Privacy policy

1. Who is responsible for your information

The service is operated by Tapfeed. Our person in charge of the protection of personal information is Aymeric Masson, reachable at support@tapfeed.com.

When you order at an establishment, the establishment is responsible for how it uses your order (preparation, service, billing). Tapfeed then acts on its behalf, as a service provider.

2. Information we collect

Establishment clients (you order with a QR code):

• what you order, your table number, the time and the language you chose (French or English);
• notes you write for the kitchen (“no onions”): please don’t include personal information there;
• server calls and bill requests;
• the rating and comment you leave anonymously, if you choose to;
• if you pay on your phone: the amount, the tip, the card type and its last 4 digits. Payment is processed by Stripe: Tapfeed never sees or stores your card number.

We don’t ask for your name, email or phone number. Your phone keeps your current order in memory during your visit (browser local storage).

Establishments and their staff:

• the owner’s email and password (the password is stored encrypted; we cannot read it);
• establishment information: name, address, province or state, legal name and tax numbers printed on receipts, logo, photos and menu;
• station account usernames (Kitchen, Bar, Floor, Manager), without email;
• the subscription: plan, dates, invoices. The establishment’s card is handled by Stripe; we only see its type and last 4 digits;
• the Stripe account connected to collect client payments: its identifier and status.

Website visitors: we use no advertising cookies and no audience measurement tools. Our host keeps technical logs (IP address, browser, requested page) for security and reliability. Fonts are loaded from Google Fonts, which then receives your IP address.

Demo request: if you fill in the “Book a demo” form, we receive your name, the establishment’s name, the city, your email or phone number and your message. Your IP address isn’t kept: only a fingerprint, renewed daily, is used to block abusive submissions. The online demo itself collects nothing: everything happens in your browser.

3. Why we use it

• to send your order to the establishment and show you its progress;
• to process payments, show receipts and let the establishment get paid;
• to provide the establishment’s statistics (sales, items, busy hours), never identifying clients;
• to manage accounts, the free trial, subscriptions and Tapfeed billing;
• to answer support and demo requests;
• to keep the service secure, prevent fraud and meet our legal obligations.

We don’t use your information for advertising, profiling or decisions based solely on automated processing, and we never sell it.

4. Who we share it with

Your information is shared with the establishment where you order. We also rely on providers who process it for us, following our instructions and under confidentiality commitments:

• Supabase: database, accounts and files, hosted in Canada (Montreal);
• Vercel: website hosting, with servers in the United States and elsewhere;
• Stripe: payments and subscriptions, in Canada and the United States;
• our email provider (account confirmation, forgotten password), in the United States;
• DeepL or MyMemory: automatic translation of menu text offered to establishments (no client information);
• Google (Gemini) and, as a backup, Anthropic (Claude): automatic reading of menu photos or PDFs and answers from the establishment workspace assistant, in the United States. No client information or sales figures are sent to them, and Tapfeed keeps neither the files nor the conversations; with Google’s free tier, this content may be used to improve its models: don’t type personal information to the assistant;
• Google Fonts: website fonts.

Some of these providers are located outside Quebec. Before entrusting them with information, we assess the protection they offer and ensure adequate protection by contract. We may also disclose information when required by law (for example at the request of a competent authority).

5. How long we keep it

• orders, payments and receipts: as long as the establishment’s account is active, then up to 6 years for tax and accounting obligations;
• closed establishment account: data deleted within 90 days, except what the law requires us to keep;
• technical logs: a few days to a few weeks;
• demo requests: up to 2 years after our last exchange, or sooner if you ask;
• current order on your phone: cleared by your browser at the end of your visit.

After these periods, information is destroyed or anonymized.

6. How we protect it

Connections are encrypted (HTTPS), passwords are encrypted, each establishment can only access its own data (security rules enforced by the database) and only people who need it have access. Payments are processed by Stripe, which is PCI DSS certified.

To help an establishment, a member of the Tapfeed team can temporarily open its workspace (4 hours at most, can be extended). Each opening is logged and shown to the owner on their Team page.

If a confidentiality incident presents a risk of serious injury, we notify Quebec’s Commission d’accès à l’information and the people concerned, and we keep an incident register.

7. Your rights

You can ask to access your information, correct it, receive it in a common format, stop its dissemination or withdraw your consent. Write to us at support@tapfeed.com. We reply within 30 days. Since orders are not linked to your identity, we may ask for details (establishment, date, order number) to find them.

If you are not satisfied with our answer, you can file a complaint with Quebec’s Commission d’accès à l’information or the Office of the Privacy Commissioner of Canada.

8. Minors

The service asks for no identity information to order. Establishment accounts are reserved for adults.

9. Changes to this policy

We may update this policy. The date at the top of the page shows the latest version. If a change is significant, we will inform establishments by email or in their dashboard.

10. Contact us

Person in charge of the protection of personal information: Aymeric Masson, support@tapfeed.com.