TAPDining Privacy Policy

1. Scope and contact

WebWorkBay, California, United States, operates TAPDining, its restaurant management and guest-menu services. This Policy explains information handling for those services and TAPDining signup. Contact sufi@webworkbay.com for privacy questions or requests. Restaurant websites, external links and other WebWorkBay services may have separate privacy notices.

2. Information we collect

We receive information that restaurant representatives and users provide, including names, email addresses, account authentication information, restaurant and location details, business addresses, telephone numbers, team memberships, menus, images, uploaded documents and support or update requests.

For billing, we receive customer and subscription identifiers, plan and payment status, transaction references and related billing information. Stripe processes payment details. TAPDining does not store your full card number or card security code in its application database.

When guests interact with a menu, we record operational and usage events such as menu visits, table-link activity, item or special views and link interactions, with timestamps and a session identifier. Hosting and security providers may also process network and device information, such as IP addresses, browser details and request logs, to deliver and protect the service. You do not need a restaurant management account simply to view a public menu.

3. How we use information

We use information to create and secure accounts, manage restaurant permissions, provide menus and table links, process purchases and subscriptions, coordinate setup, respond to requests, provide restaurant usage reports, troubleshoot problems, prevent abuse and comply with legal obligations. Public menu content is displayed to guests when published.

If a restaurant chooses AI-assisted menu import, the submitted menu material and a user identifier are sent to our AI processing provider, OpenAI, to produce draft menu data. Do not upload sensitive personal information that is unnecessary for a menu. Restaurant staff must review the extracted content before use or publication.

4. When we disclose information

We disclose information to service providers as needed for hosting, databases, authentication, payment processing, storage, security, communications and optional AI processing. Current providers include Supabase for database/authentication, Stripe for payments and OpenAI for optional AI-assisted menu extraction. Providers may process information under their applicable terms and our service arrangements; this Policy does not replace their notices.

Restaurant administrators and appropriately authorized staff can access information within their restaurant permissions. WebWorkBay personnel may access information as needed for setup, support, security and operation. Guests can access content a restaurant makes public.

We may disclose information to comply with law or valid legal process, protect rights or safety, investigate misuse, or as part of a business transfer subject to applicable safeguards and notice requirements. We do not sell TAPDining personal information or share it for cross-context behavioral advertising.

5. Cookies, browser storage and tracking choices

TAPDining uses authentication cookies and browser storage for functions such as sign-in, interface preferences, purchase recovery and guest-menu session measurement. The guest-menu session identifier helps distinguish visits and interactions within a browser session. Disabling cookies or storage may limit these functions.

TAPDining does not use cross-site advertising trackers. The application does not currently change its operational analytics in response to a browser Do Not Track signal. There is no TAPDining sale or cross-context advertising sharing for a Global Privacy Control signal to opt out of. We will honor legally applicable opt-out requirements if our practices change. External services reached through links may use their own cookies or tracking under their own policies.

6. Retention and security

We retain information for as long as reasonably needed to provide the service, maintain records, resolve disputes, meet legal obligations and protect against misuse. Retention depends on the type of information and its purpose. Billing, consent, fraud-prevention and security records may remain after cancellation; backups may persist until their normal replacement or deletion cycle. We do not promise immediate deletion of every backup when an account closes.

We use safeguards designed to protect information, including access controls and protected connections. No online service or transmission method is completely secure. Keep passwords private and report suspected account compromise promptly.

7. Your choices and requests

You can update available account and restaurant information through TAPDining and manage billing through Billing. Email sufi@webworkbay.com to request access, correction, deletion or a copy of personal information, or to ask about other rights available under applicable law. We may need to verify your identity and authority, but will not ask for your password or full payment-card details. Some information must be retained for legal or legitimate operational reasons.

Privacy rights depend on your location, applicable law and the nature of our relationship. Where applicable, these may include access, correction, deletion, portability, restriction, objection, withdrawal of consent and an appeal or complaint to a regulator. We do not discriminate for exercising legally protected privacy rights. If information is controlled by a restaurant, we may direct your request to that restaurant or assist it in responding.

8. Location and children

WebWorkBay operates from the United States. Our service providers may process information in the United States and other countries, where laws may differ from those where you live. Contact us about applicable safeguards before providing information subject to special transfer requirements.

TAPDining business accounts are intended for adults acting for businesses. TAPDining is not directed to children under 13, and we do not knowingly collect personal information from them. Contact us if you believe a child has submitted personal information so we can investigate and address it.

9. Policy changes

We will update the effective date when this Policy changes and provide additional notice of material changes where required. Contact WebWorkBay at sufi@webworkbay.com with questions.