Data Governance & Security

Privacy Policy

Effective Date: October 20, 2026 • Your operational trust is our highest priority. Learn how TableTapy and FlowTalk Enterprise protect restaurant records, staff credentials, and guest order information.

1. Information We Collect

When you deploy TableTapy in your food service venue, we collect information necessary to deliver high-speed operational sync:

  • Merchant Account Data: Restaurant trade name, Udyam / GSTIN registration details, manager email, contact phone, branch location, and bank account / UPI VPA for settlement generation.
  • Menu & Operational Data: Item titles, dietary classifications (Veg / Non-Veg / Vegan), pricing tiers, modifiers, inventory stock toggles (86 status), and kitchen station routing tags.
  • Order & Transaction Logs: Table identifiers, order timestamps, line items, payment tender modes (Cash, UPI QR, Credit Card), token numbers, and discounted bill calculations.
  • Customer Interaction Data: Contact details entered voluntarily by diners for digital WhatsApp bills or loyalty rewards (phone number, customer name).

2. How We Utilize Your Data

We process data strictly to facilitate your restaurant operations:

Real-Time Kitchen Routing

Directing KOT chits to kitchen thermal printers and captain tablets within <100ms.

Online Delivery Relays

Synchronizing live orders and 86 stock status with Swiggy and Zomato through UrbanPiper APIs.

Financial Reconciliation

Compiling day-end Z-reports, cashier drawer shifts, and GST tax ledger summaries.

Security & Abuse Prevention

Preventing unauthorized access to cash drawer commands and staff shift overrides.

3. Data Protection & Cloud Security Standards

TableTapy utilizes enterprise-grade cloud infrastructure powered by Supabase and Next.js Edge networks. All communications across browser terminals, kitchen displays, and database servers are protected by Transport Layer Security (TLS 1.3) with 256-bit AES encryption at rest.

We adhere to strict Row Level Security (RLS) policies ensuring complete multi-tenant tenant isolation. No restaurant can ever inspect or access the inventory, pricing, or sales data of another establishment.

4. Third-Party Sharing & Non-Sale of Data

We never sell, rent, or trade your restaurant or customer data to marketing brokers or advertising networks. Data is shared only with verified technical providers necessary to execute core operations:

  • UrbanPiper / Swiggy / Zomato (for delivery order relay and stock sync).
  • NPCI / UPI Payment Service Providers (for dynamic QR payment status verification).
  • Transactional SMS / WhatsApp API providers (for digital receipt delivery).

5. Merchant Data Rights & Retention

Restaurant owners can export their complete menu catalogs, historical order books, customer contacts, and tax audit records at any time. Upon formal account closure, merchant data is securely purged in accordance with statutory accounting retention requirements.

6. Privacy Officer Contact

For privacy audits, data deletion requests, or compliance inquiries:

FlowTalk Enterprise — Data Privacy Group

MSME Registration: Govt. of India

Product: TableTapy Restaurant Suite

Email: privacy@flowtalk.in / privacy@tabletapy.com