Last updated: April 27, 2026
We collect information you provide directly: - Account details (name, email, phone number) - Restaurant information (name, location, GST number) - Payment information (processed via Razorpay only — we never store card details) - Menu items, pricing, and descriptions - Staff details for your restaurant - Customer order data and preferences - Analytics and usage data - Support communications
Your data is used to: - Provide and improve our services - Process payments securely through Razorpay - Send service updates and support notifications - Comply with legal and tax obligations - Generate analytics for your restaurant performance - Prevent fraud and abuse - Respond to support requests - Send announcements and feature updates
We protect your data with: - End-to-end encryption for all connections (HTTPS/TLS) - Encrypted PostgreSQL database via Supabase - Redis encrypted cache for session data - Regular automated security backups - No plain-text password storage (bcrypt hashing) - Rate limiting to prevent unauthorized access - JWT token-based authentication - SQL injection prevention via ORM
• Active Account: Data retained as long as your account exists - After Account Deletion: All personal data permanently deleted within 30 days - Payment Records: Retained per RBI requirements (7 years for compliance) - Automatic Backups: Deleted after 30 days - You can export your data anytime from Settings → Data Management - You can request deletion from Settings → Account Deletion
Important facts about payments: - All payments are processed ONLY via Razorpay - We NEVER store credit card numbers or sensitive payment data - Razorpay is PCI-DSS Level 1 certified - Razorpay handles all payment security compliance - You are fully protected by Razorpay's fraud protection policy - Invoice history is stored securely in our database - Refunds are processed back to the original payment method
We use trusted third-party services: - Razorpay (Payment processing) — PCI-DSS Level 1 certified - Supabase (Cloud database with encryption) - Render (Server hosting with DDoS protection) - Unsplash/Pexels (Food image API) - Each service has its own privacy policy which you should review
You have the right to: - Access all your data anytime from your dashboard - Export your data in standard format (JSON/CSV) - Delete your account and all personal data - Modify or correct your information - Opt-out of marketing communications - Request deletion of specific data - Lodge a complaint with data protection authorities
• Your data may be stored in multiple regions for redundancy and disaster recovery - Data is always encrypted before transfer - All transfers comply with data protection laws - Supabase provides geographic data residency options - We comply with GDPR and Indian data protection regulations
• We use essential cookies for authentication and session management - Analytics cookies help us understand how you use TablePe - You can disable non-essential cookies in your browser settings - We do NOT sell your data to third parties - We do NOT track you across other websites
TablePe is not intended for users under 18 years old. - We do not knowingly collect data from children - If we become aware of data from a child, we delete it immediately - Parents/guardians can contact us to request deletion
• We may update this policy at any time - Major changes will be notified via email (30 days notice) - Your continued use of TablePe means you accept updated terms - The "Last updated" date indicates when changes were made - Please review this policy periodically
If you have privacy concerns or questions: Email: privacy@tablepe.com Response time: Within 24 hours Website: https://tablepe.com
Have questions? Contact us or visit our support page