At a glance
The essentials in plain language — read the full sections below for details.
What we collect
Account details, restaurant operations data, and technical information needed to run the platform securely.
How we use data
We use information to operate the Services, support your team, process billing, and improve performance.
Your privacy rights
Depending on your location, you may request access, correction, export, or deletion of personal information we hold.
Section 01
Privacy Policy overview
How this policy applies to your use of Tibono.
This Privacy Policy explains how Tibono ("we", "us", or "our") collects, uses, stores, and protects personal information when you visit our website, create an account, or use our restaurant management platform and related services (collectively, the "Services").
By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.
Section 02
Who this policy applies to
Restaurant teams, guests, and visitors covered by this policy.
This policy applies to restaurant owners, staff members, administrators, and visitors who interact with Tibono, including:
- Superadmin and platform operators who manage the overall system
- Restaurant account holders and their authorized staff
- Guests who place orders through QR menus or online ordering flows
- Anyone who contacts us for support, sales, or billing inquiries
Section 03
Information we collect
Data you provide directly and data generated when you use the Services.
We collect information that you provide directly and information generated when you use the Services.
Account and business information may include your name, email address, phone number, login credentials, restaurant name, branch details, address, billing details, subscription plan, invoices, payment references, staff roles, permissions, and activity within your account.
Operational and order data may include menu items, categories, prices, modifiers, orders, table assignments, reservations, kitchen tickets, customer contact details entered by your team or guests, and reports or usage logs related to restaurant operations.
Technical information may include IP address, browser type, device identifiers, operating system, pages viewed, features used, timestamps, error diagnostics, and cookies as described below.
Section 04
How we use your information
Why we process personal information.
We use collected information to:
- Provide, operate, maintain, and improve the Services
- Authenticate users and enforce role-based access controls
- Process subscriptions, payments, and account-related communications
- Send service announcements, security alerts, and support responses
- Monitor performance, troubleshoot issues, and prevent fraud or abuse
- Comply with legal obligations and enforce our Terms & Conditions
We do not sell your personal information to third parties for their marketing purposes.
Section 05
How we share information
When information may be shared with others.
We may share information only when necessary:
- Service providers: hosting, email delivery, payment processing, analytics, and customer support tools that help us run the platform
- Within your organization: data visible to users you authorize inside your restaurant account
- Legal requirements: when required by law, court order, or to protect rights, safety, and security
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards
Payment card data is handled by certified payment processors. We do not store full card numbers on our servers.
Section 06
Data retention
How long we keep information.
We retain information for as long as your account is active or as needed to provide the Services, resolve disputes, enforce agreements, and meet legal requirements. You may request deletion of certain data subject to applicable law and legitimate business needs such as billing records or security logs.
Section 08
Data security
How we protect your information.
We implement reasonable administrative, technical, and organizational safeguards designed to protect your information, including access controls, encrypted connections where appropriate, and monitoring for unauthorized activity. No online system is completely secure, and we cannot guarantee absolute security.
Section 09
Your rights and choices
Options available depending on your location.
Depending on your location, you may have the right to access, correct, update, export, or delete personal information we hold about you, or to object to certain processing. To exercise these rights, contact us using the details below. We may need to verify your identity before fulfilling a request.
Section 10
International data transfers
When data may be processed outside your country.
Your information may be processed in countries other than your own. When we transfer data internationally, we take steps designed to ensure an appropriate level of protection consistent with applicable law.
Section 11
Children's privacy
How we handle information from minors.
The Services are intended for business use and are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us so we can take appropriate action.
Section 12
Changes to this policy
How we notify you of updates.
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated version on this page and adjust the effective date. Continued use of the Services after changes become effective constitutes acceptance of the revised policy.