Privacy Policy
How Anytable collects, uses, and protects personal information.
This Privacy Policy describes how Anytable Inc. (“Anytable,” “we,” “us”) collects, uses, discloses, and protects personal information in connection with: our marketing website (www.anytable.com); the restaurant dashboard (manager.anytable.com); restaurant ordering pages (addresses such as restaurantname.anytable.com); the Anytable staff mobile applications; and our related emails and communications (collectively, the “Services”). The Services are offered in the United States.
In brief. We collect what is needed to operate an ordering platform: order details so restaurants can prepare your food, account details so restaurants can run their business, and limited usage data on our own sites. Payment card and bank details are handled by Stripe and never touch our servers. We do not sell personal information. Restaurant ordering pages carry no analytics or advertising trackers. Each restaurant’s customer relationships belong to that restaurant, not to us.
1. Information We Collect — Diners
When you place an order through a restaurant’s ordering page (as a guest — no account or password is created), we collect: your name, email address, and phone number; your order contents and any tip; for delivery orders, your delivery address; and any notes you include with your order. Payment is processed by Stripe; we receive confirmation and transaction identifiers, never your card number. Our servers also automatically log standard technical data (such as IP address, pages requested, timestamps, and browser type) for security and troubleshooting.
How we use it. To transmit your order to the restaurant and support its fulfillment; to send transactional order communications (confirmation and receipt, preparation and status updates, and any cancellation or refund notice); to verify that a delivery address falls within the restaurant’s delivery area (addresses are geocoded using Google’s Geocoding API); to prevent fraud and secure the Services; and, where the restaurant has enabled it, to send a one-time post-order review invitation on the restaurant’s behalf — you may opt out of review invitations at any time via the link in the email. Restaurants may direct a copy of their order emails to an address they designate.
Who receives it. The restaurant you ordered from receives your order information — your name, contact details, order contents, notes, and order history with that restaurant. That is the purpose of the service: your relationship is with the restaurant, and we process this information to provide the platform to the restaurant. Restaurants are independent businesses responsible for their own handling of customer information.
What we do not do. We do not run advertising or analytics trackers on ordering pages, build marketing profiles of diners, send diners marketing email, or sell personal information.
2. Information We Collect — Restaurant Users
If you operate a restaurant on Anytable, we collect: sign-up details (name, email, password — stored only as a secure cryptographic hash — restaurant name and business details); payment card information, which is collected and held by Stripe (we store Stripe identifiers, never card numbers); Stripe payout-account information, which is collected and held by Stripe under its own agreement and privacy policy; team members’ email addresses and assigned roles; menus, photographs, branding, and other content you upload; notification preferences and staff-app push tokens; and operational records, including an activity log of significant account actions, audited account-state changes, and a log of any support access to your account. If you begin but do not complete sign-up, we retain the details you entered so that we can follow up with you.
How we use it. To provide, operate, and secure your account, ordering page, and payouts; to bill your subscription; to send transactional account, billing, and security communications; to provide support (our personnel can access your account to assist you, and every such access is logged); to enforce our agreements; and to understand product usage via Google Analytics on our own dashboard, login, and sign-up pages.
3. Information We Collect — Website Visitors
Forms. When you submit a form on www.anytable.com (get started, demo, contact, or support), the information you provide is transmitted to us by email and retained in our email systems — not in a website database or CRM. We use it to respond to and follow up on your inquiry, retain it as long as needed for that purpose, and clear it periodically thereafter. We do not sell it or add you to marketing lists without telling you.
Cookies and similar technologies. The marketing website uses Google Analytics and the Meta Pixel. Analytics is configured in a privacy-protective manner, and you can decline or disable optional cookies at any time through the site’s cookie preferences; for advertising-related cookies we also automatically honor the Global Privacy Control (GPC) browser signal as an opt-out. Our Cookie Policy lists every cookie across the Services and how to control them. The dashboard uses Google Analytics on its own pages; ordering pages use no analytics at all.
Server logs. Like virtually all websites, our servers keep standard access logs (IP address, resource requested, time, user-agent) for a limited period for security and troubleshooting.
4. How We Share Information
We share personal information only: (a) with the service providers listed below, which process it on our behalf to operate the Services; (b) with the restaurant you ordered from, as described in Section 1; (c) to comply with law, legal process, or enforceable governmental request, or to protect the rights, safety, or property of Anytable, our users, or the public; (d) in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which personal information may be transferred as a business asset subject to this Policy; or (e) with your direction or consent. We do not sell personal information to anyone, and we do not share it with third parties for their own independent marketing use.
| Provider | Role | What they handle |
|---|---|---|
| Stripe | Payments, subscriptions, payouts, fraud prevention | All card and bank details (sole holder); transaction data |
| Vercel | Hosting and file storage for the platform | Platform traffic (including server logs); uploaded images |
| Neon | Managed database | Platform data (accounts, orders, menus) |
| Resend | Email delivery | Recipient addresses and email content |
| Geocoding and maps; analytics (our own sites) | Delivery addresses for radius checks; restaurant addresses for email maps; site-usage data | |
| Meta | Advertising measurement (marketing site only) | Marketing-site visit data via the Meta Pixel, subject to the controls in Section 3 |
| Expo | Staff-app push notifications | Push tokens; device platform |
| Apple / Google Play | Mobile app distribution | Standard app-store data |
| Our website hosting provider | Marketing-site hosting | Marketing-site traffic and server logs |
We may also create and use aggregated or de-identified data that does not identify any person, for any lawful purpose.
5. Selling and “Sharing” — Stated Plainly
We do not sell personal information — anyone’s, ever. One point of precision: our marketing website uses advertising cookies (the Meta Pixel) to measure our own advertising, which some state laws — such as California’s — define as “sharing.” You can decline these cookies through the site’s cookie preferences at any time, and we automatically honor the Global Privacy Control (GPC) browser signal as an opt-out of such sharing. This applies only to the marketing website — never to ordering pages, the dashboard, or the mobile apps.
6. Data Retention
Diner order records are business and transaction records of the restaurant that received the order; we retain them while that restaurant uses Anytable. You may request deletion of your contact details (Section 8), in which case we retain only anonymized transaction records. Restaurant account data is retained while the account is active; if an account is deleted, its data is permanently purged 14 days after the current billing period ends. Marketing-site form submissions are retained as described in Section 3. Server logs are retained briefly. Stripe retains payment records under its own policies and legal obligations.
7. Security
We employ industry-standard safeguards, including: encrypted connections (HTTPS) across the Services; passwords stored only as strong one-way hashes; database-backed sessions in secure, httpOnly cookies; login rate-limiting; role-based access controls; audit and access logging; automated dependency and vulnerability scanning; and isolation of payment data to Stripe end to end. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security; you are responsible for maintaining the confidentiality of your own credentials.
8. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information. You may submit a request to support@anytable.com; we will verify it and respond as required by applicable law, and we honor reasonable requests regardless of residence. We do not discriminate against anyone for exercising privacy rights. Note that deletion of diner order records is subject to Section 6 (contact details deleted; anonymized transaction records retained), and some information must be retained where the law requires or permits (for example, for tax, audit, security, or legal-compliance purposes).
Additional choices: restaurant owners can export their order data at any time and delete their account from the dashboard; diners can opt out of review invitations via the link in each such email; optional cookies can be declined or disabled at any time as described in the Cookie Policy; and transactional order, account, billing, and security communications accompany the Services themselves.
9. Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Restaurant accounts require the account holder to be at least 18. If you believe a child has provided us personal information, contact us and we will delete it.
10. Third-Party Sites and Services
The Services link to third-party sites and services (for example, Stripe’s checkout technology, a restaurant’s own website, or our social-media profiles). This Policy does not apply to third parties, and we are not responsible for their privacy practices; review their policies directly.
11. Changes to This Policy
We will post any changes to this Policy on this page with an updated effective date. For material changes, we will provide notice to restaurant account holders by email or through the dashboard. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.
12. Contact Us
Anytable Inc. · 700 S Rosemary Ave, Suite 204, West Palm Beach, FL 33401 · support@anytable.com · 855-269-8225