Privacy

Who is responsible#

The restaurant is responsible for its guests' data. By connecting, it instructs Flavoso to transmit the released data to your app. As the app provider you are a recipient and responsible for your own processing.

If you process the data on behalf of the restaurant, for example as a POS or for accounting, you need a data processing agreement with it under Art. 28 GDPR. You conclude it with the restaurant, not with Flavoso.

Which guest data your app receives#

The API only hands out what is needed to hand an order over:

• The guest's name.
• For pickup and delivery, the phone number; not for orders at the table.
• For delivery, the address.
• Never the e-mail address, never the guest account, never the channel the guest is notified on.
• For reservations, only the name. A phone number and e-mail address your app sends when creating one stay in Flavoso.
• Reports contain no guest data, only totals.

What Flavoso stores about your requests#

• Request log: for each request, the time, method, path, query, status, duration, id, error code, Idempotency-Key and User-Agent, for 14 days. Bodies only for the test restaurant, never for a real restaurant; the database itself prevents it. Headers, and so tokens, are not stored.
• Events and deliveries: the envelope of every event and every attempt with status, duration, error and the beginning of your server's response (up to 2,000 characters), for 30 days.
• Tokens: only as a hash.

What you do#

• Store only what your app needs, and only as long as needed.
• Store data securely, tokens encrypted.
• When a restaurant disconnects (app.disconnected), delete or return its data according to your agreement with it.
• Report a data breach that affects a restaurant's data to the restaurant.

Disconnecting#

The owner can disconnect your app at any time, in the dashboard under Settings, Integrations or in the Flavoso app. Connecting and disconnecting are recorded in the restaurant's log, and all owners get an e-mail about it. From the disconnection on, no token of the connection works.