Privacy Policy

RESRV ("we", "us", "our") operates the digital menu platform at resrv.co. This Privacy Policy explains what data we collect, how we use it, and your rights with respect to that data.

We collect the following categories of information:

• Account information: your name and email address when you create an account.
• Venue information: your venue name, address, city, state, timezone, logo, and other details you provide when setting up your venue.
• Menu data: menu names, sections, items, prices, descriptions, photos, and any other content you add to the platform.
• Usage analytics: anonymous page view counts on public menu pages (venue ID and timestamp only — no personal customer data is collected).
• Billing information: payment details are handled directly by Stripe and are never stored on our servers. We retain a reference to your Stripe customer ID for billing management.
• Technical data: IP addresses, browser type, and standard server logs used for security and debugging purposes.

We use the data we collect to:

• Provide, maintain, and improve the Service
• Process payments and manage your subscription
• Send transactional emails (e.g. password resets, billing receipts)
• Show you analytics about your menu's performance (view counts)
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not use your data for targeted advertising and we do not sell your data to third parties.

We use the following trusted third-party services to operate RESRV:

• Supabase — database, authentication, and file storage. Your account data and menu content is stored on Supabase infrastructure hosted in Australia.
• Resend — transactional email delivery (password resets, account notifications). We share your email address with Resend solely for this purpose.
• Stripe — payment processing. Stripe handles all payment card data under PCI-DSS compliance. We never see or store your card details.

Each of these services has its own privacy policy and data processing agreements in place.

We retain your data for as long as your account is active. If you cancel your account, we will delete your personal data within 90 days, except where we are required to retain it for legal or compliance purposes (e.g. billing records).

Depending on your location, you may have the right to access, correct, or delete your personal data, restrict or object to its processing, or request a copy in a portable format. To exercise any of these rights, contact us at hello@resrv.co.

We use essential cookies to keep you signed in to your account. We do not use tracking or advertising cookies. The public menu pages use no cookies at all.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), row-level security on our database, and strict access controls. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice in the dashboard. The date at the top of this page reflects when it was last updated.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at hello@resrv.co.