Protection of personal information

This policy explains what information Gère ton resto processes, why, who it is shared with, and how to exercise your rights under Quebec’s Act respecting the protection of personal information in the private sector (Law 25). The French version prevails.

Who we are

Gère ton resto is online reservation and point-of-sale (POS) software for restaurants, designed and operated in Montreal, Quebec.

For any question or request, write to Gère ton resto’s person in charge of the protection of personal information: resto360mtl@gmail.com.

Two different roles

Gère ton resto processes information in two distinct situations:

For its own clients (restaurants and their staff who use Gère ton resto): Gère ton resto is responsible for that information.
For people who book a table at a client restaurant: the restaurant is responsible for that information. Gère ton resto acts as a service provider and processes it only on the restaurant’s behalf, under the data processing agreement.

If you booked a table, the restaurant is your first point of contact for your rights. You can also write to us and we will forward your request to the restaurant.

Information we collect

People who book a table:

name, email address and, if provided, phone number;
date, time, party size and notes left for the restaurant (for example an allergy or a special occasion, only if you choose to share it);
preferred language;
an encrypted, non-reversible fingerprint of your IP address and email, kept for at most 48 hours, to block abusive bookings.

Client restaurants and their staff:

name, email address and password (stored in hashed form by our authentication provider);
restaurant information: name, address, settings, menu, floor plan, reservations, orders and invoices;
subscription billing information. Card numbers are entered directly with Stripe: Gère ton resto never sees or stores them;
cost documents voluntarily uploaded (supplier invoices) when the cost analysis feature is used.

Why we use it

to record, confirm, change or cancel a reservation and send the related emails (confirmation, reminder and, if the restaurant enables it, a review invitation);
to let the restaurant manage its service, tables and guests;
to provide the POS software, invoicing and the restaurant’s tax obligations;
to manage accounts, the free trial, subscriptions and support;
to keep the service secure and prevent fraud and abuse.

We do not use this information for advertising, we do not sell it and we do not profile you.

Consent

By submitting a reservation, you consent to your information being used to manage it and to contact you about it. By creating an account, the restaurant accepts the terms of service and this policy.

You may withdraw consent at any time, for example by cancelling your reservation with the link in your email or by writing to us. Withdrawal may prevent the service from being provided.

Service providers and transfers outside Quebec

We rely on providers that process information on our behalf under confidentiality obligations:

Supabase: database, authentication and server functions, hosted in Canada (Montreal region);
Vercel: hosting of the website and booking pages (United States and global network);
Brevo: transactional email delivery (European Union);
Stripe: subscription payments (United States and Canada);
OpenAI: data extraction from cost documents the restaurant chooses to upload (United States). No reservation data is sent to it.

Some of these providers are located outside Quebec. Before communicating information outside Quebec, we assess whether it will receive adequate protection, in particular in light of generally recognized principles of personal information protection.

The site also loads fonts and technical libraries from third-party servers (Google Fonts, esm.sh), which receive your IP address like any web request.

Cookies and local storage

Gère ton resto uses no advertising cookies and no tracking or audience analytics tools.

Your browser only keeps small technical preferences: your chosen language, the plan selected before sign-up and, for signed-in users, the login session.

Retention

Reservations and guest records are kept while the restaurant uses Gère ton resto. The restaurant can delete them at any time.
If a free trial ends without a subscription, data is kept for 90 days so the service can be resumed, then deleted.
When an account is closed, data is deleted on request or when the period above ends, except tax records the law requires to be kept (generally six years).
Anti-abuse fingerprints are deleted after 48 hours. Unconfirmed sign-ups are deleted automatically.

Security

Communications are encrypted (HTTPS). Each restaurant’s data is isolated by access rules in the database: a restaurant can never see another restaurant’s data. Privileged access keys stay server-side, and internal access is limited to the people who need it.

No measure is infallible. If a confidentiality incident presents a risk of serious injury, we will notify the Commission d’accès à l’information and the people concerned, and we keep a register of incidents.

Your rights

You may request:

access to the information we hold about you;
correction of inaccurate or incomplete information;
withdrawal of consent or deletion of your information;
a copy of your information in a structured, commonly used technological format.

Write to resto360mtl@gmail.com. We respond within 30 days. If you are not satisfied with our response, you may file a complaint with the Commission d’accès à l’information du Québec.

Changes

We may update this policy. The date of the last update appears at the top of the page. Client restaurants will be notified by email of any significant change.