TablePulse Privacy Policy

Effective Date: May 25, 2026

TablePulse Technologies Private Limited (“TablePulse”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal data.

This Privacy Policy explains how we collect, use, disclose, process, and protect information when you use the TablePulse platform, websites, applications, APIs, integrations, QR ordering systems, analytics tools, AI-powered features, and related services (collectively, the “Services”).

This Privacy Policy applies to:

  • Restaurant and hospitality businesses using TablePulse (“Customers”);
  • Restaurant staff and administrators;
  • Diners and end users interacting with TablePulse-powered ordering systems;
  • Visitors to our websites and applications.

By using the Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information Provided Directly

We may collect information you provide directly, including:

Business Information

  • Restaurant name;
  • Business registration details;
  • GST and tax information;
  • Billing address;
  • Business contact details;
  • Franchise or location information.

Account Information

  • Name;
  • Email address;
  • Phone number;
  • Login credentials;
  • Role and permissions.

Customer and Diner Information

When restaurants use customer-facing features, we may collect:

  • Name;
  • Phone number;
  • Email address;
  • Order details;
  • Dining preferences;
  • Reservation information;
  • Loyalty program information;
  • Feedback and reviews.

Payment and Billing Information

Payments are generally processed through third-party payment processors.

We may receive limited billing-related information such as:

  • Transaction identifiers;
  • Payment status;
  • Subscription status;
  • Billing history.

TablePulse does not intentionally store complete card numbers or sensitive payment authentication data unless explicitly stated.

1.2 Automatically Collected Information

We may automatically collect:

  • IP address;
  • Device identifiers;
  • Browser type;
  • Operating system;
  • Log data;
  • Usage analytics;
  • Clickstream information;
  • Session data;
  • QR code interactions;
  • App diagnostics;
  • Approximate location data.

We may use cookies, SDKs, tracking technologies, and analytics tools.

1.3 Information From Integrations and Third Parties

We may receive information from:

  • POS systems;
  • Payment providers;
  • Delivery platforms;
  • Reservation systems;
  • Messaging platforms;
  • Cloud providers;
  • Analytics services;
  • Marketing platforms;
  • Authentication providers.

The type of information received depends on integration settings and permissions.

2. How We Use Information

We may use information to:

  • Provide and operate the Services;
  • Process orders and reservations;
  • Manage subscriptions and billing;
  • Authenticate users;
  • Improve customer experiences;
  • Provide analytics and insights;
  • Personalize recommendations;
  • Operate AI-powered features;
  • Detect fraud and abuse;
  • Secure the platform;
  • Monitor system performance;
  • Provide customer support;
  • Send operational notifications;
  • Improve and develop products;
  • Comply with legal obligations.

We may also use aggregated or anonymized data for:

  • Benchmarking;
  • Research;
  • Product development;
  • Machine learning;
  • Trend analysis.

3. AI and Automated Processing

TablePulse may use artificial intelligence and machine learning technologies to:

  • Generate restaurant insights;
  • Predict operational trends;
  • Recommend menu optimizations;
  • Personalize customer experiences;
  • Detect anomalies or fraud;
  • Improve analytics.

AI-generated outputs may not always be accurate or complete.

Customers remain responsible for reviewing and validating operational decisions based on AI-generated insights.

We may use anonymized and aggregated data to improve machine learning systems.

We do not intentionally use personal payment data to train AI models.

4. Legal Bases for Processing

Depending on jurisdiction, we process personal data based on:

  • Consent;
  • Contractual necessity;
  • Legitimate business interests;
  • Compliance with legal obligations;
  • Protection against fraud, abuse, and security threats.

Where consent is required, you may withdraw consent subject to legal and operational limitations.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain sessions;
  • Improve platform functionality;
  • Analyze traffic and usage;
  • Remember preferences;
  • Improve security;
  • Measure marketing effectiveness.

You may control cookies through browser settings.

Disabling cookies may affect functionality.

Separate Cookie Policies may apply in certain jurisdictions.

6. How We Share Information

We may share information with:

6.1 Service Providers

Third-party providers assisting with:

  • Hosting;
  • Cloud infrastructure;
  • Analytics;
  • Messaging;
  • Payment processing;
  • Customer support;
  • Security;
  • Monitoring;
  • Email delivery.

6.2 Integrations Authorized by Customers

When enabled by customers, data may be shared with:

  • POS systems;
  • Delivery platforms;
  • Reservation systems;
  • CRM tools;
  • Marketing platforms;
  • Loyalty systems.

6.3 Legal and Safety Reasons

We may disclose information when reasonably necessary to:

  • Comply with law;
  • Respond to legal requests;
  • Enforce agreements;
  • Protect rights and safety;
  • Detect fraud or abuse;
  • Prevent security incidents.

6.4 Business Transfers

Information may be transferred during:

  • Mergers;
  • Acquisitions;
  • Financing transactions;
  • Asset sales;
  • Corporate restructuring.

7. Data Retention

We retain information only as long as reasonably necessary for:

  • Providing Services;
  • Legal compliance;
  • Dispute resolution;
  • Security purposes;
  • Contract enforcement;
  • Operational continuity.

Retention periods may vary depending on:

  • Account type;
  • Legal obligations;
  • Transaction requirements;
  • Security needs.

Some anonymized or aggregated data may be retained indefinitely.

8. Security Measures

TablePulse implements commercially reasonable technical and organizational safeguards including:

  • Encryption;
  • Access controls;
  • Role-based permissions;
  • Monitoring systems;
  • Security reviews;
  • Authentication controls;
  • Infrastructure protections.

However:

  • No system is completely secure;
  • Internet transmissions cannot be guaranteed fully secure;
  • Cybersecurity incidents may still occur.

You are responsible for maintaining security of:

  • Your credentials;
  • Employee access;
  • Connected systems;
  • Devices used to access the Services.

9. International Data Transfers

Your information may be processed or stored in countries outside your jurisdiction.

By using the Services, you acknowledge that data may be transferred internationally where legally permitted.

Where required, we implement reasonable safeguards for international transfers.

10. Children’s Privacy

The Services are not directed toward children under the age required by applicable law.

We do not knowingly collect personal information from children without appropriate authorization.

If you believe a child has provided personal information unlawfully, contact us to request deletion.

11. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

  • Access personal information;
  • Correct inaccurate information;
  • Request deletion;
  • Restrict processing;
  • Object to certain processing;
  • Request data portability;
  • Withdraw consent;
  • Opt out of certain communications.

Certain rights may be limited by:

  • Legal obligations;
  • Security requirements;
  • Contractual obligations;
  • Legitimate business interests.

Requests may require identity verification.

12. Marketing Communications

We may send:

  • Product updates;
  • Promotional messages;
  • Feature announcements;
  • Event communications;
  • Educational content.

You may opt out of promotional communications through unsubscribe mechanisms.

Operational communications may still be sent.

13. Customer Responsibilities

Restaurants and hospitality businesses using TablePulse are responsible for:

  • Obtaining required consents from diners;
  • Providing legally required notices;
  • Managing lawful marketing practices;
  • Ensuring legal basis for data collection;
  • Maintaining compliance with applicable privacy laws.

TablePulse acts as a service provider or processor for certain customer-controlled data.

Customers remain responsible for their own privacy compliance obligations.

14. Third-Party Services

The Services may contain links or integrations with third-party services.

TablePulse is not responsible for:

  • Third-party privacy practices;
  • External websites;
  • Third-party data handling;
  • Policies of integrated providers.

Use of third-party services is subject to their own terms and policies.

15. Data Processing Roles

Depending on the context:

  • TablePulse may act as a data controller;
  • TablePulse may act as a data processor/service provider;
  • Restaurants may independently act as controllers of diner information.

Separate Data Processing Agreements (DPAs) may apply to enterprise customers.

16. Do Not Track

Some browsers offer “Do Not Track” signals.

Because there is no universally accepted standard, the Services may not respond to all such signals.

17. Sensitive Information

Customers should avoid storing unnecessary sensitive personal data within the Services.

Unless explicitly supported and legally permitted, customers should not upload:

  • Government identification numbers;
  • Health records;
  • Payment card authentication data;
  • Highly sensitive personal information.

18. Platform Monitoring and Abuse Prevention

To protect platform integrity, TablePulse may:

  • Monitor usage patterns;
  • Detect suspicious activities;
  • Analyze traffic;
  • Investigate abuse;
  • Block malicious activity;
  • Preserve security logs.

Such monitoring may be automated.

19. Compliance With Laws

TablePulse aims to support compliance with applicable laws including:

  • India Digital Personal Data Protection Act (DPDP);
  • GDPR;
  • CCPA/CPRA;
  • Consumer protection laws;
  • Payment security requirements.

However, customers remain responsible for their own legal compliance obligations.

20. Limitation of Liability

To the maximum extent permitted by law, TablePulse shall not be liable for:

  • Unauthorized access;
  • Security breaches;
  • Third-party failures;
  • Data loss;
  • Business interruption;
  • Indirect damages;
  • Consequential damages.

You acknowledge that no platform can guarantee absolute security.

21. Changes to This Privacy Policy

We may modify this Privacy Policy from time to time.

Updated versions become effective upon posting or notification.

Continued use of the Services after changes constitutes acceptance of revised policies.

22. Contact Information

For privacy-related requests or questions, contact:

TablePulse Technologies Private Limited

Bengaluru, Karnataka, India

contact@tablepulse.co

https://staging.tablepulse.co

If required by law, additional contact details for Data Protection Officers or representatives may be provided.

23. Regional Disclosures

Additional rights or disclosures may apply depending on your jurisdiction.

These may include:

  • GDPR disclosures for EU users;
  • California privacy rights;
  • India DPDP notices;
  • International transfer disclosures.

Supplemental regional notices may be provided separately.

24. Enterprise and API Customers

Enterprise customers and API users may be subject to:

  • Separate DPAs;
  • API usage terms;
  • Security addendums;
  • Enterprise privacy schedules.

Where conflicts exist, signed agreements shall prevail.