Account creation and sign-in may use an email address, authentication data, restaurant name and business contact details. Guest ordering may use a customer's name, phone number, optional email, delivery address, table, cart contents, order status and payment status. These data support the account, order routing, customer support, security and required business records.
Responsibility for restaurant account and guest order data depends on who determines the purposes and means of each processing activity. The restaurant is responsible for using guest data to fulfil its orders; Efody may process data on the restaurant's instructions to provide the software. The application uses Supabase infrastructure and online payment provider services. When a restaurant location map is opened, the browser connects to Google Maps and technical connection data may be sent to Google. Card details are entered in payment flows hosted by the selected provider.
Data are processed on applicable grounds such as providing a requested service or contract, meeting legal duties and protecting service security or legitimate interests where permitted. Data are kept for as long as needed for the stated purposes and any legal retention duties. Access controls and technical and organisational safeguards are used; no internet service can promise absolute security.
Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, request portability, or withdraw consent. Requests should be sent to the controller using the contact details in the provider information. For a restaurant order, contact the restaurant named on the ordering page first. You may also complain to a competent data protection authority.