Privacy Policy

1. Information processed

We may process account, contact, restaurant, subscription, support, security, and usage data. On behalf of the restaurant, we host data it records about customers, reservations, quotes, employees, and schedules.

2. Purposes

We use information to authenticate users, provide features, send necessary communications, prevent fraud, maintain audits, provide support, comply with legal obligations, and improve security and performance.

3. Privacy roles

The restaurant determines the purposes for customer and employee data and acts as controller. UnoMesa LLC processes that data as a provider under the restaurant's instructions, except for its own account, billing, security, and compliance data.

3.1. Confidentiality of restaurant data

Personal and operational data entered by each restaurant, including customers, employees, reservations, quotes, prices, deposits, schedules, and reports, is treated as confidential information. UnoMesa keeps this information separate for each business. Within the application, access is limited to the restaurant’s authorized users, according to their roles and permissions.

UnoMesa does not sell the restaurant’s personal or operational data or use it for third-party advertising. It does not make this data available to other restaurants. The restaurant controls the documents and files its users choose to export, print, or share.

Authorized UnoMesa personnel and technical providers may process or access this information only as necessary to provide the service, offer support, maintain security, or meet a legal obligation, with access limited to what is necessary and subject to confidentiality obligations.

3.2. Public pages and event requests

The restaurant may voluntarily publish its contact information, photographs, menus, PDFs, and rooms. That content and those files will be public. Information submitted by visitors through the quote request form (name, phone number, email, date, time, number of guests, preferences, and event details) is provided to the relevant restaurant to handle the request and prepare a quote. It is not published on the restaurant’s page.

WhatsApp, email, and call links open external services. Conversations that continue there are not automatically incorporated into UnoMesa. A request does not confirm a reservation or result in a charge. To exercise rights concerning a request, contact the restaurant that received it.

4. Providers and transfers

We may use infrastructure, authentication, hosting, email, analytics, and payment providers, including services located outside the user's country. We will require appropriate contractual and technical safeguards based on the service and jurisdiction.

4.1. Performance measurement

We use Vercel Speed Insights to measure loading times, responsiveness, and visual stability. The service collects technical metrics about the browser, device, connection, and country, without recording sessions or form content. The integration removes URL parameters and fragments, groups public restaurant pages without sending their link names, and excludes authentication links, invitations, and files. It does not send customer names, phone numbers, email addresses, or reservation or quote records as measurement properties. This technical measurement is separate from advertising analytics.

5. Retention

We retain information while the account is active and for reasonable periods afterward for security, backup, disputes, and legal obligations. The application's trash may retain records for up to 365 days. Technical backups follow separate cycles and do not serve as a permanent individual archive.

6. Security

We apply access controls, authentication, business separation, infrastructure-provided encryption, activity logs, and backups to prevent unauthorized access, disclosure, loss, or alteration of information. No system can guarantee the complete absence of data leaks or incidents. Customers must use unique passwords, MFA where available, and protected devices.

7. Rights and requests

Depending on the jurisdiction, a person may request access, correction, deletion, objection, or portability. Requests concerning data uploaded by a restaurant should first be directed to that restaurant. You may also write to support@unomesa.com.

8. Incidents

We will investigate confirmed incidents and notify the affected customer and, where applicable, authorities or individuals within the timeframes required by applicable law.

9. Minors

UnoMesa is a business service and is not directed to minors. Customers must not upload minors' data unless they have a lawful basis and the data is necessary for legitimate operations.

AI help assistant

The help assistant uses OpenAI to answer questions about UnoMesa. Sending a question transmits your message, a short conversation history, language, plan and role, together with tutorial excerpts. It does not automatically access customer, quote, reservation or employee records. Avoid including personal data, passwords or codes. UnoMesa stores usage counts and responses to prevent duplicate requests; it does not store question text in this record. The provider may retain data under its security and retention policies. Answers may contain errors.