Privacy policy

Last updated 29 September 2026

What Tably collects, why, and who else handles it. Tably is run by Khoa Dinh, who you can reach at khoadinh.work@gmail.com.

What we collect

  • Owner accounts: full name, email and password. Passwords are stored only as a bcrypt hash, never as you typed them.
  • Staff accounts: the name, email and password an owner sets for each staff member.
  • Business data: menu, prices, tables, orders, bookings, settings, the logo and dish photos. Bookings hold the guest name and phone number staff enter.
  • Guests at a table: no account and no personal details. Orders and requests such as “call staff” are tied to the table, not to a person.
  • Messages: the name, email and message you send with a contact form.
  • Usage: anonymous page-view counts from Vercel Analytics, which uses no cookies.

Why we use it

  • To sign you in and run your business's tables, orders and bookings.
  • To email the site owner about new sign-ups and contact messages, so they can reply.
  • To see which pages are used and improve them.

We don't sell your data or use it for advertising.

Who else handles it

  • Vercel hosts the website, its analytics and, unless you connect your own, image storage.
  • Pusher delivers live updates, such as a new order reaching the staff screens.
  • Resend delivers the sign-up and contact-form emails.
  • If an owner connects their own database, Pusher app or image storage, that business's data is kept there instead.

How long we keep it

Account and business data are kept while the account exists. Contact messages stay in the site owner's inbox. The shared demo account can be reset at any time.

Your choices

To see, correct or delete your data, or to close your account, email khoadinh.work@gmail.com. Owners can edit or remove their staff accounts in the Staff tab. For what's stored in your browser, see the cookie policy.