Privacy policy

This is a translation for convenience. In case of conflict, the Italian version prevails.

Data controller

Mirko Bosetti, Via dei Caputei 1, fraz. Sclemo, 38070 Stenico (TN), Italia, VAT no. 02859800225, which runs Tavoola (tavoola.menu). For any request about your data: tavoola.menu@gmail.com.

Data we process

• Account: name, email and password (stored only in hashed form). If you sign in with Google, we receive your name, email and profile picture from Google.
• Venue and menus: venue details (name, address, phone) and the content you publish, including photos.
• Payments and invoicing: company name, address, VAT number, SDI code or PEC and, for prints, the name and phone number of whoever picks them up and, if you ask for delivery, the address to deliver to. Subscription payments are handled by Stripe: we never see or store card data.
• Support requests: what you write to us via the contact form or by email.
• Your guests: people opening a public menu do not sign up and receive no cookies. QR scans are logged in anonymous, aggregate form (country, device type and browser language), with no IP addresses or personal identifiers. In the same way we count, as daily totals, how many times a menu item is tapped and which sections scroll into view: with no cookies, no session identifiers and without recording the IP address, so nobody can be recognised or followed. If the venue has turned on “Ask the menu”, the question a guest types goes to the artificial intelligence provider to find matching dishes and is not stored: we only count how many questions arrive.
• Free menu analysis: whoever runs it at tavoola.menu/analisi-menu, even without an account, uploads photos or the PDF of their menu. We read them with artificial intelligence to transcribe the menu and delete them as soon as they are read; we keep the menu text (dishes, descriptions, prices) and the score. If you ask for the report you also leave your email and, if you like, the venue name, with your consent to be contacted as a business. We do not record the IP address: we only use it, in memory, to limit rapid-fire requests.
• Technical data: the hosting provider's server logs, which include IP addresses, for security and operation of the service.

Purposes and legal basis

• Providing the service and managing accounts, subscriptions and print orders: performance of a contract (Art. 6.1.b GDPR).
• Invoicing and tax obligations: legal obligation (Art. 6.1.c).
• Service communications, support, security and abuse prevention: legitimate interest (Art. 6.1.f).
• The free menu analysis: your request (Art. 6.1.b). The report by email and later contacts about your menu and Tavoola's services: the consent you give by ticking the box (Art. 6.1.a), which you can withdraw at any time by replying to one of our emails or writing to tavoola.menu@gmail.com.

To support you, the people who run Tavoola can open your venue's dashboard and see or fix what you would see (for example the address or a price). They do it only to help you, every access is logged with name and time, and from there they cannot pay, change the email or password, or delete the account.

We do not sell data, use it for advertising or make automated decisions about you. The artificial intelligence features (automatic translation, suggested allergens and descriptions, importing and analysing a menu from a photo, “Ask the menu”) run only when you use them and only receive the menu text or the image you upload.

Who we share data with

We use these providers, appointed as data processors, each only for its own part:

• Vercel (website hosting, storage of photos and PDFs, visit statistics for the website and dashboard, anonymous and cookie-free)
• Neon (database)
• Stripe (payments)
• Resend (email delivery)
• Google (sign-in with Google, only if you choose it)
• Vercel AI Gateway and Anthropic (artificial intelligence features, only if you use them)
• OpenStreetMap Foundation (the venue map: we derive the venue's position from its address, and whoever opens the map downloads the images from its servers, which see their IP address)

Print orders are produced and invoiced by the partner named in the order (for example the partner stationery shop): we pass on the necessary data (content to print, billing details, contact name, phone and email and, if you ask for delivery, the address), which it processes as an independent controller to issue the invoice and hand over the order. Delivery within the province of Trento, if you ask for it, is done by us with the same data. Subscription billing data is shared with our accountant.

Transfers outside the EU

Some providers process data in the United States. Transfers rely on the provider's EU-US Data Privacy Framework certification or, where missing, on the standard contractual clauses approved by the European Commission (Art. 46 GDPR).

How long we keep data

• Account data and content: while the account is active. When you delete it we erase them immediately; backup copies are overwritten within 30 days.
• Billing data: 10 years, as required by Italian law, even after account deletion. It remains in the invoices issued and with Stripe. Print order data stays in your order history while the account is active, and with the print shop for as long as the law requires.
• Support requests: as long as needed to handle them.
• Free menu analysis: photos and PDFs are deleted as soon as they are read; the menu text and score for 90 days, unless you import it into your account (then it becomes one of your menus). The contact email is kept until you withdraw consent, and in any case no longer than 24 months after the last contact.

Your rights

You can request access, rectification, erasure, restriction and portability of your data and object to processing based on legitimate interest by writing to tavoola.menu@gmail.com. You can also delete your account yourself from Settings. If you believe your data is processed unlawfully, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority of your country.

Personal data in your content

If the content you publish includes other people's personal data (for example staff photos), you are the controller of that data and we process it on your behalf. If you need a data processing agreement (Art. 28 GDPR), write to us.

Cookies

We only use technical cookies, so no consent banner is required. Public menu pages set no cookies at all. The dashboard uses:

• the session cookie, required to stay signed in;
• NEXT_LOCALE, the interface language, written only when you change it;
• TAVOOLA_THEME, the dashboard colour theme, written only when you pick one;
• TAVOOLA_MENU, the last menu you picked in the dashboard sections (paper menu, QR code), so the same one opens next time;
• TAVOOLA_ANALYSIS, only if you open the link in the free analysis report or create an account from its page: the analysis code, so the menu waits for you in the dashboard. It lasts 30 days and is removed once you import it.

We use no profiling, analytics or third-party advertising cookies.