1. Who we are and what this covers
TableTech360 is run by INSTOREREVIEWS DIGITAL MARKETING SERVICES ("we"). This policy explains how we handle personal data under the Philippine Data Privacy Act of 2012 (RA 10173) on this website, in our app at app.tabletech360.com, on the guest pages our QR codes open, and on the websites we host for businesses.
2. Our two roles
- For the businesses that subscribe and the people they invite to the app, we decide how data is used: we are the personal information controller.
- For guests who answer a business's QR question, and for that business's records of staff responding to alerts, the business is the controller and we process the data on its behalf. If you are a guest or staff member, you can contact that business or us about your data.
3. Businesses and their team members
We collect:
- your name, email address, phone number and profile photo;
- your password, stored only as a secure one-way hash;
- the business name, address, phone number and Google listing details you give us;
- the delivery name, phone number and address for your printed QR inserts;
- billing records: plan, amounts, dates and the payment processor's references (never your full card number);
- messages you send us, and your settings and content in the app;
- which pages of the app you open, your browser and device type, and your IP address;
- voice recordings, if you use dictation — sent to be transcribed and not kept by us.
We use this to provide the Service under our contract with you, to bill you and keep tax records as the law requires, and, in our legitimate interest, to keep the Service secure and improve it. If you start registering and do not finish, we keep your name and email so you can continue later.
4. Guests (for the business you visit)
When you scan a business's QR code, we record:
- the time, and which table or area's code you scanned;
- your Yes or No answer, and that you agreed to the guest notice;
- which parts of the page you open and which links you tap, including review or social sites;
- your answers to the business's optional survey, including anything you type.
We set one cookie, isr_scan, which lasts 2 hours and links your answer to your scan. We use your IP address briefly, in scrambled form, to stop automated misuse; it also appears in our server logs. We do not ask for your name, email address or phone number — please do not type them into a survey unless the business asks and tells you why. A "No" answer alerts the business's staff to your table so they can help while you are there.
5. Staff responding to alerts (for the business they work for)
When a guest answers No, we record which staff members were alerted, who accepted, declined or resolved the alert and when, and their note and outcome. The business sees these as response times and counts for each person. We store each staff member's device token so alerts reach their phone, and the "Accepted" notification shows the name of the person who accepted.
6. Website visitors and cookies
- This website sets no tracking or advertising cookies. It uses your IP address to show prices for your country and loads fonts from Google.
- On the websites we host for businesses we store nothing about visitors. Those pages load Google Fonts and may show a Google map, which can set Google's own cookies.
- The app stores your sign-in session and preferences in your browser.
- We do not use advertising cookies or third-party analytics.
7. Who receives personal data
We share personal data only with the business you interact with (sections 4 and 5) and with these service providers, each under its own data-protection terms. We do not sell personal data. We may disclose it when the law requires, or to defend a legal claim.
| Provider | What for | Where |
|---|---|---|
| DigitalOcean | Hosting, database and file storage | United States |
| Mailgun | Sending email | United States |
| Google (Firebase Cloud Messaging) | Delivering alerts to staff phones | Global |
| Google (Maps, Places, Fonts, Firebase Hosting) | Finding your business listing; maps and fonts; hosting this website | Global |
| OpenAI | AI image tools, text drafting, dictation and photo safety checks | United States |
| Cloudflare | Serving the websites we host for businesses; checking passwords against known breaches | Global |
| PayPal | Processing payments | Global |
| Sentry | Error monitoring, with request details removed | Global |
Our main servers are in the United States, so most personal data is transferred there and to the providers above.
8. How long we keep data
- Account data and content: while you are a customer. After your last subscription ends we keep it so you can come back, and delete or anonymise it when you ask, except the records below.
- Billing and tax records: as long as Philippine tax law requires.
- Guest and staff records: kept for the business while it is a customer, and deleted when the business asks.
- Server logs, which include IP addresses: only as long as needed to run and secure the Service.
9. Security
Data is encrypted in transit (HTTPS). Passwords and access tokens are stored as secure hashes, and new passwords are checked against known breaches. Access to customer and guest data in the app depends on each person's role, and changes made by our staff are recorded. No system is perfectly secure. If a breach is likely to cause you serious harm, we will notify you and the National Privacy Commission within 72 hours of becoming aware of it; for data we process for a business, we notify that business promptly.
10. Your rights
You have the right to be informed; to see the data we hold about you and have it corrected; to object to processing or have data erased or blocked; to receive your data in a portable format; and to complain to the National Privacy Commission (privacy.gov.ph).
To use these rights, email info@instorereviews.com from the address on your account — or, if you were a guest, tell us which business you visited and roughly when. We may ask you to confirm your identity. We reply within 15 days and complete requests within 30 days. We must keep billing and tax records, and records needed for an open dispute, even after a deletion request. For guest and staff data, we act together with the business that controls it.
11. AI features
When you use AI features, we send the photo, text or voice recording you provide to OpenAI to produce the result. Photos may show people, so only upload photos you have permission to use. We do not use your content to train AI models, and we do not make decisions about people by automated means.
12. Emails
We send service emails: sign-in codes, account notices, alerts and payment notices. We do not send marketing emails. If we start, we will ask you first and include an unsubscribe link in each one.
13. Children
The Service is for businesses and is not directed at children. Guest pages do not ask for anyone's identity.
14. Changes to this policy
We post changes here with a new date. If a change materially affects you, we email you at least 30 days before it takes effect.
15. Contact us and our Data Protection Officer
Write to our Data Protection Officer at info@instorereviews.com or at the address below.
INSTOREREVIEWS DIGITAL MARKETING SERVICES
Sole proprietorship registered with the Department of Trade and Industry, DTI Certificate No. 7345836
Lapu-Lapu City, Cebu 6015, Philippines
Email: info@instorereviews.com · Phone: +63 948 196 4567
