Privacy policy

Who we are

Flavero (“we”, “us”) provides menu discovery and analytics software to hospitality businesses (“venues”). This policy explains what we collect when venue staff use the dashboard and when guests use a venue's Flavero page.

For guest data, the venue is the controller and Flavero processes it on the venue's behalf. For dashboard accounts, Flavero is the controller.

Guests

Guests don't need an account and we never ask for names, emails or phone numbers. When you use a venue's page we process:

• Your questionnaire answers, the recommendations shown, items you save, and any ratings or comments you choose to leave.
• A random session identifier linking one visit together, the QR code you scanned and your device type (phone, tablet or desktop). No IP address is stored.

The first time you open a venue's page we ask whether we may save the menu and your picks on your phone and share anonymous usage statistics with the venue:

• Allow: your picks and the menu are saved on your phone so they work without signal, and the venue sees anonymous usage statistics.
• No thanks: nothing is saved on your phone and no usage statistics are sent. Recommendations still work; if you leave a rating, it is stored without being linked to your other activity.
• Until you choose, nothing is saved on your phone. Anonymous usage (which screens were used) may be counted for the visit.

Please don't include personal information in free-text comments. Venues see aggregated statistics and individual anonymous ratings and comments.

Venue users

For dashboard accounts we process your name, email address, a securely hashed password, your venue's menu and branding content, and uploaded images or documents used for menu import. If you write to us, we keep your message and email address to reply.

AI processing

When a venue imports or translates a menu, the uploaded images, PDFs, text, web page content or menu text are sent to Google's Gemini API to extract or translate menu information. The venue reviews the result before guests see it. Guest data is never sent to the AI provider.

Where data is stored (sub-processors)

• Google Cloud / Firebase App Hosting (EU region, Netherlands): runs the application.
• Neon (EU region, Frankfurt): the PostgreSQL database holding accounts, menus and guest activity.
• Google Gemini API: menu import and translation, as described above.

Legal bases

We process venue account data to perform our contract with the venue. Anonymous guest analytics rely on the venue's legitimate interest in improving its service, and saving data on your device relies on your consent, which you can change at any time by clearing the site's data in your browser.

How long we keep data

• Guest activity (visits, answers, picks, sessions): deleted automatically after the period the venue chooses (3, 6, 13 or 25 months; 13 by default).
• Ratings: after the same period the comment and any link to the visit are removed. The star score and feedback tags are kept because they contain no personal data.
• Dashboard accounts: until you delete your account. Expired logins are removed automatically.
• Messages sent through our contact form: 24 months.

Your rights

You can access, correct, export or delete your personal data and object to its processing. Venue users can download their data and delete their account from Settings in the dashboard. Guests are anonymous, so we usually can't identify their data; clearing your browser's site data removes everything stored on your phone. For anything else, contact us. You can also complain to your local data protection authority (in Greece, the Hellenic Data Protection Authority).

Security

Data is transmitted over HTTPS, passwords are hashed, session tokens are stored only as hashes, and every venue's data is isolated from other venues.