Privacy policy

Last updated: 2026-06-01

Who we are

Confota provides the Confota app and website for running restaurants: scheduling, time clock, tasks, inventory, invoices, recipes, food safety and reports. This policy explains what we collect and how we use it.

What we collect

Account details (name, email, password stored only as a secure hash). Restaurant data your team enters: staff names, positions, pay rates, PINs (hashed), schedules, clock-in times, tips, checklists, temperatures, invoices, sales, recipes and vendors. Photos you take, such as clock-in photos, task proof photos and invoice scans. Messages sent in Team chat. Website demo requests (name, email, phone, restaurant). Basic technical data such as device type and IP address for security.

How we use it

To run the features you use, keep your account secure, send emails you ask for (password resets, invites, reports, demo confirmations), process subscription payments, give support, and improve the app. Invoice photos and cancel-survey comments may be read by an AI service to fill in details or summarize feedback. We do not sell personal information and we do not show ads.

Who we share it with

Only service providers that help us run Confota: cloud hosting and database, file storage, email delivery, card payments (Stripe; we never see full card numbers), the AI service used for invoice reading, and point-of-sale systems you choose to connect. They may only use the data to provide their service to us. We may disclose data if the law requires it.

Who can see restaurant data

Each restaurant's data is visible only to its owner and the team members they invite, based on their role. Staff see their own pay and hours; managers and owners see the team's. Direct messages are visible only to the two people in them.

How long we keep it

We keep data while the account is active. When a staff member deletes their account, their login is erased right away; work records the restaurant needs (hours, tips) stay with the restaurant without a link to the login. When an owner deletes their account, the restaurant and all its data are erased 30 days later, unless the owner undoes it. Backups are overwritten within 30 more days.

Your choices and rights

You can see and update your details in the app, delete your account in More → Delete my account, and ask us for a copy of your data or to correct or erase it by writing to service@confota.com. Depending on where you live (for example California or the EU), you may have extra rights; we honor them.

Security

Data travels encrypted (HTTPS). Passwords and PINs are hashed. Access is limited by role, and repeated wrong passwords lock the account for a few minutes.

Children

Confota is for businesses. It is not meant for children under 13, and we don't knowingly collect their data. Restaurants that employ minors are responsible for following labor laws.

Changes and contact

If we change this policy we'll update the date above and tell owners about important changes. Questions: service@confota.com.