Privacy policy

What we process

From restaurants (our customers): business name, account email, WhatsApp number, billing details and the menu content they publish.

From diners: no sign-up is required. If you request a reservation we store the name, phone, optional email and reservation details to hand them to the restaurant. We also record anonymous usage metrics (QR scans, dish views, device type) without identifying you.

Why we use it

To provide the service: publish the restaurant's menu, deliver reservations and orders to the restaurant, and show the restaurant analytics about its own menu.

We do not sell personal data or share it with third parties other than the providers needed to run the platform (hosting, database and payment processing).

Your rights

Under Colombia's Law 1581 of 2012 (Habeas Data) you may access, update, correct and request deletion of your personal data, and revoke consent to its processing.

To exercise these rights, write to daniel@nostaconsulting.live. If your reservation was with a restaurant you can also contact them directly: the restaurant is the controller of its customers' data.

Retention and security

Data is stored with cloud providers using encryption in transit and at rest, accessible only to authorized personnel. We keep data while the restaurant's account is active or as required by law.