Data processing agreement
Last updated 29 August 2026.
Roles
DinnerBoost is a service of „ПИМАКС“ ООД, EIK 131347509, 17 Washburn St., Poduyane, Sofia 1000, Bulgaria. The restaurant is the controller for guest, reservation and staff data it processes through DinnerBoost. DinnerBoost is the processor and acts only on the restaurant's documented instructions, which are the product features it uses.
Subject matter and duration
Processing covers QR menu delivery, order taking, waiter and kitchen workflow, reservations and waitlist, guest feedback and aggregate analytics. It lasts for the duration of the subscription.
Categories of data
Order contents and notes, table and session identifiers, optional guest ratings and comments, reservation names and phone numbers entered by staff, and staff account data (email, display name, role, activity timestamps). No payment card data is processed by DinnerBoost. Special category data is not requested and the product has no field for it, but free-text fields such as allergy, order or reservation notes may unexpectedly contain it; the restaurant should avoid entering such data and instruct staff accordingly.
Sub-processors
Supabase (database, authentication, storage — Frankfurt, eu-central-1) and Lovable (application hosting and the AI gateway used for menu extraction and translation), plus the other providers we contract with for running and billing the service. We use each provider on its current data processing terms and notify restaurants before adding a new sub-processor. The complete, current list is on the sub-processors page.
Security
Encryption in transit, row-level security scoping every table to one restaurant, role-based staff access, signed and expiring table sessions, hashed invite tokens and an append-only audit log of operator changes.
Assistance and deletion
We assist with data subject requests, breach notification and impact assessments. On termination the restaurant may export its data and may ask us to delete it; deletion is carried out without undue delay from the production systems, and backup copies are removed as those backups expire in the normal rotation.
Signing
Using DinnerBoost accepts these terms. If your legal team needs a separately signed copy, write to support@dinnerboost.com and we will discuss what is possible.