Privacy Policy

This page explains, in plain language, what data Callbell processes, why, and how it is protected. Our principle: don't collect what we don't need.

Whose data?

We have two kinds of users: (1) owners and staff of restaurants, cafés, bars and similar food and drink businesses who open an account; (2) guests who open a business's menu, profile, booking or loyalty-card page. We only ask guests for what the action they choose needs (for example name and contact details for a booking); viewing a menu requires no personal data.

Business accounts

Email address, name (optional), a one-way hash of the password, business name, menu content, table names, contact details the business enters itself (phone, address, social media), opening hours, Wi-Fi details (only if the business chooses to show them), language preference and session records (sign-in time, device information).

Guests

Menu pages do not ask for personal data. To deliver waiter calls and prevent abuse we keep a salted, one-way hash derived from the IP address and browser details. The menu's "My list" stays in the guest's own browser. When booking, the guest enters their name, phone and/or email and an optional note; this is shared with the business they book with and used to send the confirmation email. Leaving contact details with feedback is optional and shared only with that business.

Statistics

Menu views, QR scans, calls and ad impressions/clicks are stored as daily and hourly totals, not per person.

Cookies and advertising

Callbell's free plan is supported by ads. Menu and booking pages of businesses on the free plan may show Google AdSense ads, and the mobile app may show Google AdMob ads; Google may use cookies and similar identifiers for these ads. In the EEA, the UK and Switzerland, advertising cookies and personalization are used only with consent given in Google's certified consent message; on iOS we ask for tracking permission and show non-personalized ads if it is declined. We also show promotions for Callbell's own apps (house ads); no personal data is collected for these, only total impressions and clicks are counted. For businesses on a Pro plan, and on their guest pages, ad networks (AdSense/AdMob) are never loaded. Browser storage is also used for functional purposes such as language choice, the menu list, call status and loyalty cards. How Google uses data: policies.google.com/technologies/partner-sites

Purposes and legal bases

Providing the service and managing the account (performance of a contract), security and abuse prevention (legitimate interest), and legal obligations. Marketing emails are sent only with your explicit consent.

Service providers

Data is stored on our hosting provider's servers. On the free plan Google (AdSense, AdMob) is a provider for advertising. Paid plans are sold through the Apple App Store and Google Play; we never see payment details. When paid features such as push notifications or AI are enabled, those providers will be added to this policy. Data is never sold.

Businesses' own customer records

Businesses can keep their own customer cards, credit (tab) records, bookings, inventory and staff time records in Callbell. For these records the business is the data controller; Callbell only stores and processes them on the business's behalf (data processor). We never use this data for advertising or share it with other businesses. Guests can send requests about these records directly to the business or to us.

Retention

Data is kept while the account is active. When an account is deleted, its businesses, menus, tables, statistics and staff links are permanently deleted. Technical security logs are kept for up to 90 days, or longer where the law requires.

Security

All connections use HTTPS. Passwords are stored as one-way hashes, session keys rotate and theft attempts are detected. Administrative access is protected by two-factor authentication.

Your rights

You can access, correct, delete, object to the processing of, and export your data. You can export your menu at any time and delete your account from within the app. For other requests, write to the address on the contact page.