Privacy Policy
Last Updated: June 3, 2026
See also: Terms of Service
1. Scope and Roles
Tableee (“Tableee,” “we,” “our,” or “us”) provides reservation, booking, table, guest, order, communication, billing, analytics, and related business software and services. This Privacy Policy applies to Tableee websites and services, including www.tableee.com, Tableee applications, APIs, widgets, embedded booking experiences, communications, and Tableee-powered features that appear on Business customer or partner websites.
“Business Customers” are organizations that use Tableee to run their operations. “Guests” are people who interact with those Business Customers through Tableee, including booking, ordering, messaging, paying, or joining guest profiles. “Customer Data” means data submitted to, generated in, or processed by Tableee for a Business Customer, including Guest data, operational records, settings, content, usage data, metadata, derived data, and support communications.
Depending on the situation, Tableee may act as an independent controller, a joint controller, a processor, a service provider, or another legally recognized role. Where a separate agreement with a Business Customer applies, that agreement controls for conflicting processor or service-provider obligations. This Privacy Policy does not create rights beyond those required by applicable law or our written agreements.
If you do not agree with this Privacy Policy, do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account and identity information: name, email, phone number, login credentials, authentication records, role, permissions, business affiliation, and profile details.
- Business profile and configuration: business name, locations, operating hours, team data, settings, payment preferences, menus, tables, floor plans, service areas, and branding.
- Guest, booking, and order information: reservations, party size, special requests, preferences, allergies or accessibility notes if provided, order history, payments, refunds, invoices, notes, tags, and communications.
- Payment and billing information: subscription, invoice, transaction, dispute, and payment metadata. Full card numbers are handled by payment processors and are not intentionally stored by Tableee.
- Communications and content: messages, support requests, feature requests, emails, feedback, reviews, attachments, form submissions, and other content you send or upload.
2.2 Information Collected Automatically
- Usage and product telemetry: pages, features, workflows, actions, clicks, searches, timestamps, session events, referrers, conversion events, errors, diagnostics, and performance metrics.
- Device and network data: IP address, approximate location from IP, browser, operating system, device type, identifiers, cookie identifiers, language, time zone, and network details.
- Security and abuse signals: login attempts, rate-limit events, fraud indicators, bot signals, request metadata, suspicious behavior, and audit logs.
- Embedded and partner-site data: data generated when a Tableee widget, booking flow, menu, table-bill, or script is loaded or used on a Business Customer or partner website.
2.3 Information from Third Parties
- Authentication providers, payment processors, email and communication providers, analytics providers, fraud-prevention vendors, and infrastructure providers.
- Business Customers, team members, Guests, partners, public sources, referral sources, and other users who submit or generate information through Tableee.
- Enrichment, verification, compliance, security, and marketing sources, where permitted by law.
3. Business Customer and Guest Data
Business Customers are responsible for ensuring they have the rights, notices, permissions, and lawful bases required to submit Customer Data to Tableee. Guests should review the privacy notices of the Business they interact with because that Business may independently control how it collects, uses, and shares Guest data.
To the fullest extent allowed by law and applicable agreements, Tableee may process Customer Data for the purposes described in this Privacy Policy, our Terms, Business Customer agreements, product documentation, and in-product notices. This includes use for Tableee operations, security, analytics, benchmarking, product improvement, marketing, future products, automation, artificial intelligence, machine learning, model training, model evaluation, and development of new or improved services.
We may create aggregated, anonymized, pseudonymized, or de-identified data and use or disclose it for any lawful business purpose, including analytics, benchmarking, research, training, marketing, investor reporting, product development, and industry insights, provided we do not intentionally identify a person where the data has been de-identified.
4. How We Use Information
We use information for business and commercial purposes, including to:
- Provide, operate, maintain, host, support, troubleshoot, and improve Tableee.
- Create and manage accounts, authenticate users, manage roles, enforce permissions, and maintain business context.
- Process bookings, reservations, orders, payments, refunds, invoices, disputes, reminders, notifications, and communications.
- Personalize experiences, remember preferences, recommend workflows, improve usability, and adapt features to business needs.
- Analyze usage, measure performance, forecast demand, generate reports, build benchmarks, and improve product reliability.
- Develop, test, train, evaluate, and improve existing and future products, services, analytics, automations, AI systems, machine-learning models, recommendations, fraud models, and operational tools.
- Market, advertise, and promote Tableee and related products, including by sending product updates, offers, surveys, research invitations, and customer communications, subject to required opt-outs or consent.
- Protect Tableee, Business Customers, Guests, partners, and the public from fraud, spam, scraping, credential abuse, misuse, security incidents, illegal activity, and violations of our terms or policies.
- Detect, investigate, and respond to competitor misuse, unauthorized benchmarking, reverse engineering, automated extraction, account sharing, circumvention of usage limits, or attempts to copy or exploit the Service.
- Comply with law, enforce agreements, resolve disputes, collect amounts owed, defend claims, respond to legal process, and complete corporate transactions.
We may combine information collected from different sources and across Tableee services, Business Customer websites, partner websites, devices, accounts, and time periods where permitted by law and applicable agreements.
7. Security, Fraud, and Abuse Protection
We use administrative, technical, and organizational safeguards designed to protect information. These may include encryption, access controls, authentication controls, audit logs, monitoring, rate limits, bot detection, abuse investigation, backups, vulnerability management, and incident-response processes.
We may monitor, review, preserve, analyze, or disclose information where we believe it is reasonably necessary to detect, prevent, investigate, or respond to misuse, fraud, spam, scraping, account compromise, denial-of-service activity, unauthorized access, illegal conduct, competitive abuse, attempts to copy the Service, or violations of Tableee policies or agreements.
No method of transmission or storage is completely secure. You use the Service at your own risk and are responsible for protecting your credentials and account access.
8. Retention
We retain information for as long as we determine it is reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain business records, satisfy legal and accounting requirements, resolve disputes, collect amounts owed, enforce agreements, maintain security, prevent abuse, improve products, train and evaluate systems, and support future business needs.
- Account and Business Customer data: retained while accounts or business relationships are active and for a reasonable period afterward.
- Guest, booking, order, and payment data: retained as needed for operations, records, analytics, legal compliance, dispute resolution, fraud prevention, and Business Customer needs.
- Logs, telemetry, and security data: retained based on operational, security, analytics, and compliance needs.
- Backups and archives: residual copies may remain until overwritten or deleted through ordinary backup cycles.
- Aggregated, anonymized, pseudonymized, or de-identified data: may be retained indefinitely where permitted by law.
9. Privacy Rights and Choices
Depending on your location, role, and relationship with Tableee or a Business Customer, you may have rights to access, correct, delete, restrict, object to, port, opt out of, or withdraw consent for certain processing. Some rights may be limited by law, security needs, trade secrets, privileged information, confidential business information, legal obligations, anti-fraud needs, or the rights of others.
- Account users can update some information in the Service.
- You can unsubscribe from marketing emails using the unsubscribe link or by contacting us. Transactional, security, account, and service messages may still be sent.
- You may disable cookies in your browser, though some features may stop working.
- If your request relates to a Business Customer's Guest records, we may direct you to that Business or coordinate with that Business as required by law or contract.
To make a privacy request, email admin@tableee.com. We may verify your identity, require additional information, reject unauthorized requests, and retain records of requests as permitted by law.
10. Regional Privacy Rights
10.1 United Kingdom, EEA, and Similar Laws
Where UK GDPR, EU GDPR, or similar laws apply, our lawful bases may include contract performance, legitimate interests, consent, legal obligation, vital interests, and public interest where applicable. Legitimate interests may include providing and improving the Service, security, fraud prevention, analytics, product development, direct marketing, business operations, protecting rights, and developing future services, balanced against individual rights as required by law.
You may have rights to access, rectify, erase, restrict, object, port data, withdraw consent, and complain to a supervisory authority. In the United Kingdom, the supervisory authority is the Information Commissioner’s Office (ICO). You can contact the ICO at ico.org.uk/make-a-complaint. The right to object to certain processing, including direct marketing, may be available and can be exercised by contacting us.
10.2 California and Other US State Rights
If a US state privacy law applies, you may have rights to know, access, correct, delete, obtain a copy, opt out of certain sales or sharing, opt out of targeted advertising or profiling where applicable, limit certain uses of sensitive personal information, and appeal certain decisions. We will not discriminate against you for exercising rights that apply to you.
Tableee may disclose personal information for the business and commercial purposes described in this Privacy Policy. Some analytics, advertising, or partner disclosures may be considered a “sale,” “sharing,” or targeted advertising under certain laws, depending on context. Where required, we will provide applicable opt-out mechanisms.
10.3 Sensitive Information
We ask users not to submit sensitive information unless it is necessary for the Service, such as allergy, dietary, accessibility, payment, authentication, or safety details. Where sensitive information is processed, we use it for the purposes described in this Privacy Policy and as otherwise permitted by law.
11. International Transfers
Information may be processed in the United Kingdom, United States, European Economic Area, and other countries where Tableee, Business Customers, partners, affiliates, or service providers operate. These countries may have different data-protection laws. Where required, we use transfer mechanisms such as adequacy decisions, standard contractual clauses, data-processing agreements, consent, or other lawful mechanisms.
12. Children
The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18 without appropriate authorization. If you believe a child has provided information to us improperly, contact us and we will take appropriate steps.
13. Changes
We may update this Privacy Policy from time to time. Updates are effective when posted unless a different date is stated. We may notify users of material changes by email, in-product notice, website notice, or other legally sufficient methods. Your continued use of the Service after an update means you accept the updated policy to the extent permitted by law.
14. Contact
Questions, privacy requests, legal notices, security concerns, and abuse reports should be sent to:
- Email: admin@tableee.com
- Website: www.tableee.com
© 2026 Tableee. All rights reserved.