; backup copies are overwritten within 90 days. An expired trial or lapsed subscription locks an account but does not delete it.
• Enquiries from our contact and demo forms are kept for up to 24 months unless they become a customer relationship.
• Logs are kept for a limited period for security and troubleshooting, typically no longer than 12 months.

9. Security

We protect personal information with technical and organisational measures appropriate to the risk, including tenant isolation on every database query, encryption in transit, encryption of stored third-party credentials, hashed passwords and API keys, role-based access control, audit logging and managed backups. No system is perfectly secure, but we work hard to protect your information and will notify affected customers of a security incident as required by law. Read more on our Security page.

10. Your rights and choices

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent. Account holders can update most account information directly in the Services.

California residents

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect, use and disclose; to request deletion and correction; and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined, and we honour Global Privacy Control signals. We will not discriminate against you for exercising your rights. You may use an authorized agent to make a request on your behalf.

EEA, UK and Switzerland

You have the rights described above under applicable data protection law, and the right to lodge a complaint with your local supervisory authority.

How to make a request

Email privacy@techfortabs.com. We will verify your request using information associated with your account or enquiry and respond within the time required by law (generally 30 days, or 45 days under California law). If your request concerns Customer Data held for a restaurant or bar, we will refer it to that business and assist them.

11. International transfers

Tech for Tabs is based in the United States, and we and our subprocessors process information in the United States. Where we transfer personal information from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

12. Children

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 13 through our website or sign-up. Customers may enter information about employees who are minors where the law allows it, and are responsible for doing so lawfully. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify account owners by email or in the Services before the changes take effect. The “Last updated” date above shows when it last changed.

14. Contact us

Questions or requests about privacy: privacy@techfortabs.com. Tech for Tabs, LLC, Florida, United States.