Privacy Policy & Terms

1. Information we collect

SavorNova is a product of Eskro Technologies Inc., which is the data controller for the information described in this policy. We are dedicated to serving our customers and contacts to the best of our abilities, and part of that commitment is the responsible management of personal information collected through our website savornova.app and any related interactions.

We gather personal data through various interactions, including but not limited to when you use our services or products, or when you provide information to us directly.

The information we process

The following list details the types of personal information we may process:

• First and last name
• Email address
• Browsing history
• IP-based approximate location
• Device ID

We only process information that is essential for delivering our services, complying with legal obligations, or enhancing your user experience.

Scope and application

This policy protects the personal information of all our stakeholders, including website visitors, registered users and customers. Whether you are browsing savornova.app, using our services as a registered user, or engaging with us as a customer, your personal data is processed to the same standards of privacy and security.

2. How we use information

At Eskro Technologies Inc., we believe in using personal information responsibly and ethically. The data we collect serves several purposes, all aimed at improving the service we offer and the experience of the people who use it. The key ways in which we use personal information are:

• Authentication and security
• Processing transactions
• Customer support
• Compliance with legal obligations

We are committed to ensuring that your data is used solely for the purposes for which it was collected and in ways that you have authorised.

3. Guest menu data

A guest who scans a restaurant's QR code and opens its menu is not asked to create an account, and is not asked for a name, an email address, a telephone number or any payment detail. We do not collect any of those from a guest viewing a menu.

What is recorded

So that a restaurant can understand which of its dishes attract interest, we record a small set of events as a menu is used:

• That a menu was opened.
• Which dishes were opened, and on which part of the menu.
• How long a dish stayed open.

No free text, no contact details and no payment information is recorded from a guest, and nothing a guest does on a menu is sold or shared.

How a visit is identified

Each visit is grouped under a rotating anonymous session identifier rather than under anything that identifies a person. The identifier is produced by a keyed cryptographic hash, is unique to each restaurant, and rotates every day at the restaurant's own local midnight. The short-lived browser value it is derived from is discarded at the moment the visit is recorded and is never stored.

No cookies on a menu

Viewing a menu sets no cookies. The browser value described above is held in tab-scoped session storage, which the browser discards when the tab is closed. Closing the tab ends the visit.

What your device remembers

Separately from the reporting described above, Savor can remember a small amount of information in your own browser so that a menu you have opened before can greet you properly. Today that is limited to the fact that this browser has opened a particular restaurant's menu before, and roughly when, so Savor can tell a first visit from a return, and which orders and table bills we've already asked you about on this device, so we don't ask you twice.

This is stored by your browser on your device. It is not an account, it is not linked to your name, email address or telephone number, and it contains no identifier for you — no user number, no device number and nothing derived from your device or connection. Savor does not store it on our servers and cannot use it to recognise you. Because it lives in your browser, it belongs to that browser alone: a different browser, a different device, or a private window is treated as somebody new, and we make no attempt to detect or defeat that.

You can see what is held and erase it at any time from the “Your taste” link at the bottom of any menu. Clearing this site's data in your browser settings removes it too. Erasing it does not affect your saved menu language.

Savor does not record allergies, medical needs or religious dietary practice as something to remember about you. If a future feature ever needs to act on information like that, it will last only for the conversation you are having and will not be saved to your device.

Where a future Savor feature needs to answer a question for you, the relevant parts of what your browser remembers may be sent with that request so it can be answered, and are used only to answer it. What this section describes is what is stored, and where.

4. The Savor Staff app

Savor Staff is the app a restaurant's team uses on a counter tablet to receive and handle orders. It is used only by people a restaurant has given access to. This section describes what the app, and our servers, process about those staff members.

Signing in

Staff sign in with the Google account their restaurant gave access to. From Google we receive the account's name, email address, a unique account identifier and a link to its profile picture; we never receive the Google password, and we do not use the picture. Each sign-in creates a session that lasts up to 30 days, recorded with the network (IP) address it came from and a technical description of the app's connection. The session key is kept in the device's encrypted storage. The same account signs in to Savor on the web.

Order alerts and the device

So that a new order can alert a device while the app is closed, the app registers the device with Savor: a notification token issued by Google Firebase Cloud Messaging, and a short description of the device — its maker, model, Android version and the app's version. We do not collect serial numbers, telephone numbers or advertising identifiers. An alert carries only an order number or a table name.

What the restaurant can see

A restaurant's owners can see, for their own restaurant, which staff accounts are signed in on which devices — the person's name and email address, the device description, when and from which network address it signed in, when it was last opened and last alerted, and when its session ends — so that they can sign out a lost or shared device. Savor's support team can see the same to help a restaurant.

Service measurements

To keep the app fast and reliable it reports timings — such as how long a new order took to appear, or whether an action failed — together with the app's version and platform. These contain no name, email address, order, customer or device identifier, and are kept in our hosting provider's logs rather than our database. The app contains no advertising, analytics or crash-reporting software and does not use an advertising identifier.

Customer details shown to staff

To prepare and hand over orders, staff see the customer details the restaurant needs: the customer's name, telephone number and notes, and for a delivery the address and the courier's details. The app holds these in memory while it is open and does not store them on the device.

Bluetooth printer and the location permission

The app can print receipts on a Bluetooth printer. On Android 11 and earlier, Android lets an app search for nearby Bluetooth devices only if it holds the location permission, so on those versions the app asks for it — and only to find a printer. The app never reads, records or sends your location. On Android 12 and later it uses the "Nearby devices" permission, declared as not used for location. The chosen printer is remembered only on the device.

App updates

The app downloads updates to its own software from Expo, our update provider. Each check sends the app's platform and version, a random identifier for that installation and, if the app failed to start, a short technical error message; Expo also sees the device's network address.

Deleting a Savor Staff account

A staff member can delete their account from their account page in the Savor web console (the menu, then "Account & privacy" — the Savor Staff app's link of the same name opens it), or by email, as the account deletion page explains. Deleting it removes their name, email address and Google sign-in, every session with the network address and device details recorded at sign-in, their devices' alert registrations, and their access to every restaurant. Records a restaurant keeps about its business — orders, payments, refunds, settled tables and changes to orders and menus — stay with that restaurant under an internal identifier that no longer leads to the person.

5. The Savor Operator app

Savor Operator is the app a restaurant's owners and managers use on their own phone or tablet to manage their restaurant — its menu, today's service, its settings and its team. It is used only by people a restaurant has given access to, and by Savor's support team. It shows the same information about the restaurant as the Savor web console.

Signing in

Owners and managers sign in with the Google account their restaurant gave access to. From Google we receive the account's name, email address, a unique account identifier and a link to its profile picture; we never receive the Google password, and we do not use the picture. Each sign-in creates a session that stays valid for 30 days after the app was last used, recorded with the network (IP) address it came from and a technical description of the app's connection. It ends when the person signs out or their account is deleted. The session key is kept in the device's encrypted storage. The same account signs in to Savor Staff and to Savor on the web.

The app's version

Every request the app makes carries its version, its platform (iOS or Android) and its store build number, so that our servers can tell whether that version is still supported and, if it is not, ask for an update. The app sends no device name, serial number, telephone number or advertising identifier, and contains no advertising, analytics or crash-reporting software.

The camera, photos and videos

The app asks to use the camera, or opens the photo library, only when an owner or manager chooses to add a photo or video — of a dish, an offer or the restaurant's cover, or to its media library — and uses them only for that. The camera takes photos only. What they choose is uploaded to Savor and appears on the restaurant's menu, as it does when added on the web; the app reads no other photos or videos and never records sound.

Ask Luna

In Guest feedback, an owner or manager can ask Luna, an AI assistant, a question about their guests' feedback. Before the first question, the app asks for their permission and says what is sent to OpenAI, our AI provider: the question, totals from the restaurant's feedback and a short sample of what guests wrote — never a guest's name, and with phone numbers and email addresses taken out first. Without that permission, nothing is sent.

Payments

Setting up a restaurant's payouts opens Stripe's own pages inside the app. What is entered there, such as bank details, goes to Stripe under Stripe's privacy policy and is not entered into Savor.

Team invitations

An owner can invite someone to the restaurant's team by entering their email address and choosing a role. Savor emails that address to say which app to use, and again if the owner resends the invitation; the invitation is accepted when that person signs in with a Google account of exactly that email address. A restaurant's owners and managers see its team's names, roles and email addresses. Removing someone ends their access to that restaurant and stops their devices receiving its order alerts.

App updates

Like Savor Staff, the app downloads updates to its own software from Expo, our update provider. Each check sends the app's platform and version and a random identifier for that installation; Expo also sees the device's network address.

Deleting a Savor account from the app

In the app, More, then "Account & privacy", then "Delete account" opens the person's account page in the Savor web console, where they confirm with Google; they can also use the web console directly, or email us, as the account deletion page explains. Deleting the account ends every Savor Operator session, along with everything the Savor Staff section above lists. The only owner of a restaurant must add another owner first, so that the restaurant remains accessible.

6. Data storage and protection

Where data is stored

Personal information is stored and processed by the hosting and service providers named under Sharing and disclosure, some of which operate outside Canada. Where information is transferred internationally, we ensure that the transfer complies with all applicable laws — see International data transfers.

We partner with reputable data hosting providers committed to using current security measures. These partners are selected on the basis of their adherence to stringent data protection standards.

How data is protected

• Encryption: to protect data in transit and at rest, we employ robust encryption technologies.
• Access control: access to personal information is strictly limited to authorised personnel with a legitimate business need. We enforce access controls and review permissions regularly.
• Security audits and monitoring: regular security audits identify and remediate potential vulnerabilities, and we monitor our systems for unusual activity to prevent unauthorised access.

7. Sharing and disclosure

At Eskro Technologies Inc., we are committed to safeguarding your personal information, and that commitment extends to how we handle its sharing and disclosure.

Third-party service providers

We may share your information with third-party service providers who perform services on our behalf. Such parties may access personally identifiable information on a need-to-know basis and are contractually obliged to keep it confidential. They are prohibited from using your personal information for any purpose other than providing these services to us.

The service providers we currently use are:

• Stripe — payment processing and billing. Purposes: processing transactions, authentication and security, and compliance with legal obligations. Stripe's privacy policy is published at stripe.com/privacy.
• Google — signing in with a Google account, and delivering order alerts to staff devices (Firebase Cloud Messaging). Purposes: authentication and security, and providing the service.
• Expo — delivering updates to the Savor Staff and Savor Operator apps. Purpose: providing the service.
• Vercel — hosting the service, including its request logs. Purposes: providing the service, and security.
• Neon — hosting the service's database. Purpose: providing the service.
• Sentry — reporting errors on our servers, with personal data removed from each report. Purpose: keeping the service reliable.
• OpenAI — answering an owner's questions about their guest feedback (Ask Luna, only after the owner allows it), translating a restaurant's menu, reading a menu a restaurant uploads so it can be imported, and the AI waiter on a restaurant's public menu. It receives what each of these needs: an owner's question with totals and a short sample of what guests wrote (never a guest's name, and with phone numbers and email addresses taken out first), a menu's text, or a diner's question to the AI waiter with the menu. Purpose: providing the service.
• Resend — sending SavorNova's emails, such as an invitation to a restaurant's team and an alert about a waiting order. Purpose: providing the service.
• Twilio — sending the code that verifies a diner's phone number. Purposes: authentication and security.
• Shipday — arranging a courier for a delivery order. It receives what the courier needs: the diner's name, delivery address and phone number, and the order. Purpose: providing the service.
• Cloudflare — storing the photographs and videos restaurants upload, and serving them on their menus. Purpose: providing the service.
• Backblaze — keeping backups of the service's database and of the media restaurants upload. Purposes: providing the service, and security.

Data processing agreements

When we share your data with third-party service providers, we do so under Data Processing Agreements that require your information to be managed in accordance with the GDPR and other relevant data protection laws. These agreements require third parties to implement adequate technical and organisational measures to secure your data.

Transparency and control

We will always inform you about any significant change to our sharing practices, and where applicable you will have the option to consent to that change.

8. International data transfers

Eskro Technologies Inc. may transfer your personal information to locations outside your country of residence, including to countries whose data protection laws differ from those in your own jurisdiction. Any such transfer is conducted in compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR).

9. Cookies and tracking technologies

We are committed to being transparent about our use of cookies and other tracking technologies on savornova.app. These technologies support the operation of our platform and help us understand how it is used.

Cookies are small data files placed on your device by a website. We use as few as the service can operate with, and we use only one kind.

The only cookies we set

• Essential sign-in cookies, set only when a restaurant owner signs in to manage their menu. They keep that person signed in and protect the session, they are scoped to the management area of the site, and the service cannot work without them. They are not used for analytics or advertising.

What we do not use

We set no advertising cookies, no cross-site tracking cookies and no third-party analytics cookies. We do not use web beacons or pixel tags, and we do not run an advertising network's tracking code. Because no non-essential cookie is set, this site does not ask you to make a cookie choice.

Guests viewing a restaurant's menu are given no cookies at all — see guest menu data above.

10. Data retention

We keep information for as long as it is needed to provide the service, and no longer than the purposes described in this policy require.

Menu content and uploaded media

A restaurant's menu content and the photographs and videos it uploads are kept while its account is open, because they are what the service publishes. A restaurant can delete uploaded media itself at any time from its media library.

Deletion is permanent. When media is deleted, the stored file and every version derived from it are removed, and their removal is confirmed before the deletion is reported as complete. We keep no backup copy and no earlier version of a deleted file, so a deletion cannot be undone — by a restaurant or by us.

Guest menu activity

Menu activity is retained as counts held against the rotating anonymous session identifier described above. Because that identifier rotates daily and the browser value behind it is discarded when the visit is recorded, older activity cannot be re-linked to a session, a device or a person, by us or by anyone else.

Account and billing records

Account details are kept while the account is open. Billing and transaction records are kept for as long as tax, accounting and other legal obligations require, which may be longer than the account itself.

Savor Staff sessions and devices

A Savor Staff sign-in, with the network address and device details recorded when it was made, is kept until it is signed out or revoked, or the account is deleted. A device's registration for order alerts is kept, marked as retired once it stops being used, until the account is deleted.

Savor Operator sessions

A Savor Operator sign-in, with the network address and connection details recorded when it was made, is kept until it is signed out or the account is deleted.

Closing an account

When a restaurant closes its account, its menu content, uploaded media and account details are deleted, other than records we are required to keep by law. You can also ask us to delete your information at any time using the contact page.

11. Your rights

Eskro Technologies Inc. recognises and respects your rights regarding your personal information, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

• Right of access (Art. 15 GDPR): to request access to the personal information we hold about you and information about how we process it.
• Right to rectification (Art. 16 GDPR): to request the correction or completion of personal information that is incorrect or incomplete.
• Right to erasure, the 'right to be forgotten' (Art. 17 GDPR): to request deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.
• Right to restriction of processing (Art. 18 GDPR): to request that we restrict processing of your personal information under certain conditions.
• Right to data portability (Art. 20 GDPR): to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to object (Art. 21 GDPR): to object to the processing of your personal information under certain conditions, including processing for direct marketing.
• Right to withdraw consent (Art. 7(3) GDPR): where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint (Art. 77 GDPR): to lodge a complaint with a supervisory authority if you believe our processing violates applicable data protection law.

Exercising your rights

To exercise any of these rights, contact us at support@savornova.app. We will respond in accordance with applicable data protection laws. In some cases we may need to verify your identity as part of the process, to protect the security of your personal information.

12. United States privacy rights

For residents of the United States the following provisions apply. The California Consumer Privacy Act provides residents of California with specific rights regarding their personal information, in addition to those described above.

Right to know

You may request that we disclose what personal information we have collected, used, shared or sold about you, and why. Specifically, you may request:

• The categories of personal information collected
• The specific pieces of personal information collected
• The categories of sources from which the information was collected
• The purposes for which the information is used
• The categories of third parties with whom the information is shared
• The categories of information that are sold or disclosed to third parties

Right to delete, correct and limit

You may request that we delete personal information we have collected about you, ask us to correct inaccurate information we hold about you, and request that we use sensitive personal information only for limited purposes, such as providing the services you requested.

Right to opt out, and to non-discrimination

Sensitive and biometric data

We only process sensitive personal data with your prior consent, and only for specific purposes disclosed clearly at the time of collection. You may withdraw your consent at any time by contacting us at support@savornova.app.

Submitting a request, and appeals

Submit your request by email to support@savornova.app. We will compare the information you provide with the information in our records in order to verify your request, and will then respond in accordance with the applicable requirements. To appeal a decision, contact us within 60 days of receiving our response, including your original request, the date of our response, and a brief explanation of why you believe the decision was incorrect.

13. Direct marketing

Eskro Technologies Inc. may use your personal information to send you marketing communications about our products, services and promotions. Our direct marketing practices comply with applicable data protection laws, including the GDPR and the ePrivacy Directive.

• Opt-in consent: where required by law, we will obtain your explicit opt-in consent before sending you direct marketing communications.
• Unsubscribe: every marketing communication we send includes clear instructions for opting out of future marketing. You may opt out at any time, and we will act on that request promptly.

14. Changes to this policy

We may update this policy as the service develops, as the providers we rely on change, or as the law requires. The date shown at the top of this page is the date of the most recent revision, and it is the quickest way to tell whether anything has changed since you last read it.

Where a change materially affects how we handle personal information, we will tell account holders by email at the address held on the account, rather than relying on the revised date alone. Changes take effect when the revised policy is published on this page.

15. Contact us

If you have questions about this policy or about how your personal information is handled, use the contact page. It is the route to us for any privacy request, and reaches the same place as support@savornova.app.

1. These terms

These Terms of Service are an agreement between you and Eskro Technologies Inc., the company behind SavorNova. They apply when you create a SavorNova account, use the service to build and publish a menu, or view a menu published through it. By using SavorNova you accept these terms; if you do not accept them, do not use the service.

If you are accepting these terms on behalf of a restaurant or company, you confirm that you are authorised to bind it, and 'you' means that business.

2. What SavorNova does

SavorNova lets a restaurant build a menu, upload photographs and short videos of its dishes, publish that menu to a public web address, and put a QR code on its tables that opens it. It also reports how the published menu is being used, in the anonymous form described in the Privacy Policy.

We may add, change or remove features as the product develops. Where a change removes something you rely on, we will give you reasonable notice.

3. Your account

Signing in to SavorNova is done with a Google account, and that is the only sign-in method. We do not issue passwords, so keeping your Google account secure is what keeps your SavorNova account secure.

You are responsible for everything done through your account. Tell us promptly if you believe someone else has gained access to it. You must be old enough to enter a contract in your country to hold an account.

4. Your content stays yours

Your menu text, prices, photographs and videos remain yours. We claim no ownership of them.

You confirm that you have the right to use what you upload — including photographs and video taken by someone else — and that publishing it through SavorNova does not infringe anyone's rights. You are responsible for the accuracy of your menu, including prices and any allergen or dietary information you choose to show.

5. Acceptable use

When using SavorNova you agree not to:

• Upload content that is unlawful, misleading, or infringes someone else's rights.
• Publish a menu for a business you are not authorised to represent.
• Attempt to gain access to another restaurant's account, content or reporting.
• Interfere with the service, probe it for vulnerabilities, or place an unreasonable load on it.
• Use the service to collect personal information about the guests who view a menu.

6. Plans, billing and cancellation

Paid plans are billed in advance for the period shown when you subscribe. The current price, billing period and any trial are the ones presented to you at the point of purchase, and they are what apply — this page does not set them.

Payments are processed by Stripe. We do not receive or store your full card details.

Payments are not refundable

Rolling plans

On a rolling plan you can cancel at any time from your billing settings. Cancelling stops the next renewal — it does not end the period you have already paid for, and your menu keeps working normally until that period ends. Nothing is refunded for the remainder of it.

Fixed-term agreements

Some plans run for a fixed term agreed at the outset — for example six or twelve months — rather than month to month. Where you have agreed a fixed term, you are committed to it for its whole length.

You may stop using the service at any time, but doing so before the end of a fixed term does not end the agreement and does not entitle you to money back. Amounts already paid for the term are not refunded, and amounts still to be paid for the remainder of the term remain due. The term is the commitment; ending your use of the service early does not shorten it.

The length of any fixed term, and the price for it, are the ones presented to you when you agreed to it. If a fixed term is not stated, your plan is a rolling one and the paragraph above applies instead.

Failed payments

If a payment fails we may suspend publishing until it is resolved. We will tell you before that happens. Suspension for non-payment does not reduce what is owed under a fixed term.

Nothing in this section removes a right you have under the law of your own country that cannot be given up by agreement.

7. Availability

We work to keep SavorNova available and your published menus reachable, but we do not promise uninterrupted service. Maintenance, third-party outages and faults happen. We do not offer a service level agreement or an uptime guarantee, and we will not be liable for a menu being temporarily unavailable.

8. Suspension and ending the agreement

You may stop using SavorNova and close your account at any time. When you do, your menu stops being published and your content is deleted as described in the Privacy Policy. Closing your account does not by itself end a fixed term you have agreed or refund what you have paid — see plans, billing and cancellation above.

We may suspend or end an account that breaches these terms, that is being used unlawfully, or where required by law. Except where a breach is serious or urgent, we will tell you first and give you a chance to put it right.

Deleting media is permanent and cannot be undone — we keep no backup copy of a deleted file. Export or keep your own copy of anything you want to retain before you delete it or close your account.

9. Disclaimers and liability

The service is provided as it is and as available. To the fullest extent the law allows, we exclude implied warranties, including that the service will be uninterrupted, error free, or fit for a particular purpose. Nothing in these terms limits liability that cannot lawfully be limited, including for death or personal injury caused by negligence, or for fraud.

To the fullest extent the law allows, neither party is liable for indirect or consequential loss, or for lost profits, revenue or goodwill. Our total liability arising out of these terms is limited to the amount you paid us for the service in the twelve months before the claim arose.

You agree to cover us against claims brought by a third party arising from content you published through SavorNova, or from your breach of these terms.

10. Changes to these terms

We may update these terms as the service develops or as the law requires. The date shown at the top of this document is the date of the most recent revision. Where a change materially affects your rights or obligations, we will tell account holders by email at the address held on the account before it takes effect. Continuing to use SavorNova after that date means you accept the revised terms.

11. Governing law

These terms are governed by the laws of the Province of Ontario, Canada, and the courts of that jurisdiction have exclusive jurisdiction over any dispute, except that either party may seek injunctive relief wherever appropriate. If any provision of these terms is found unenforceable, the rest continues to apply.

12. Contact

Questions about these terms go to the same place as everything else — use the contact page, which reaches support@savornova.app.