Privacy policy

Draft pending legal review. It describes what the system actually does today.

Who is responsible for what

Room Butler is a product of The Waiter Button. Two different relationships run through it.

• For a guest ordering room service, the hotel decides what is collected and why. The hotel is the data controller; we process it on their instructions. If you are a guest and want your data removed, ask the hotel and they will ask us.
• For a hotel's own account — the people who sign in, billing details, the property's configuration — we are the controller.

What a guest gives us

Ordering does not require an account, a name, or an email address. A guest who orders anonymously gives us their order and nothing else.

• The order itself: items, choices, any note to the kitchen, the total, and which room or table it goes to.
• A session identifier, stored as a cookie on the device, so the guest can close the browser and still see their order. It is random and connects to no person.
• A name and email address, only if the guest asks for a receipt. This is optional, offered after ordering, and never required to place one.
• A rating and comment, only if the guest leaves feedback.

We do not collect a guest's location, contacts, or browsing outside the ordering pages, and there is no advertising or analytics tracking on the guest app.

What a hotel gives us

The name and email address of each person who signs in, the property's configuration, its menu, and its billing details. Payment card details are handled by Stripe and never reach our servers.

How long it is kept

• Orders are kept for the hotel's own records and reporting.
• Guest sessions expire and are cleared automatically.
• A guest's name and email, where given for a receipt, are attached to that order and kept with it.
• Prospect records used for our own outreach are deleted once the conversation ends. An unsubscribe is kept permanently, because that is the only way an opt-out can be honoured forever.

Where it is processed

Data is stored in Supabase within the European Union. Email is delivered by our mail provider, and payments by Stripe. Menu translation, when a hotel enables it, sends the menu text — never a guest's data — to a language model provider.

Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Guests should ask the hotel; hotels can ask us directly. We will respond within one month.

Contact

Write to privacy@thewaiterbutton.com.