Privacy Policy

This policy explains what personal data Resbyu Connect collects, why, and your rights, including under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). resbyu is the data controller. Contact: privacy@resbyu.com.

Data we collect

• Account: name, email, password (stored encrypted), or your Google profile if you sign in with Google.
• Profile: phone, workplace and optional profile photo.
• Payout: payout method and handle (e.g. Venmo username), cash-out history.
• Bookings: guest name, party size, date, notes you enter, and arrival status.
• Technical: sign-in session data and basic logs needed to run and secure the service.

Guest information

When you submit a booking you confirm the guest has agreed to share their name and details with the restaurant. Enter only what is needed. Do not enter sensitive details such as health information beyond simple allergy notes the guest asked you to pass on.

Why we use it (legal bases)

• To run your account, process bookings and pay commissions — performance of a contract.
• To prevent fraud, including automated review of bookings that flags them for a human to check — legitimate interests. No decision about your money is made by automation alone; an admin always decides.
• To keep financial and tax records — legal obligation.

We do not sell or share your personal data for advertising.

Who we share it with

• Partner restaurants — booking details needed to seat and confirm guests.
• Service providers that host our app, database, file storage and AI review tools, under data-processing agreements.
• Payment apps you choose, when we send you money.
• Authorities, when required by law.

Data may be processed in the United States. For transfers from the EU/UK we rely on appropriate safeguards such as Standard Contractual Clauses.

Retention

We keep account data while your account is open. Booking and payout records are kept for up to 7 years for tax and accounting purposes, then deleted. Profile photos are deleted when you remove them or close your account.

Cookies and storage

We only use storage strictly necessary to keep you signed in. We do not use advertising or tracking cookies, so no cookie consent is required.

Security

Data is encrypted in transit, access is limited by account, and profile photos are stored privately. No system is perfectly secure; we will notify you and regulators of breaches as required by law.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. California residents may also request to know what we collect and will not be discriminated against for using their rights. EU/UK residents may complain to their local data protection authority. Email privacy@resbyu.com; we respond within 30 days. You can update most details yourself in your Profile.

Children

resbyu is not for anyone under 18 and we do not knowingly collect their data.

Changes

We will post updates here and notify you of material changes.