This Privacy Policy explains what personal data we collect through Gostico (gostico.com and the admin panels it provides to restaurants, "Tenants"), why we collect it, and what rights you have over it.
1. Who we are
Gostico is operated by Sabotronic, a company registered in Serbia at [registered business address] ("Sabotronic", "we", "us"). You can reach us at hello@sabotronic.eu.
2. Two kinds of data we handle
We play two different roles depending on whose data is involved, and it matters for your rights:
- Tenant account data (restaurant name, owner email, admin username, login credentials, menu content you enter): here we are the data controller - we decide why and how this data is processed, and this policy governs it directly.
- Guest-facing data generated when a diner uses a Tenant's menu - a waiter call, a feedback rating/comment, the table number and IP address attached to either: here the Tenant is the data controller and we are only a data processor, storing this data on the Tenant's behalf. If you're a restaurant guest with a question about this data, please contact the restaurant directly, not us.
3. What we collect (Tenant accounts)
- Account information: restaurant name, owner/contact email, admin username, password (stored hashed, never in plain text), chosen menu languages and currencies.
- Menu content: section, category, and item names/descriptions/prices/photos you upload.
- Usage data: login timestamps, IP address at signup, and - only if you accept analytics cookies - aggregate site-usage data via Google Analytics (see our Cookie Policy).
- Support messages: anything you send us through the admin panel's Support page.
4. Why we process it
- To provide the service you signed up for (performance of a contract) - hosting your menu, running your admin panel, sending account-verification and support-related emails.
- To keep the platform secure and prevent abuse (legitimate interest) - rate-limiting, fraud/spam prevention on guest-facing endpoints.
- With your consent - analytics cookies, and any marketing email you've separately opted into.
5. Who we share it with
We don't sell personal data. We share it only with service providers who help us run the platform, under agreements that limit their use of it to that purpose:
- Our hosting/infrastructure provider ([hosting provider name]).
- Google Analytics, only for visitors who accept analytics cookies on this marketing site - see our Cookie Policy.
- Email delivery, to send account-verification and transactional emails.
6. How long we keep it
Tenant account and menu data is kept for as long as your account is active, and for a reasonable period after deletion in case you wish to restore it, unless you ask us to delete it sooner. Guest-facing data (waiter calls, feedback) is retained per the Tenant's own settings and deleted automatically when a Tenant account is deleted.
7. Your rights
If you're in the EU/EEA, UK, or another jurisdiction with similar protections, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Tenant account holders can update most of this directly in Settings; for anything else, or if you're a guest with a request about a specific restaurant's data, email hello@sabotronic.eu.
8. Cookies
See our separate Cookie Policy for what cookies we use, including the ones required just to keep you logged in, and the analytics ones that only load after you consent.
9. Children's privacy
Gostico's admin panel is intended for restaurant staff and owners, not children. We don't knowingly collect personal data from children through the admin panel.
10. Changes to this policy
We'll update the date at the top of this page whenever we make a material change, and where required, notify Tenants directly.
11. Contact
Questions about this policy? Email hello@sabotronic.eu.