Aplateful logoAplateful
Security & data handling

Guest trust is not decoration.

Aplateful holds reservation records, dietary and health-related preferences and past orders. That means we hold personal data. Here is exactly how we treat it.

What is stored

  • Reservation details: name, party size, contact channel, notes
  • Dietary and allergy information marked at the highest priority
  • Course orders, pairing choices, pacing notes
  • Staff usage logs, per session, tied to individual accounts

Encryption

  • TLS in transit for every request between our services and yours
  • AES-256 at rest for guest records and health-related preferences
  • Keys rotated on a scheduled cadence, with break-glass access logged

Retention

  • Reservation records held while the guest is active with your restaurant
  • Inactive records purged on your configured retention window
  • Guest-initiated erasure requests actioned within a working week

Compliance posture

We are an early-stage service. We do not claim certifications we do not currently hold. What we do commit to: sensible defaults, clear retention, honest disclosure and a direct line to us for any incident. If your operations team needs specific evidence, write to us and we will share what is real, not marketing.