Privacy Policy

What we collect

Restaurant staff sign in with email authentication. For staff accounts we store:

• Email address and authentication data
• Role and restaurant association (e.g. owner, waiter)
• Activity tied to the account, such as menu edits and order handling

Guests

Guests never create an account. When a guest scans a table QR code and uses the menu, we store only:

• A display name the guest chooses for the table session
• Orders placed during the table session
• An optional rating and comment, if the guest leaves one

How we use it

We use this data to run the service: showing the menu, keeping a shared table cart in sync, routing orders to staff, and letting restaurants see feedback guests chose to leave. We do not sell personal data and do not use it for advertising.

Payments

Guests pay at the table, directly with the restaurant. Eddo does not process guest payments online and does not collect guest payment details. Restaurant subscriptions are billed through Stripe, which handles that information under its own privacy policy.

Storage & processors

We rely on a small set of service providers to operate Eddo:

• Supabase — database and authentication (staff and guest session data).
• Vercel — hosting and delivery, incl. Speed Insights performance analytics.
• Stripe — subscription billing for restaurants.
• Google Analytics — aggregate website usage analytics (page views, traffic sources).

Retention

Staff account data is kept while the restaurant's account is active and deleted when it closes, except where we must retain records for legal or accounting reasons. Guest data is tied to a table session and kept only as long as the restaurant needs it for order history and feedback.

Cookies

Eddo uses cookies only for what the service needs:

• An authentication session cookie for signed-in staff
• A locale preference, so the interface stays in your language
• Google Analytics cookies on our website, to measure aggregate traffic

Your rights

We follow GDPR-aligned practices. You can ask us to access, correct, or delete personal data we hold about you. Staff manage most account data in the dashboard; guests who want session data removed can contact us or the restaurant they visited.