Privacy policy

About this notice

This notice covers dolorez.com, its reservation and waitlist pages, restaurant-management tools, staff applications and connected services. It explains the information we process, how it is used and how to request access, correction or deletion. Privacy questions can be sent to hey@dolorez.com.

Restaurants decide how they manage their guest and employee records. We provide software and process those records to deliver their service. Restaurants may have additional privacy notices and legal obligations. We also handle account administration, security and support information for operating dolorez. Contact the restaurant about its records or contact us and we will help route your request.

Information we process

• Guests and visits: names, phone numbers, email addresses, party sizes, reservation or preferred-arrival times, visit status and history, cancellations, requests or notes, messages, and consent or opt-out records. Restaurants may import existing contacts and historical visits.
• Staff and accounts: sign-in details, restaurant memberships and access roles, contact information, employee names and nicknames, job qualifications, availability, schedules, shift trades, posts, polls, messages and optional photos or avatars. Staff birthdays use month and day. Restaurants may import staff records.
• Restaurant operations: restaurant details, floor plans, table status, seasons, staffing plans, uploaded artwork, sales history and reports. Some information may be linked to a guest, employee or account.
• Subscription billing, when activated: restaurant billing contact and service address, selected services and offers, subscription and invoice references, payment status, and agreement acceptance records. Stripe handles payment-method entry and processing on its hosted pages. We do not ask you to enter full card numbers or security codes in dolorez. settings, messages or chat. Subscription collection is not activated by this notice.
• Technical and support information: device and browser information, IP addresses, request and security logs, support correspondence, session cookies and local storage for sign-in, preferences or offline use. When enabled, push notifications use a device subscription and delivery information.

Please avoid putting unnecessary sensitive information into notes, messages, imported files or AI requests.

How information is used

We use information to manage reservations and waitlists, provide visit updates and guest support, coordinate staff schedules and shift changes, support team communications, produce operational reports, process imports, maintain accounts, prevent abuse and operate and improve the service. Optional features use information needed for that feature, such as a photo for an avatar or a device subscription for notifications.

Who can see information

Restaurant owners, managers and authorized staff receive information appropriate to their access and the restaurant's operations. Staff roster contact details, employee birthdays and scheduled shifts may be visible to coworkers. Bulletin-board posts are visible to their intended staff audience. Staff-to-staff direct messages are private between their participants in the staff and Back Office interfaces; managers' team-post views do not include those private conversations. Authorized platform support may process stored information when necessary for support, security or legal obligations.

We use service providers for hosting and delivery, including Render for hosting, Supabase for authentication, database and file storage, Twilio for SMS, Resend for email, OpenAI for enabled AI features, the relevant browser or device notification services for Web Push, and Stripe for software subscription billing when activated. These providers process information needed for their role under their applicable terms and privacy practices. We may also disclose information when required by law, to protect rights and safety, or as part of a business transfer with appropriate safeguards.

We do not sell personal information or share it for cross-context behavioral advertising. Mobile numbers and SMS consent are not shared with third parties for their own marketing or promotional purposes. Delivery providers may process that information to send messages.

AI-assisted features

Where enabled, AI services process selected content for tasks such as understanding a guest's waitlist reply, translating a staff message or post, or suggesting import mappings and record cleanup. This can include the relevant message, limited conversation context, draft visit details or sample import data. Translations keep the original text available. AI results can be incorrect; staff can review and correct operational information. Turning on an integration or AI feature does not authorize unrelated marketing.

Facebook, Instagram and other integrations

As of October 30, 2026, the dolorez. Meta development app is not connected to restaurant accounts, has not been granted customer-data permissions and has not activated native Facebook or Instagram Reserve bookings. A public booking link on a social profile can open dolorez. without granting it access to that social account. Google partner integration also remains unactivated. We will update this notice when enabled integrations change the information processed or its use.

Storage, retention and security

Information is processed in the locations used by our service providers, including the United States. We retain information as needed to provide the service, follow restaurant instructions, maintain accurate records and meet legal, accounting and security obligations. Cancellation, archiving or app removal does not necessarily erase a record.

We use measures such as authenticated staff access, restaurant-scoped authorization and restricted provider credentials. No online system can guarantee absolute security. Deletion requests include consideration of provider copies and backups; limited information may need retention for an applicable legal or security reason. We will explain relevant limits when handling a request.

Your choices and requests

Depending on your location and the applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, withdraw consent, restrict certain processing or appeal a decision about a privacy request. Contact hey@dolorez.com. We verify identity and authority using appropriate information and coordinate with the restaurant when it controls the requested records. You may ask us to review a privacy-request decision through the same contact.

For step-by-step requests, see Data deletion instructions. You can disable push notifications in your device settings and use STOP for SMS. Cancellation of a visit, SMS opt-out and deletion of stored data are separate actions. Essential cookies and local storage support sign-in and operation; disabling them may affect the service.

Children

The service is intended for restaurant guests, authorized staff and business users, not for children under 13 to use independently. If you believe a child has supplied personal information directly, contact us so we can review and address it.

Changes and contact

We may update this notice as the service changes. The effective date above identifies the current version. Material changes will be communicated through an appropriate service notice. Contact hey@dolorez.com about this policy or your information.