Privacy Policy

Last updated: April 4, 2026 — Version 1

1. Who We Are

GuestVoice is a guest feedback and reputation management platform for restaurants and hospitality businesses. This policy explains how we handle personal data collected from restaurant guests who submit feedback, and from restaurant owners who use our service.

GuestVoice acts as a data processor on behalf of restaurant operators. The restaurant operator is the data controller for any personal data collected from their guests through the platform. For questions about your data, contact us at hello@guestvoice.app.

2. Data We Collect

From restaurant guests

• Star rating and optional written comment
• Feedback categories selected (e.g. food quality, service speed)
• Optional photos or voice messages, if the feature is enabled
• Optional contact information (email or WhatsApp), only if voluntarily provided
• Table number, if included in the QR code scanned
• Technical data: IP address, device type, browser, and submission timestamp

From restaurant owners

• Email address (for account access)
• Restaurant details (name, logo, branding settings, contact info)
• Google review link

3. How We Use Data

• To deliver the feedback collection, alert, and dashboard service
• To display feedback and aggregated statistics in the restaurant admin dashboard
• To optionally direct guests toward leaving a public Google review
• To measure aggregate website traffic and performance using Vercel Analytics

We do not use guest data for our own marketing purposes, and we do not sell or share personal data with third parties.

4. Data Storage

All data is stored securely using Supabase (PostgreSQL database and object storage), hosted in the EU (Frankfurt region). This ensures data from EU residents remains within the European Economic Area in accordance with GDPR requirements.

5. Data Sharing

Feedback data is only accessible to the restaurant that collected it and to GuestVoice for operational and support purposes. We do not sell, share, or use guest data for advertising. Our infrastructure sub-processors are Supabase (database and storage) and Vercel (hosting and analytics), both operating under data processing agreements.

6. Data Retention

Feedback data is retained for as long as the restaurant account is active. Upon account termination, data is retained for 30 days and then permanently deleted. Restaurant owners may request an export or deletion of their data at any time by contacting hello@guestvoice.app. Individual feedback entries can also be deleted by the restaurant owner directly through the admin dashboard.

7. Your Rights

Under GDPR you have the right to access, correct, or request deletion of your personal data. You may also request that we restrict processing, or receive your data in a portable format. To exercise any of these rights, contact us at hello@guestvoice.app. We will respond within 30 days.

8. Cookies and Analytics

The guest-facing feedback flow uses no tracking cookies. The admin dashboard uses essential session cookies required for authentication only.

We use Vercel Web Analytics and Vercel Speed Insights to measure aggregate website traffic and performance. These tools collect no personal data, set no tracking cookies, and cannot identify individual users. No consent banner is required for their use. Data collected is used solely to improve the service.

9. Legal Basis for Processing

We process guest feedback data on the basis of legitimate interest (Article 6(1)(f) GDPR) — specifically, the restaurant operator's legitimate interest in understanding and improving the guest experience. Analytics data is processed on the same basis. Where guests voluntarily provide contact information, processing is based on their consent.

10. Changes to This Policy

We may update this policy from time to time. The version date at the top of this page identifies the current version. Restaurant owners will be notified of material changes by email or via a notice in the admin dashboard, and will be asked to re-accept upon next login.

11. Contact

For privacy-related questions or data requests, contact us at hello@guestvoice.app.