Privacy Policy

Who this covers

• Customers who order from a restaurant through an app or website powered by Resto. Resto handles this information on behalf of that restaurant, which also has its own relationship with you.
• Restaurant owners and staff who use the Resto dashboard or kitchen app.
• Visitors to restolive.ca.

What we collect

• Account details: your name, email address and, if you add it, phone number. If you sign in with a password, it is stored only in hashed form by our sign-in provider.
• Google sign-in: if you choose it, Google shares your name, email address, profile picture and a Google account identifier. We use them to create or link your account and nothing else.
• Orders: the items you order, pickup or delivery, delivery address and instructions, notes, totals, and your order history.
• Payments: card payments are processed by Stripe. We receive the payment's status and reference numbers, never your full card number.
• Loyalty and preferences: points and their history, favourite items, preferred location, and your notification settings.
• Reviews you choose to post.
• Device and technical information: a push notification token if you allow notifications, and standard request logs (such as IP address and time) used for security and to prevent abuse.
• Restaurant staff: name, email address, role, and which locations you work at.
• Visitors to this site: what you send through the contact form. Site analytics count page views and clicks on buttons such as “Book a Demo”, without cookies and without identifying you.

How we use it

• To take, prepare and deliver your orders, and to process payments.
• To send order updates by push notification or email.
• To run the restaurant's loyalty program and apply promotions.
• To send you offers and news from the restaurant, only if you choose to receive them. You can unsubscribe from any offer email, or turn offers off in your profile, at any time.
• To keep accounts secure, prevent fraud and abuse, provide support, and keep the service working.

We do not sell personal information, and we do not use it for third-party advertising.

Who we share it with

• The restaurant you order from, which sees your orders and the contact and delivery details needed to fulfil them.
• Service providers that run parts of Resto for us: Supabase (database and sign-in), Vercel (hosting), Stripe (payments), Resend (email), Expo and Google Firebase Cloud Messaging (push notifications), Upstash (abuse prevention) and Google (sign-in, if you choose it).
• Delivery partners: when a restaurant uses Uber Direct for a delivery, your name, phone number and delivery address go to Uber so a courier can reach you.
• Authorities, when the law requires it.

Our service providers may store or process information outside Canada, including in the United States, where it is subject to the laws of those countries.

How long we keep it

We keep your account information while your account is open. Order and payment records are kept as long as tax and accounting law requires, even after an account is deleted. Request logs are kept only briefly.

Your choices

• Notifications and offers: offers are off unless you turn them on, at sign-up or in your profile. Change any of them in your profile, use the unsubscribe link in an offer email, or turn off notifications for the app on your device.
• Delete your account from your profile in the app or website. This removes your name, email address, phone number, favourites and push tokens, and closes your sign-in. Order and payment records are kept as described above.
• Access or correction: to see the personal information we hold about you, or to correct it, email privacy@restolive.ca.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Security

Information is encrypted in transit, access is limited to the people and systems that need it, and the mobile apps keep sign-in tokens in the device's secure storage. No system is perfectly secure, but we work to protect what you trust us with.

Children

Resto is not intended for anyone under 16, and we do not knowingly collect their information.

Changes

When this policy changes, we update it here and change the date at the top. If a change is significant, we will tell you in the app or by email.

Contact

Questions or requests about privacy: privacy@restolive.ca. Scient Solutions, Ontario, Canada.