Privacy Policy

Last updated: June 27, 2026

Seatvia ("Seatvia", "we", "us", or "our") provides online booking software that lets restaurants and other businesses take reservations and appointments on their own websites. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have. We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Contents

  1. Who we are & scope
  2. Information we collect
  3. How we use information
  4. Consent
  5. How we share information
  6. Service providers
  7. International transfers
  8. Data retention
  9. How we protect information
  10. Your privacy rights
  11. Cookies & analytics
  12. Children
  13. Changes to this policy
  14. Contact us

1. Who we are & who this policy covers

Seatvia is operated as a sole proprietorship based in Ontario, Canada. This policy applies to:

When a guest books with a business that uses Seatvia, both that business and Seatvia handle the guest's information. This policy describes Seatvia's practices. Each business is responsible for its own use of the booking information it receives.

2. Information we collect

a) Business account information

When you create and manage a Seatvia account, we collect your name, email address, password (stored only in encrypted/hashed form), business name, business contact details (email, phone, address), hours, capacity, branding, and staff login details you create.

b) Booking information (guests)

When a guest books through a Seatvia-powered page, we collect the information they enter — typically name, email address, phone number, party size, date and time, the service or staff requested, and any notes or special requests they choose to provide.

c) Payment information

Subscription payments are processed by our payment processor, Stripe. Stripe collects and handles your card details directly; we do not see or store full card numbers. We receive limited billing information such as your subscription status and a payment-processor customer reference.

d) Communications

If you contact us for support or send us messages, we keep a record of that correspondence.

e) Information collected automatically

Like most online services, we automatically collect limited technical information such as IP address, browser and device type, pages viewed, and similar log data, and we use essential cookies needed to keep you signed in. See Cookies & analytics.

3. How we use information

We use personal information to:

Email & CASL. Booking confirmations, reminders and account/billing messages are sent to operate the service you signed up for. We send these in accordance with Canada's Anti-Spam Legislation (CASL). Any optional marketing emails will include an unsubscribe link, and you can opt out at any time.

We collect, use and disclose personal information with your consent, except where the law permits or requires otherwise. By creating an account, submitting a booking, or otherwise using the service, you consent to the practices described in this policy. You may withdraw your consent at any time (subject to legal or contractual restrictions and reasonable notice) by contacting us — though doing so may mean we can no longer provide some or all of the service.

5. How we share information

We do not sell personal information. We share it only as follows:

6. Service providers (sub-processors)

We rely on trusted third parties to operate the service. They are authorized to use personal information only to provide services to us:

ProviderPurpose
SupabaseDatabase, authentication and backend hosting
VercelWebsite & application hosting / content delivery
StripeSubscription payment processing
ResendSending transactional & account emails
Twilio (if enabled)Sending optional SMS notifications

7. International data transfers

Some of our service providers store or process information on servers located outside of Canada, including in the United States. As a result, your personal information may be processed in, and subject to the laws of, other countries, and may be accessible to courts, law enforcement and authorities in those jurisdictions. We take reasonable steps to ensure our providers protect personal information with safeguards comparable to those required under Canadian law.

8. Data retention

We keep personal information only as long as needed for the purposes described in this policy, to provide the service, and to meet legal, accounting or reporting requirements. Booking records are retained while an account is active and for a reasonable period afterward; account information is deleted or anonymized when no longer needed. You may request deletion as described below.

9. How we protect information

We use reasonable administrative, technical and physical safeguards to protect personal information, including encryption of data in transit (HTTPS/TLS), hashing of passwords, access controls and role-based permissions that limit each business to its own data, and reliance on PCI-DSS-compliant payment processing by Stripe. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Your privacy rights

Subject to applicable law, you have the right to:

Residents of Quebec (under Law 25), British Columbia and Alberta (under their respective Personal Information Protection Acts) may have additional rights, including data portability; we will honour those rights where they apply. To exercise any right, contact us using the details below. We may need to verify your identity, and guests may also contact the business they booked with.

11. Cookies & analytics

We use cookies and similar technologies that are strictly necessary to operate the service — for example, to keep you securely signed in. We do not use third-party advertising or cross-site tracking cookies. The public booking widget functions without requiring guests to sign in. You can control cookies through your browser settings, though disabling essential cookies may prevent you from logging in.

12. Children

Seatvia is a business tool and is not directed to children. We do not knowingly collect personal information from children. A guest's booking may include a child as part of a party size, but we do not knowingly collect a child's own contact details. If you believe a child has provided us personal information, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the service after changes take effect means you accept the updated policy.

14. Contact us

If you have questions, requests or concerns about this policy or your personal information, please contact our Privacy Officer: