REZTO Privacy Policy

Effective Date: October 2026

At REZTO, your privacy is a top priority. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, mobile application, or any related services (collectively, the "Platform").

By accessing or using REZTO, you consent to the practices described in this policy.

1. Who We Are

REZTO is a digital platform that enables users to discover and book reservations at restaurants and helps restaurants manage bookings and customer interactions.

Data Controller:
LTD REZTO
Address: Pekini Avenue N33/6B, Saburtalo district, Tbilisi Georgia
Email: info@rezto.ge

2. What Data We Collect

A. For Users (Customers):

  • Name
  • Email address
  • Phone number
  • Reservation details (e.g., date, time, party size)
  • Device and browser information
  • Location data (optional and with permission)

B. For Restaurants (Partners):

  • Business name and contact details
  • Owner/manager contact information
  • Billing details (e.g., VAT ID, payment method)
  • Menu, photos, and other listing content
  • Booking history and customer interactions

C. Bookings made through AI assistants (for example ChatGPT):

When you ask an AI assistant to book a table with Rezto, we receive only what the booking needs: your name, phone number, email address (when you give one), the restaurant, date, time and party size, any request you ask the assistant to pass on to the restaurant (for example a birthday), and the status of the booking. We do not receive your conversation with the assistant, your account details with the assistant's provider, your location, or any payment card details. The assistant's provider processes your conversation under its own privacy policy. Choosing dishes and paying for a menu pre-order happens on the Rezto website, never inside the assistant. To see, correct or delete this data, email info@rezto.ge.

3. How We Use Your Information

  • Facilitate restaurant reservations
  • Send confirmations, reminders, and updates
  • Provide customer support
  • Prevent abuse of the booking service, for example by limiting how many requests one phone number can send
  • Manage user accounts and restaurant profiles
  • Analyze usage to improve the Platform
  • Comply with legal and regulatory obligations

4. Legal Basis for Processing (Under GDPR)

  • Consent: When you voluntarily provide data (e.g., signing up for newsletters).
  • Contract: To fulfill our obligations when you book or register with us.
  • Legal obligation: For tax, fraud prevention, or compliance reasons.
  • Legitimate interests: To operate and improve our services efficiently and securely.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

  • Restaurants: Relevant booking information is shared with the restaurant you book.
  • Service Providers: Payment processors, hosting services, SMS/email providers (bound by confidentiality).
  • Legal Authorities: If required by law or to protect our rights or users.

6. Cookies and Tracking Technologies

  • Remember your preferences
  • Analyze traffic and performance
  • Deliver personalized content

You can manage or disable cookies in your browser settings.

We use Microsoft Clarity to better understand how users interact with our Platform. Clarity provides insights such as heatmaps, session recordings, and behavioral metrics. This data helps us improve usability and performance.

Clarity may collect information such as:

  • Clicks and scrolling behavior
  • Device and browser type
  • Pages visited and time spent
  • User interactions (non-sensitive)

All data collected is anonymized where appropriate and handled securely. For more information, see Microsoft’s Privacy Statement.

7. Data Retention

  • Fulfill the purpose it was collected for
  • Comply with legal and contractual obligations
  • Resolve disputes and enforce agreements

Inactive user accounts may be anonymized or deleted after a specified period.

8. Data Security

  • Unauthorized access
  • Accidental loss or destruction
  • Breach or misuse

Data is transmitted over secure connections and stored in secure environments.

9. Your Rights

  • Access your data
  • Correct inaccurate or incomplete data
  • Delete your personal data ("right to be forgotten")
  • Restrict or object to processing
  • Withdraw consent at any time

10. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with the updated effective date. We recommend reviewing it regularly.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact:
Email: info@rezto.ge