Privacy policy
Last updated 14 November 2026
This policy explains what personal data RX Alpha Tech ("we") handles when you use TableMate, why, and the choices you have. It covers restaurant owners and their teams, and the guests who order at their tables.
1. If you are a guest
When you scan the QR code at a table, we collect only what is needed to take your order:
- Your phone number, which you must give to start or join a tab. The restaurant uses it only to reach you about that visit.
- Your name, if you choose to give one, so your table and the server can see who ordered what.
- What you order, your table, the times of your orders and requests (such as calling a server or asking for the bill), and your language.
- Technical data: a cookie that keeps you on your tab, and your IP address, which we use briefly to stop abuse (for example too many attempts to join a tab).
You don't need an account or app, and you never pay through TableMate: you pay the restaurant directly. Your phone number is shown only to staff of the restaurant you ordered at, never to other restaurants, and we don't use it for marketing.
2. If you run or work at a restaurant
- Owners and managers: name, email address, password (stored only as a secure hash), the restaurant's name, country, currency, address and settings.
- Staff: name, role, assigned tables and a 4-digit PIN (stored only as a secure hash), plus the actions you take, such as accepting orders or marking a bill paid.
- Billing: your plan, invoices and billing contact. If you pay by card, a payment provider processes the card and we don't store the full number.
- Support: the messages you send us and our replies.
- Security records: sign-ins, important changes (such as prices, staff or currency) and the IP address they came from, kept in an audit log.
We use this to provide the service, bill you, help you, keep accounts secure, and tell you about your trial, plan and important changes. We send product news only if you can opt out of it.
3. Who is responsible
For guest data, the restaurant decides why it is collected and is responsible for it; RX Alpha Tech processes it on the restaurant's behalf and only on its instructions. For owner, staff and billing data, RX Alpha Tech is responsible.
6. How long we keep data
We keep personal data for as long as we run the service. We don't delete restaurant accounts, guest details, order history, billing records or the audit log, including after a trial ends or a restaurant cancels, so a restaurant's history is still there if it comes back.
IP addresses used to stop abuse are not stored with your data; they are held in memory for a few minutes to a few hours.
7. Security
We use encrypted connections, store passwords and PINs only as secure hashes, limit repeated sign-in and PIN attempts, and keep each restaurant's data separate from every other restaurant's. Our platform admins can see a restaurant's data, including guest details, to support the restaurant and run the service; every time they open it, and every change they make, is recorded in an audit log.
8. Your rights
Depending on where you live, you may have rights over the data we hold about you, such as seeing it, correcting it or getting a copy. Guests can ask the restaurant or contact us. Restaurant users can change most details in their account. We will answer requests as the law where you live requires, and you can also complain to your local data protection authority.
9. Children, transfers and changes
- The service is not meant for children under 16 to use on their own.
- Our providers may store data outside your country. When they do, we use the safeguards the law requires.
- We may update this policy. We will change the date at the top and tell restaurant owners by email about important changes.
10. Contact
Questions or requests about your data:
RX Alpha Tech
[Company address]
support@tablemate.dailyos.work