Data processing agreement
Know what we do with your guests’ data.
In short
Your restaurant decides what happens to its guests’ details, and we hold them for you only to run your bookings. Four companies help us, and the full agreement is yours to sign.
Last updated
You decide, and we do as you ask.
In the GDPR’s words, your restaurant is the controller of its guests’ data and ResOlio is its processor.
Your restaurant
You decide why a guest’s details are kept, and you answer their questions about them. On every plan, the office exports or erases a guest’s record.
ResOlio
We use your guests’ data only to run your bookings, and only as you instruct. It is never sold, never used to advertise and never shown to another owner.
What we hold for you.
Only what running your bookings needs, and never a card number.
- Guests
- Name, email address and phone number, all three required to book online.
- Bookings
- Party size, date, time and table, and how the evening ended.
- What guests tell you
- A request and a dietary note when they give one, the consents they ticked, and a rating and comment if they leave one after their visit.
- Their history with you
- How often each guest sat, cancelled or missed, on every plan, and on Pro your tags and notes.
- Waiting list and alerts
- On Pro, the party, the night and which guest to tell when a table frees.
- Email to guests
- Each message sent in your restaurant’s name, and a log of where it went.
- The history of changes
- Which of your devices changed what, and when.
Bookings stay, and contact details go.
A guest with no account and nothing booked loses their email and phone twenty-four months after their last visit.
Four companies help us run ResOlio.
Each one receives only what its own part of the work needs, and all four, like us, are in the United States, under the EU’s standard contractual clauses.
| Company | What it does | What it receives |
|---|---|---|
| Convex | The database and the backend | Every booking and guest record, which lives there and nowhere else |
| Vercel | The hosting | The requests that reach the website, your booking page and your button |
| Resend | Email, once email is switched on | Each guest’s address and the email going to them |
| Better Stack | Error reports | What broke and on which screen, with guests’ addresses and phone numbers removed first |
What keeps your guests’ data safe.
Each of these is built into the software you use today.
- One key per account
- Guests are recognised by a one-way key unique to your account, so they never mix with another owner’s.
- Tablets only read
- A service tablet reads a guest’s record to serve them, and can never merge, export or erase one.
- Every change named
- The history records which device made each change.
- A lost tablet, cut off
- Revoke a device and it stops working wherever it is, without touching any other.
- No card, no tracker
- There is no payment field anywhere, and no analytics or tracker on any page we build.
- Your button, locked
- The booking overlay runs only our own scripts, and can be locked to your own websites.
If something goes wrong, we tell you.
We tell you without delay, by email to the address your account signs in with.
We say what happened, which guests it touches and what we are doing about it. Whether your guests or the authorities must be told is your decision, and we give you what you need to make it.
When you leave, the choice is yours.
Ask for the whole book back, or for it to be deleted, and a person does it.
Taking it with you
On every plan, the office downloads any one guest’s record, and on Pro your guest list as a spreadsheet, every guest in it. For every booking as well, write to us and we send it.
Deleting it
There is no delete button. One email from the address your account signs in with, and we confirm what will go, delete it and tell you when it is done.
Ask for a signed copy.
The full agreement comes to you ready to sign, with your restaurant’s name on it.
Write to hello@resolio.app and say which of your restaurants it should cover.
This page is a plain summary of the agreement, and the signed agreement is the one that governs.