Privacy Policy

1. Who we are

Served is a HoReCa management platform for restaurants, bars, and hospitality venues. References to “we”, “us”, or “Served” in this policy refer to the operator of the Served platform. If you have questions about this policy, please contact us at privacy@served.app.

2. Data we collect

We collect only the data necessary to provide the Served service:

• Account data — your email address and full name when you create an account.
• Venue data — business name, address, city, country, timezone, phone number, and email you provide for your venue profile.
• Review data — reviews fetched from Google Maps, TripAdvisor, and Facebook via third-party APIs on your behalf.
• Usage data — standard server logs including request timestamps and IP addresses, retained for up to 30 days.

3. How we store your data

All data is stored in Supabase (PostgreSQL), hosted on infrastructure in the European Union. Supabase encrypts data at rest and in transit. Access to your data is restricted to authenticated sessions — we do not expose raw database access to any third party. Backups are retained for 7 days.

4. How we use your data

We use your data solely to:

• Provide and operate the Served platform.
• Authenticate you and secure your account.
• Fetch and display review data from third-party platforms.
• Send transactional emails (account confirmation, password reset).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-party services

We integrate with the following third-party services to operate the platform: Google Maps API and SerpAPI (review fetching), Supabase (database and authentication). Each of these services has their own privacy policy. We only share the minimum data necessary for each integration to function (e.g. your Google Place ID to fetch reviews).

6. Your rights

You have the right to access, correct, or delete your personal data at any time. To request data deletion or export, email privacy@served.app. We will respond within 30 days. You may also delete your account and all associated data directly from the platform settings.

7. Changes to this policy

We may update this policy as the platform evolves. Material changes will be communicated via email to registered users at least 14 days in advance. Continued use of Served after the effective date constitutes acceptance of the updated policy.