Privacy policy

What we keep

Only what Restoman needs to work:

• If you work at a restaurant: your email, your name, the businesses and locations you work at with your roles, and the business's activity log, which records who changed what and when. If you sign in with Google, Google sends us your name and email.
• If you order at a restaurant: the name you give for pickup, your email if you give it (to send your receipt and tell you when it's ready), what you ordered, the note, the tip, the promo code and the pickup time. You can order without creating an account.
• About the payment: its status, amount and kind of method (for example, “Visa”), as Mercado Pago reports them. Your card details are entered into and kept by Mercado Pago; Restoman never sees them.
• If you rate an order: the stars and the comment, which only the restaurant sees.
• If you turn on notifications on your phone: the address your browser gives us to send them.
• For each session's security: the browser and IP address you signed in from. Sign-in codes are stored encrypted and expire after 5 minutes.
• If you write to support from the dashboard: your message and its answers.
• About restaurants: their menu, photos, hours, tables and the link to their Mercado Pago account, whose credentials are stored encrypted.

What we use it for

To provide the service, and nothing else:

• So you can sign in with your email and see only what your role allows.
• So your order reaches the restaurant, gets paid for and tells you when it's ready.
• To send the emails the service needs: your sign-in code, your order's receipt, the notice that it's ready, a refund, an invitation to a team.
• To protect restaurants and their guests from abuse: limits on attempts, and a Cloudflare Turnstile check before sending codes.
• To answer support questions and meet our legal and accounting obligations.

What we don't do

We don't sell or rent personal data. We show no ads and use no third-party advertising or tracking cookies. Our emails don't record whether you opened them or what you clicked.

Who we share it with

With the restaurant you order from or work at, and with the providers that help us run the service, only for that:

• Mercado Pago, which processes payments and refunds.
• Amazon Web Services and Neon, where our server and database run, in São Paulo, Brazil.
• Cloudflare, which serves this site, the menu, the dashboard and the photos, and checks that whoever asks for a code is a person.
• Resend, which delivers our emails.
• Google, only if you choose to sign in with your Google account.
• Your browser's notification service (Google's, Apple's or Mozilla's), only if you turn notifications on.

Where it's stored

Our database is in Brazil, and some of these providers process data in other countries, such as the United States. Neither is among the countries Argentina's data protection authority considers adequately protected, so data leaves Argentina only for providers bound by contract to protect it with the safeguards Ley 25.326 requires.

Cookies and storage in your browser

We only use what the service needs to work:

• The session cookie, which keeps you signed in. No script can read it.
• On the menu: the table you scanned, for three hours.
• In the dashboard: your language, the last location you opened and whether the sidebar is open.
• On your phone, never leaving it: your cart, recent searches, light or dark theme and your last order's details, so you don't type them again.

How long we keep it

While you use Restoman, and afterwards as long as the law requires. Orders are the restaurant's sales record, so they're kept even if you delete your account: they then carry the name “Cuenta borrada” (deleted account) and no email. Sessions expire on their own, notification addresses are deleted when the browser drops them, and each business's activity log is kept as a record.

How we protect it

Everything travels encrypted, the database connection verifies its certificate, Mercado Pago credentials are stored encrypted and sign-in codes as a digest that can't be reversed. Each member of a restaurant's team sees only what their role allows, and Restoman's support enters a business only through a recorded access, which the business sees in its activity log.

Your rights

You can ask to see, correct, update or delete your data by emailing hola@restoman.com.ar. We answer an access request within 10 calendar days, and a correction or deletion request within 5 business days, as Ley 25.326 sets. If you have an account for ordering, you can also change your name and email, or delete the account, from “Account” on the menu.

You may exercise your right of access to your personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, under article 14, paragraph 3 of Ley 25.326.

Argentina's Agencia de Acceso a la Información Pública, as the authority in charge of Ley 25.326, handles complaints from anyone whose rights under the data protection rules have been infringed.

• Your rights and how to file a complaint, at the AAIP (Spanish)
• The text of Ley 25.326 (Spanish)

Changes to this policy

If what we keep or who we share it with changes, we update this page and its date. If the change is significant, we announce it in the dashboard or by email before it applies.