Legal
Privacy policy
What we collect when you use 4Resto, why, who helps us run it, and what you can do about it.
Last updated: 2026-10-15
1. Who we are
4Resto is operated by PorteVin OÜ, an Estonian company. We are the controller of the personal data described here when you use the 4Resto website and apps.
Questions or requests about your data: info@4resto.ee.
2. What we collect
- Account: your email address, used to send the sign-in code. There is no password.
- Bookings: the restaurant, date, time, party size, your name and phone number if you give them, and any note you add.
- Notifications: a device push token, if you allow notifications in the app, and your language choice.
- Restaurants: the organisation's details, staff email addresses and the plan chosen. Card details are handled by Stripe and never reach us.
- Usage: a few product events (a restaurant viewed, availability viewed, a booking started) sent to PostHog, hosted in the EU. No automatic click capture and no session recording.
- Technical: your IP address and device or browser details in server logs, rate limiting and error reports (Sentry), to keep the service secure and working.
3. Why we use it, and on what basis
- To run your bookings, send confirmations and the reminder before you go: performance of the contract with you (GDPR Art. 6(1)(b)).
- To pass your booking to the restaurant you chose: performance of the contract.
- To keep the service secure, prevent abuse and fix errors: our legitimate interest (Art. 6(1)(f)).
- To understand how the product is used and improve it: our legitimate interest, with the limited events above and no advertising use.
- To keep subscription and accounting records for restaurants: a legal obligation (Art. 6(1)(c)).
5. Transfers outside the EEA
Some processors may handle data outside the European Economic Area. Where they do, the transfer relies on an adequacy decision or on the EU Standard Contractual Clauses.
6. How long we keep it
- Your account and bookings: until you delete your account. Deleting it erases your personal data, cancels your future bookings and tells the restaurants concerned.
- Server logs and error reports: a short period, only as long as needed to run and secure the service.
- Invoices and subscription records: as long as accounting law requires.
7. Your rights
You can ask for access to your data, correction, erasure, restriction, a portable copy, and object to processing based on our legitimate interest. In the app you can do the two most common things yourself: "Download my data" and "Delete account" (Profile, then Privacy).
For anything else write to info@4resto.ee; we answer within one month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the authority in your own country.
8. Children
4Resto is not aimed at children under 16, and we do not knowingly collect their data.
9. Changes
When this policy changes in a way that matters to you, we update the date at the top and, for a significant change, tell you in the app or by email.