LAST UPDATED · 15 OCTOBER 2026

Privacy, considered.

This notice explains how we handle information when you visit Aivano, create a restaurant workspace or use a restaurant menu powered by Aivano.

Restaurant accounts

We collect your account email, restaurant details, contact information, menu content, photographs and service communications to create and operate your website and workspace. Public contact fields and menu photographs appear on your restaurant website when you publish it. Login emails and private onboarding notes are not published.

Guest orders

Guests can order without an account. An order records the selected table, dishes, quantities, notes, timestamps and status. The restaurant receives this information to fulfil the order. Please discuss allergies with staff and avoid including sensitive personal information in order notes. We use hashed network identifiers to limit abusive submissions; those identifiers are not published.

Payments and service messages

Stripe processes payments for Aivano’s setup and monthly service. We retain payment references and subscription status, rather than complete card details. Guest meal payments are handled directly by the restaurant. We send essential account, security, payment and service messages; creating an account does not subscribe you to marketing emails.

Providers and international processing

We use Supabase for authentication, databases and image storage, Vercel for hosting, Stripe for subscription payments and Resend for transactional email. Our website also loads fonts from Google Fonts. These providers may process information in countries other than yours, including the United States. We use applicable contractual safeguards where required. Google review links open Google, whose own terms and privacy notice apply.

Why we process information

We use information to deliver the requested service, manage billing, protect accounts, prevent abuse, provide support and meet applicable obligations. Where applicable, the grounds are performance of our agreement, legal obligations, consent where requested and legitimate interests in operating a secure service. Restaurants determine how guest orders are used in their own operations; we process those orders to provide the platform.

Browser storage and security

A restaurant registration draft is kept in the current browser session until it is saved. Essential browser storage supports sign-in, duplicate-order prevention and access to order status. A guest’s saved order reference is used for up to 12 hours by the interface and can be cleared in browser settings. The demonstration workspace stores sample content in your browser and can be cleared using “Reset demo.” The website does not include marketing tracking. We use access controls and technical safeguards, but no internet service can promise absolute security.

Retention and your choices

We retain information for the service and for legitimate support, security, accounting and legal needs. Cancellation does not immediately erase all records. You may request access, correction, an export or deletion using the contact below; we may need to verify ownership and retain information where required. Where applicable, you can object to processing, withdraw consent and complain to your local data protection authority. We do not sell personal information.

Updates and contact

We may update this notice as the service changes and will identify the current date above. For privacy requests, use the operator’s contact below.