Privacy notice
Last updated 29 August 2026.
Who is responsible
DinnerBoost is a service of „ПИМАКС“ ООД, EIK 131347509, VAT ID BG131347509, 17 Washburn St., Poduyane, Sofia 1000, Bulgaria · +359 897 720 980 · support@dinnerboost.com. „ПИМАКС“ ООД is the controller for website visitors, operator accounts, sales enquiries and subscription/billing data, and a processor acting on the restaurant's instructions for the guest and staff operational data created inside the restaurant's workspace (orders, notes, reservations, feedback). For that operational data the restaurant is the controller.
Purposes and lawful bases
We process data to provide and secure the platform and to administer accounts (performance of a contract), to answer sales and support enquiries and to keep the service safe, prevent abuse and improve it (legitimate interests), to meet accounting, tax and other statutory duties (legal obligation), and — for optional product analytics stored on your device — only with your consent, which you can change or withdraw at any time through “Cookie settings”.
Guests
Guests order without creating an account. A scanned table opens a signed session bound to that table; we do not ask for a name, phone number or email to place an order. Orders, order notes and optional post-visit ratings are stored for the restaurant. Reservation and waitlist entries created by staff may contain a name and phone number supplied by the guest.
Staff
For staff we store an email address, a display name, a role and activity timestamps, so the restaurant can manage access and see who changed an order.
Analytics
Product analytics are event counters (menu scanned, item viewed, order submitted). They are not linked to a named person and are not shared with advertisers.
Payments
Paid subscriptions are processed by Stripe. Card details are entered on Stripe's own checkout and are never stored by DinnerBoost. We keep the invoicing data you enter (company name, VAT number, billing address, billing email), the Stripe customer and subscription identifiers, the plan and its status, and a record of the recurring payment consent given before checkout.
Where data lives
The application database, authentication and file storage are hosted in the European Union (Supabase, Frankfurt, eu-central-1), and access is restricted per restaurant with row-level security. Some providers listed on the service providers page (for example hosting edge networks, AI processing, email delivery and Stripe) may process data outside the EEA. Where that happens, the applicable transfer safeguards are those set out in the provider's current terms and privacy documentation, which we link on that page.
Recipients
Data is shared only with the service providers we use to run DinnerBoost — including Stripe for subscription checkout, recurring billing, invoices and payment-method management — and with authorities where the law requires it. The full list, with what each provider processes, is on the service providers page. See also the Stripe privacy policy. We do not sell personal data and do not use it for advertising.
Retention
Account and operational data is kept while the workspace exists and for as long as the restaurant asks us to keep it; invoicing and accounting records are kept for the statutory retention period under Bulgarian law; sales enquiries are kept while the enquiry is being handled and for a reasonable follow-up period; consent records are kept as evidence of the choice made.
Cookies and local storage
Strictly necessary storage keeps your table session, language and theme, and the signed-in operator session. Optional product analytics are event counters that run only after you accept them; you can change or withdraw that choice at any time using “Cookie settings” in the footer. We do not use advertising or cross-site tracking cookies of our own.
Your rights
You have the right of access, rectification, erasure, restriction of processing, objection to processing based on legitimate interests, data portability, and the right to withdraw consent at any time without affecting processing already carried out. Write to support@dinnerboost.com and we will respond within one month. You may also complain to the Bulgarian Commission for Personal Data Protection (CPDP, Sofia) or to the supervisory authority of your country. Where DinnerBoost acts as processor for a restaurant's workspace, we forward your request to that restaurant.
Back to DinnerBoost · Terms of service · Data processing agreement · Refund & cancellation