Privacy policy

1. Who we are

Tablyvio is provided by [Company legal name], a company registered in the United Arab Emirates under trade licence [Trade licence number] with its office at [Registered office address], Dubai, United Arab Emirates ("we", "us", "our").

This policy explains how we collect, use, share and protect personal data when you visit our website, contact us, start a trial, or use Tablyvio. We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other applicable UAE laws.

2. Our role

We act as the controller of personal data about our website visitors, prospective customers and the people who manage customer accounts with us.

When a restaurant uses Tablyvio to record information about its own guests or staff (for example names, mobile numbers, birthdays, allergy notes or loyalty points), the restaurant is the controller of that data and we act only as its processor. We handle that data only to provide the service and on the restaurant's instructions. Guests who want to exercise their rights over that data should contact the restaurant directly; we will help the restaurant respond.

3. Personal data we collect

Contact and enquiry details: name, company or restaurant name, mobile and WhatsApp number, email, emirate, business type and anything you write in a message or form.
Account and billing details: account holder names, business details such as trade licence and VAT TRN, billing address, subscription plan, invoices and payment records. Card payments are handled by our payment provider; we do not store full card numbers.
Staff user details inside the app: staff names, roles and PINs created by the account owner.
Support records: messages, calls, screenshots and notes from support requests.
Technical data: device type, browser, IP address, app version and error logs, used to keep the service secure and working.
Restaurant guest data entered by our customers into the app, which we process on their behalf as described above.

4. How and why we use it

We use personal data only when we have a lawful reason to:

To provide the service under our contract with you: setting up accounts, onboarding, training, support and billing.
To answer enquiries and arrange demos and trials that you ask for.
To keep the service secure and improve it, for example detecting misuse, fixing faults and understanding which features are used. We do this in our legitimate interests, in ways you would reasonably expect.
To meet legal obligations, such as keeping tax and accounting records required by UAE law and responding to lawful requests from authorities.
To send marketing about our products, only where you have agreed or where the law allows it. You can opt out at any time.

5. Data stored by the app

When Tablyvio is used in a browser or installed on a device, the restaurant's menu, orders, invoices, customers and staff records are stored on that device, in the browser's local storage. That data does not leave the device unless the account owner exports a backup or, once available, turns on cloud sync.

The restaurant is responsible for protecting its devices and backups. When cloud sync is launched, the data will be stored on servers we contract for that purpose, and this policy will be updated before that happens.

We do not sell personal data. We share it only with:

Service providers who help us run our business, such as hosting, email, messaging (including WhatsApp Business), payment processing and accounting providers. They may use the data only to provide services to us and must protect it.
Integration partners you turn on, such as an e-invoicing accredited service provider, a delivery platform or a payment terminal provider, to the extent needed for that integration.
Authorities and advisers where the law requires it, for example the Federal Tax Authority, or to protect our rights.
A buyer or successor if our business is reorganised or sold, under the same protections.

7. Where your data is kept

We aim to store personal data in the United Arab Emirates. Where a provider stores or accesses data outside the UAE, we make sure it is transferred only to countries with adequate data protection or under safeguards permitted by UAE law.

8. How long we keep it

Enquiries and trial data that do not become a customer account: up to 2 years after our last contact.
Customer account, billing and tax records: for as long as the account is active and then for the period UAE tax law requires (currently at least 5 years).
Support records: up to 3 years after the issue is closed.
Data we process for restaurants: for as long as the restaurant's instructions and our agreement require, then deleted or returned.

9. How we protect it

We use appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls, staff PINs and role permissions within the app, limited staff access to customer data, and confidentiality commitments from our team and providers. See our security page for more detail. If a breach is likely to put your data at risk, we will notify you and the relevant authority as the law requires.

10. Your rights

Under UAE law you may have the right to:

ask what personal data we hold about you and receive a copy;
have inaccurate data corrected;
have data deleted, where we no longer need it;
restrict or object to certain processing, including direct marketing;
receive data you gave us in a portable format;
withdraw consent at any time, where we rely on consent.

To make a request, email [privacy email]. We may ask you to confirm your identity and will reply within 30 days. If you are not satisfied with our response, you may complain to the UAE Data Office.

11. Marketing messages

We send product news and offers by email, SMS or WhatsApp only with your permission or where the law allows. Every message tells you how to stop them, or you can contact us.

12. Children

Tablyvio is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children through our website.

13. Cookies

Our website uses only the storage it needs to work. See our cookie policy.

14. Changes to this policy

We may update this policy. We will post the new version here with a new date and, if the changes are significant, tell customers by email or in the app.

15. Contact us

[Company legal name]
[Registered office address], Dubai, United Arab Emirates
Email: [privacy email]
Phone: [+971 phone number]