Privacy policy

Tableline is a restaurant operations and customer-ordering service. This policy applies to restaurant owners, managers, staff members, prospective customers who contact us, and guests who use a restaurant's Tableline-powered ordering experience.

Depending on how you use Tableline, we may process:

• Account and staff information such as name, email address, role, authentication identifiers, and restaurant or branch access.
• Restaurant information such as business details, branches, tables, menus, menu images or PDFs, operating settings, and team records.
• Customer-order information such as table sessions, orders, item selections, service requests, contact details supplied by a guest, and order status.
• Payment-record information such as recorded amounts, payment method labels, refunds, receipts, and settlement metadata. Tableline does not use this application to collect full card numbers.
• Contact inquiries, including name, email, optional phone number, message, timestamp, and the source page.
• Technical and security information that hosting, authentication, database, storage, and abuse-prevention services naturally process, such as request metadata, cookies, session identifiers, and error logs.

We use information to provide and secure restaurant workspaces, authenticate staff, store and display menus, process guest orders and service requests, record restaurant operations, generate QR and widget links, respond to inquiries, prevent abuse, troubleshoot failures, and communicate about the service. We do not use uploaded menus to make the restaurant's live menu public without the restaurant's review and publishing actions.

When a restaurant uploads a menu image or PDF for import, the original file is stored in private Supabase Storage and processed by the server-side menu-import workflow. Tableline may send the uploaded menu content to OpenAI for automated transcription and structuring. The resulting draft is shown for human review; automated extraction can contain errors or omissions. Restaurant operators remain responsible for reviewing names, descriptions, prices, categories, modifiers, and other extracted information before publishing or relying on it.

Staff authentication uses Supabase Auth sessions and cookies. Guest ordering uses table and session identifiers so an order can remain attached to the correct table without requiring a guest account. The customer ordering interface may use browser storage for cart continuity and interface state. Tableline does not currently describe or operate a separate advertising-cookie or analytics program in this application.

Tableline uses Supabase for database, authentication, and private file storage; Netlify for hosting and server-side/background execution; OpenAI for menu extraction when a restaurant requests it. If you contact Tableline by email, we receive the information you choose to send us. Tableline does not sell personal information.

Information is shared with the restaurant that operates the relevant workspace and with service providers needed to operate Tableline. We may disclose information when required by law, to protect users or the service, investigate abuse, enforce agreements, or support a business transfer. We do not disclose restaurant or customer data for unrelated marketing purposes.

We retain information for as long as reasonably necessary to provide the service, maintain restaurant and order records, support accounting or legal obligations, resolve disputes, prevent abuse, and enforce agreements. Restaurants can manage many records through the product, but deletion may be limited by operational, legal, backup, or audit requirements. To ask about access, correction, deletion, or a restaurant's data, contact contact@blisphere.com.

Tableline uses access controls, tenant-scoped application queries, private storage paths, server-side credentials, and authenticated sessions as part of its security design. No online service can guarantee absolute security. Tableline and its service providers may process information in countries other than where you live, subject to applicable law and provider practices.

Tableline is intended for restaurants, their staff, and restaurant guests. It is not directed to children, and we do not knowingly request children to create accounts. If you believe a child provided personal information directly to Tableline, contact us so we can review the request.

We may update this policy as the product, providers, or legal requirements change. The date above identifies the current version. For privacy questions or requests, email contact@blisphere.com.