Privacy, data and AI
Your data and your customers' data, protected.
Updated 26 October 2026
On this page
Who's who
Your customers' data (club members, orders, bookings, feedback) belongs to your venue: you are the data controller. The Food Please processes it on your behalf, as data processor, so your menu works. That's why we sign a data processing agreement with you.
1. Your legal details
- Go to Menu › Dishes › Venue settings, Venue block.
- Fill in Legal name, NIF (Spanish tax ID), Registered address, Registry details (optional) and the Privacy email (where your customers request access to, changes to or deletion of their data).
- Tap Save.
We use these details to generate your menu's legal pages: privacy, legal notice and cookies, linked in the footer. «They are templates: ask your lawyer or adviser to review them.» If anything is missing, the dashboard tells you what, and the pages show a gap in its place.
2. The data agreement
You accept it when you sign up. If the version changes, or if you haven't accepted it yet, you'll see «Review and accept the data processing agreement» at the top of the dashboard.
- Tap Review and read it.
- Tap Accept the agreement. Only the owner can do this; everyone else sees «Ask the owner to accept it».
In Settings you'll see «Accepted by [name] on [date]» and the version.
What customer data is stored
- Club: name and mobile or email, with the date and the text they agreed to; their visits, orders and spending; stamps; your notes and tags. Offers, only if they ticked the separate box. For as long as they stay in the club.
- Orders: what was ordered, the table and the amount.
- Payments: card details are handled by Stripe. Only the last 4 digits appear on the receipt.
- Bookings: the name and contact details needed to manage the booking.
- Private feedback: the rating, the text and, if they leave it, their contact details.
- AI Waiter chat (if you have it): the conversation from the visit (at most 4 turns) is kept for 3 hours from the last question, with no name or contact details; if someone types an email, phone number or their name, it's removed before saving and before sending it to the AI. The monthly figures («What guests ask») don't store who asked. The email used to send the bill by email isn't stored.
The retention period for each item is in your menu's privacy policy.
Your customers' rights
- Every club member can download their data or delete their account from the menu itself.
- If they ask you, delete them in Guests › Customers with the bin icon.
- You must answer requests that reach your privacy email within one month at most.
Cookies
Your menu doesn't use advertising, third-party analytics or social media cookies. That's why it doesn't show a cookie banner.
AI and your data
- The AI Waiter always says it's an AI. It only answers with your menu's data (dishes, prices, descriptions and allergens) and doesn't ask customers for personal data: each visit is identified with a random code, with no name or contact details. Below the chat it says «Don't enter personal data», with a link to your menu's privacy policy.
- Anthropic is a sub-processor only if you have the AI Waiter turned on. Anthropic (USA, under the European Commission's standard contractual clauses) generates the answers to the questions your customers type, using your menu and the question, with no name or contact details. Under its commercial terms, it doesn't use this data to train its models. If you don't have the AI Waiter, nothing reaches Anthropic, and your menu's privacy policy only mentions it when you have it turned on.
- AI photo works only with the dish's photo or description. It improves the lighting, background and framing without changing the dish, the portion or the ingredients. If an image is created from scratch, your menu shows it with the «Illustrative image» label.
Questions about privacy? Write to us (see Contact and support).