Privacy policy

Last updated 28 October 2026.

This policy covers tablebooker.net, the TableBooker dashboard and the booking pages we host for restaurants. TableBooker is provided by Orsuno, No. 220, Radiant Lotus Apt, Block II, Kodichikkanahalli, Bengaluru, Karnataka 560076, India.

Two kinds of data

• Restaurant accounts. For owners and staff we hold names, emails, business and billing details (legal name, address, tax number). We decide how this data is used.
• Guests. When a guest books, the restaurant receives their name, phone number, optional email, party size and any note. The restaurant decides how this data is used; we process it on the restaurant's behalf. Each restaurant's booking page links to its own privacy notice.

What we use it for

• Taking and managing bookings, and sending the guest messages about their booking (confirmation, reminders, changes).
• Running the account: sign-in, staff notifications, billing and tax invoices.
• Keeping the service safe: rate limits and bot checks against fake bookings.

We do not sell personal data, show guests other restaurants, or use guest data for advertising.

Who helps us run the service

We share data only with the providers needed to run TableBooker: our hosting provider, Cloudflare (network and bot protection), our email delivery provider, Telegram (staff booking cards), and our payment providers (Razorpay in India, Paddle elsewhere). Each receives only what its job needs.

How long we keep it

• Guest bookings and the guest list: as long as the restaurant's account, unless the restaurant erases a guest earlier.
• Delivery records for guest messages: 180 days after the booking. Technical delivery logs: 30 to 90 days.
• Accounts that never verified their email: deleted after 30 days.
• Invoices: 8 years, as Indian tax law requires.
• Backups: deleted data can remain in backups for up to 30 more days.

Photos uploaded to a booking page have their location and camera data removed.

Your rights

You can ask to see, correct or erase your personal data. Guests should first contact the restaurant they booked with, which can erase a guest at all its locations in one step. You can also write to us and we will pass the request on or handle it ourselves, within 30 days. Under India's Digital Personal Data Protection Act 2023 you may also complain to the Data Protection Board of India.

Security

Each restaurant's data is separated inside the database itself, connections are encrypted, and our own admin access needs a second code at every sign-in.

Contact

For privacy questions or requests: support@tablebooker.net.