Legal

Privacy Policy

Effective date: May 13, 2026 · Last updated: May 13, 2026

This Privacy Policy describes how TastyReply ("TastyReply", "we", "us", or "our") collects, uses, and shares information when you use our website at tastyreply.com and our services (collectively, the "Service"). By using the Service, you agree to the practices described here.

1. Who we are

TastyReply is an operations intelligence platform for restaurant chains. We aggregate publicly available customer reviews from third-party platforms (such as Google Business Profile, Yelp, TripAdvisor, OpenTable, Resy, UberEats, DoorDash, and Grubhub) on behalf of restaurant operators who connect their accounts, and we provide analytics, summaries, and alerts to help those operators run their businesses better. Contact: privacy@tastyreply.com.

2. Information we collect

2.1 Account information you provide

When you create a TastyReply account we collect your name, email address, the name and timezone of your business, the locations you choose to monitor, and the third-party accounts you connect. If you become a paying customer, our payment processor (Stripe) collects payment information on our behalf — we never see or store your card number.

2.2 Information from third-party platforms you connect

When you connect a third-party review platform to TastyReply (for example, your Google Business Profile), you authorise us, via that platform's standard OAuth flow, to access specified data on your behalf. The data we receive depends on the platform but typically includes: business listing metadata (name, address, hours), reviews posted to your listings (rating, review text, reviewer's display name, posting date), and your aggregate listing statistics. We request read-only scopes. We do not post replies, edit listings, or write any data back to the third-party platforms on your behalf.

2.3 Information we generate

We use AI models to categorise the reviews we receive (for example, tagging a review as relating to "wait time" or "food quality") and to produce summaries and recommendations for you. The categorisations, tags, and summaries we generate are stored alongside the reviews in your account.

2.4 Information collected automatically

We collect standard log information when you use the Service (IP address, browser type, pages visited, timestamps) and use cookies and similar technologies for authentication, security, and basic analytics. We do not use third-party advertising trackers.

3. How we use information

We use the information we collect to provide, maintain, and improve the Service: to display reviews and analytics in your dashboard, to send you the weekly operations briefing and other notifications you have configured, to detect high-risk reviews (food safety, legal, viral) and alert you, to bill you, to provide customer support, to detect and prevent abuse, and to comply with our legal obligations.

4. How we share information

We do not sell, rent, or trade your information. We share information only with:

5. Use of Google API Services User Data

TastyReply's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, TastyReply:

We retain Google user data only for as long as your TastyReply account remains active and the relevant Google account remains connected. If you disconnect a Google account or close your TastyReply account, we delete the associated Google user data within 30 days. You may request deletion at any time by emailing privacy@tastyreply.com.

6. Use of other third-party platform data

For other third-party review platforms you connect (Yelp, TripAdvisor, OpenTable, Resy, UberEats, DoorDash, Grubhub, Facebook, etc.), we apply the same principles described above for Google: read-only access, use only for user-facing features, no use for advertising, no use for training generalized AI models, deletion within 30 days of disconnection. Where a platform has its own additional requirements, we comply with those as well.

7. Competitor data

If you opt into our competitor intelligence features, we retrieve and aggregate publicly available review information for restaurants you choose to track, from publicly accessible review-platform pages and APIs. We store only aggregate metrics (ratings, counts, AI-generated summaries) for competitor restaurants — we do not store or display the full text of competitor reviews.

8. Data retention

We retain account information for as long as your account is active and for a reasonable period after termination to allow account recovery, comply with legal obligations, resolve disputes, and enforce agreements. Review and analytics data associated with disconnected sources is deleted within 30 days. You may export your data as CSV at any time, and you may request earlier deletion by emailing us.

9. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS) and at rest, OAuth tokens stored encrypted using authenticated encryption, isolated per-organisation data access via Row-Level Security, the principle of least privilege for employee access, and regular security reviews. No method of electronic transmission or storage is perfectly secure; we cannot guarantee absolute security.

10. International transfers

TastyReply is hosted in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States. We rely on appropriate safeguards such as Standard Contractual Clauses where required by law.

11. Your rights

Depending on where you live, you may have rights with respect to your personal information, including the right to access, correct, delete, port, or restrict the processing of your data, and to object to certain processing. To exercise any of these rights, email privacy@tastyreply.com. We will respond within 30 days. You may also lodge a complaint with your local data protection authority.

12. Children

TastyReply is intended for use by restaurant business operators and is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information about a child, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version at this URL and update the "Last updated" date above. For material changes, we will provide additional notice (such as an email to account owners) before the changes take effect.

14. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at privacy@tastyreply.com.