Privacy Policy

Last updated: July 2026. This page is adapted from TableAura's Privacy Policy — verify exact wording with counsel before publishing.

This privacy policy ("Policy") describes how TableAura, Inc. ("TableAura," "we," "our," or "us") collects, uses, and discloses information about you, as well as your rights and choices regarding that information. It applies to your use of, access to, and interactions with the TableAura mobile application ("Application"), the www.tableaura.com website ("Website"), and any other online services operated by TableAura that link to this Policy (collectively, the "Service"). Together, the Website, Application, and Service are referred to in this Policy as the "TableAura Platform."

This Policy applies only when we act as a controller or business — that is, when we process information for our own purposes. It does not apply to any personal information we process on behalf of a restaurant partner as a processor or service provider; in those cases, the partner's own privacy policy governs.

If you are a resident of California, Colorado, Connecticut, Montana, Nevada, Oregon, Texas, Utah, Virginia, or another state with similar privacy laws, see the state-specific section near the end of this Policy for rights that apply to you.

If you have any questions or concerns about this Policy, contact us at privacy@tableaura.com. We may modify this Policy from time to time — see "Changes to This Policy" below.

Information We Collect From You

"Personal information" means any information that can be used, directly or indirectly, to identify, locate, or contact someone — including your name, address, email address, phone number, and identifiers such as payment card details, IP address, or device IDs.

• Registration information, like your name, email, and phone number.
• Linked payment card details — TableAura does not store your full card number; payments are processed by our third-party payment processor.
• Rewards activity, including cashback earned and redemptions you make.
• Messages or emails you send us, such as support requests or feedback.
• Automatically collected data, like IP address, device information, click behavior, and approximate location.
• Demographic information you choose to share with us, such as age range, gender, or general location.
• Purchase information, including the date and time of a visit, amount spent, items ordered, and rewards applied, when you pay at a participating restaurant through TableAura or redeem a reward.
• Dining preferences, including allergy information and dietary restrictions you choose to provide.
• Referral information, such as a friend's email address when you refer them to TableAura.
• User content, including a profile picture or any content you submit to your profile or to customer support.
• Job application information, if you apply for a position with us — including employment and education history and references.

Information from your browser or device

When you use the TableAura Platform, we may automatically collect device information (device type, device ID, user settings), how you navigate and use the Platform (pages visited, offers viewed), and general, non-precise location derived from your IP address.

Our website uses Plausible, a privacy-friendly analytics tool that does not use cookies and does not track you across other websites. We do not currently place advertising or cross-site tracking cookies on the Website. The Application may use device identifiers as described above to operate core functionality (such as keeping you signed in and detecting fraud).

Information from third parties and publicly available sources

We may also receive information about you from other sources, including:

• Merchant partners — such as your dining preferences or feedback they share with us.
• Vendors we work with, including analytics, fraud prevention, and customer support tools.
• Publicly available information.

We are not responsible for the data practices of these sources; consult their own privacy policies.

How We Use Information

• Providing the Service — administering your account and the TableAura Platform.
• Transactional communications — confirming registration, purchases, and reward redemptions, and responding to messages you send us. These are a necessary part of using the Platform.
• Security communications — notifying you of account or security-related changes (for example, sign-in from a new device). You generally cannot opt out of these.
• Marketing communications — emails, texts, or push notifications about TableAura. You can opt out of push notifications in your device settings, texts by replying "STOP," or by emailing privacy@tableaura.com. Standard message and data rates may apply.
• Improving the Service — understanding usage trends and improving the Platform.
• Personalization — tailoring content and offers you see.
• Surveys and feedback — always voluntary; you can opt out via the unsubscribe link or by emailing us.
• Merchant partners — sharing information with restaurant partners to facilitate your order or reservation, and to identify you to a partner as a returning or VIP guest.
• Security — protecting the rights, property, and safety of TableAura, our users, and others.
• At your direction — for example, placing an order or making a reservation you requested.
• With your consent — for any additional purpose we've told you about and you've agreed to.

We may currently run limited social or search advertising to promote TableAura; we do not use information that identifies you individually to build targeted-advertising audiences at this time. If that changes, we will update this Policy and provide the opt-out mechanisms described in the state-specific sections below before doing so.

We may use information that has been aggregated or de-identified for any purpose permitted by law.

When We Disclose Information

We disclose information to third parties: with your consent; as described in this Policy; as required by law or legal process; to protect the rights, property, or safety of TableAura or others; to enforce our terms; and to prevent fraud.

• Service providers we use for tasks like data storage, analytics, and customer communication, under confidentiality obligations, and prohibited from using your information for their own purposes.
• Related companies — our affiliates or parent company, who remain bound by this Policy.
• Merchant partners and transaction providers — for example, to our payment processor (Stripe), or to a restaurant partner's point-of-sale system (currently Square or Clover) so your order and rewards can be processed.
• Business transfers — if TableAura is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction, subject to this Policy.
• Legal and safety — to comply with law, respond to lawful requests from public authorities, or protect the rights, property, or safety of TableAura or anyone else.
• At your direction — where you ask us to share your information.

We do not sell your personal information. We may disclose aggregated or de-identified information (for example, in an industry report) that does not identify you.

Your Rights and Choices

Account management

You can review, update, or correct information in your account through in-app settings. To delete your account, go to Account → Settings → Delete Account in the app, or email us and we will delete your account within 45 days. We retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

Tracking technology

You can block cookies through your browser settings, though this may limit some Website functionality. You can stop all information collection by the Application by uninstalling it. On iOS, we only access your device's advertising identifier (IDFA) with your consent, and you can reset it at any time in your device settings.

International data

We are based in the United States, and information we collect is processed and stored here, which may have different data protection laws than your home jurisdiction. By using the TableAura Platform, you agree to this processing.

Children's information

The TableAura Platform is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us at privacy@tableaura.com and we will delete it.

Data security

We maintain reasonable administrative, physical, and technical safeguards designed to protect your information from loss, misuse, and unauthorized access. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Links to other sites

The TableAura Platform may link to third-party websites or services. We don't control their privacy practices, and this Policy doesn't apply to them — review their own policies before providing information.

Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by an updated "Last updated" date and, where appropriate, additional notice (such as email or an in-app notice). Continued use of the TableAura Platform after changes take effect means you accept the updated Policy.

State-Specific Disclosures

California

This section applies to California residents and describes rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

• Sensitive personal information — to the extent we collect sensitive personal information, we use and disclose it only for permissible business purposes, and we do not sell or share it.
• Retention — we retain each category of personal information only as long as reasonably necessary for the purpose it was collected, or as required by law.
• Right to know, correct, and delete — you may request the categories and specific pieces of personal information we've collected about you, the sources, the purposes for collecting it, and the categories of parties we've disclosed it to for a business purpose. You may also request that we correct or delete your personal information, subject to certain exceptions.
• Right to opt out of sale or sharing — TableAura does not currently sell or share personal information as those terms are defined under the CCPA. If this changes, we will provide an opt-out mechanism (such as a "Your Privacy Choices" link) and honor recognized opt-out preference signals before doing so.
• Authorized agent — you may designate an authorized agent to submit a request on your behalf; we may require written proof of that authorization and separately verify your identity.
• Non-discrimination — we will not discriminate against you for exercising these rights.
• Shine the Light — California residents may request a list of any personal information we disclosed to third parties for their own direct marketing purposes in the prior calendar year. As of this Policy's last update, we have not made such disclosures.

To exercise any of these rights, email privacy@tableaura.com. We will confirm receipt within 10 business days and respond within 45 days. We may need to verify your identity before processing your request.

Nevada

We do not sell, and will not sell, your covered information as defined by NRS 603A.340.

Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia

Our data practices are described in the main Policy above. We do not currently sell personal data or process it for targeted advertising as those terms are defined under these states' laws; if that changes, we will provide an opt-out mechanism, including honoring recognized opt-out preference signals such as Global Privacy Control.

You have the right to: confirm whether we're processing your personal data; access it; correct inaccuracies; delete it; and obtain a portable copy of data you provided to us. Oregon residents also have the right to a list of specific third parties we've disclosed personal data to. You may also revoke previously given consent at any time.

To exercise these rights, email privacy@tableaura.com; we will respond within 45 days and may need to verify your identity. If we decline a request, you may appeal by emailing support@tableaura.com with "appeal" in the subject line; we will respond within 60 days. If your appeal is denied, you may file a complaint with your state Attorney General:

• Colorado: coag.gov/file-complaint
• Connecticut: dir.ct.gov/ag/complaint
• Montana: dojmt.gov/consumer
• Oregon: justice.oregon.gov/consumercomplaints
• Texas: oag.my.salesforce-sites.com/CPDOnlineForm
• Utah: attorneygeneral.utah.gov/contact/complaint-form
• Virginia: oag.state.va.us/consumercomplaintform

Contact

TableAura, Inc. privacy@tableaura.com