Privacy Policy

This policy explains how DlandTables processes personal data when you use our website, alerts, support and optional Muse connector. For privacy questions or requests, contact support@dlandtables.com. Reading this policy or browsing the website does not constitute consent to optional analytics.

The date above identifies this version. If our data practices change, we will update this policy and provide appropriate notice of material changes. Where a new use requires consent, we will request it before that use begins.

Information We Collect:

We will collect and process the following personal information about you:

Account data: email address and account identifier. If you sign in with Google, we also receive your Google account identifier, email address and, where shared, your name and profile picture. Alert data: restaurant, requested date, meal, party size, language, status and activity dates. Payment data: Stripe customer and subscription records, order identifiers, amount, currency and payment or refund status. Support data: the subject and content of messages you send us. Technical and usage data may include connection information, browser and device information and, with your consent, analytics events. If you connect Muse, we also process connection identifiers, authorized permissions and security records associated with OAuth tokens.

How We Collect Your Information:

We collect/receive information about you in the following manner:

How We Use Your Information:

We will use the information that we collect about you for the following purposes:

Optional usage analytics are based on your consent. Rejecting or withdrawing analytics consent does not prevent you from using your account or alerts. Connecting Muse authorizes the displayed access permissions; it is separate from consent to optional analytics and from approving a payment.

How We Share Your Information:

We use providers for the functions described here: Supabase for account authentication and data storage; Stripe and Link for payments; Resend for service emails; and technical hosting and security providers. Google provides sign-in when you choose “Continue with Google”; Google's own privacy policy applies to that sign-in. Access should be limited to the data needed for each function.

When connected, Muse can receive alert criteria and status, including existing website alerts, and details of purchases made through the connector, within the permissions you authorize. Under the Muse Connector Terms, Meta and DlandTables act as independent controllers for their respective processing. Meta’s own privacy notices also apply to its use of this data. Disconnecting stops that connection’s future API access; it is not a request to cancel a DlandTables subscription or a guarantee that data already received by either service has been erased. Contact support for an erasure request.

Data may also be disclosed where required by law or necessary to establish, exercise or defend legal claims. Providers may process data outside your country, including outside the European Economic Area. Contact support@dlandtables.com for information about the recipients, processing locations and transfer safeguards applicable to your data.

ChatGPT and Claude connections

If you connect DlandTables to ChatGPT (OpenAI) or Claude (Anthropic), the assistant receives only the following data, within the permissions you authorize: (1) alert quota: your active alert limit, number of active alerts and number remaining; (2) for each alert: its identifier, restaurant identifier and name, requested date, meal, party size, alert language, status (monitoring, paused, expired or access required), paused and expired indicators, and the restaurant's booking link; (3) when reading a single alert: the last observed availability, limited to the local times seen and the time of observation. Your email address, name, account identifier, payment and subscription details and notification tokens are never returned. Restaurant search uses only the public catalog and returns no personal data. With write permission, the assistant can create, edit, pause and resume your alerts. These connectors do not expose payment tools, payment card details or your full conversation history to DlandTables.

Exact fields returned by each tool, including nested fields (a field ending in [] is repeated for each item). Errors return only an error code and a message. No other field, debug information, internal log, raw park response, refund or subscription state is ever returned:

• search_restaurants: restaurants[].id, restaurants[].name, restaurants[].park, restaurants[].timezone, restaurants[].meals, restaurants[].booking_url, total, notice
• get_alert_access: active_alert_limit, active_alert_count, remaining_alerts, notice
• list_alerts: alerts[].id, alerts[].restaurant_id, alerts[].restaurant_name, alerts[].date, alerts[].time, alerts[].guests, alerts[].locale, alerts[].paused, alerts[].expired, next_offset
• get_alert: id, restaurant_id, restaurant_name, date, time, guests, locale, paused, expired, status, booking_url, last_observation.times, last_observation.observed_at, last_observation.live, notice
• create_alert: id, restaurant_id, restaurant_name, date, time, guests, locale, paused, expired, status, booking_url, last_observation.times, last_observation.observed_at, last_observation.live, notice
• update_alert: id, restaurant_id, restaurant_name, date, time, guests, locale, paused, expired, status, booking_url, last_observation.times, last_observation.observed_at, last_observation.live, notice
• errors: error, message

We store connection identifiers, permissions, expiry dates and hashes of security tokens. Authorization expires after 30 days and tokens can be revoked. Removing a connector in the assistant prevents its use there; server access ends when the token is revoked or expires. Existing alerts and subscriptions are not canceled. Data already received by the assistant remains subject to its provider’s own privacy policy.

Retention Of Your Information:

Retention depends on the purpose and category of data: providing an account or alert, handling support, securing the service, meeting applicable record-keeping obligations or resolving a dispute. Expiration of an alert or OAuth token does not automatically delete its database record. Disconnecting Muse does not by itself erase account, alert or purchase records. You can request erasure at support@dlandtables.com; any information that must be retained for a legal obligation or claim is assessed separately from data needed to operate the service.

Your Rights:

Depending on the law that applies, you may have a right to access and rectify or erase your personal data or receive a copy of your personal data, restrict or object to the active processing of your data, ask us to share (port) your personal information to another entity, withdraw any consent you provided to us to process your data, a right to lodge a complaint with a statutory authority and such other rights as may be relevant under applicable laws. To exercise these rights, you can write to us at support@dlandtables.com. We will respond to your request in accordance with applicable law.

If the GDPR applies, you may complain to the competent data protection authority, including the CNIL in France (cnil.fr). We normally respond to rights requests within one month; if a lawful extension is needed, we will explain it within that period. We may request information reasonably necessary to verify your identity. Withdrawal of analytics consent affects future analytics and does not cancel the service contract.

Cookies Etc.

To learn more about how we use these and your choices in relation to these tracking technologies, please refer to our Cookie Policy.

Security:

We use technical and organizational safeguards intended to protect personal data, including access controls and restricted connector permissions. No online service can guarantee absolute security. This statement does not limit our legal responsibilities for protecting your data.

Third Party Links & Use Of Your Information:

Our Service may contain links to other websites that are not operated by us. This Privacy Policy does not address the privacy policy and other practices of any third parties, including any third party operating any website or service that may be accessible via a link on the Service. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Mobile app: purchases and notifications

In the iOS and Android app, RevenueCat processes your DlandTables account identifier, purchase history and subscription status to verify, restore and manage access to paid features. Apple or Google processes the store payment. If you enable push notifications, we store the notification token, platform, language and last registration date. Expo, Apple and Google process the token and notification content to deliver your restaurant alerts. You can disable notifications in your device settings. Account deletion is available in the app or through our account deletion page.

Usage measurement in the app: the app sends Amplitude usage events (app opens, intro steps, alert creation, plans viewed, purchases and their errors) linked to your DlandTables account id, so we can see where the journey gets stuck and improve the app. No IP address is kept and nothing is stored on the device for this measurement. This data is not used for advertising or for tracking across apps or websites. You can object or ask for its deletion at support@dlandtables.com.

Privacy contact

For questions or to exercise your data protection rights, email support@dlandtables.com. Describe your request and the email address associated with your DlandTables account. Do not send passwords, login codes or full payment card details.