Privacy policy
This policy explains how Fortavola ("Fortavola", "we", "us") collects, uses and protects information when you use the Fortavola restaurant back office service, including app.fortavola.com, admin.fortavola.com and api.fortavola.com (together, the "Service"). Questions go to info@fortavola.com.
Who this covers
Fortavola is used by businesses ("Customers") and the people they invite ("Users"). A Customer controls the business data in its account. We process that data on the Customer's behalf to provide the Service.
Information we collect
- Account information: name, email address, and sign-in details. If you sign in with Google, we receive your name, email address and a Google account identifier. Passwords are stored only as one-way hashes.
- Business data: information a Customer enters or uploads, such as locations, vendors, items, prices, invoices and photos of invoices, recipes, inventory counts and related records.
- Connected service data: when a Customer connects a service such as QuickBooks Online or Toast, we receive the data needed for the features they use, such as accounting records (vendors, accounts, bills) or sales, labor and menu data.
- Usage and technical data: server logs with IP address, browser type, request times and errors, used to run, secure and fix the Service.
How we use information
- To provide the Service: sign-in, access control, the features a Customer uses, and the email messages the Service sends (such as invites and password resets).
- To keep the Service secure, prevent abuse, and investigate problems.
- To improve the Service and support Customers.
We do not sell personal information, and we do not use business data or connected service data for advertising.
QuickBooks and other connected services
Data we receive from Intuit QuickBooks Online and other connected services is used only to provide the features the Customer has turned on, such as sending approved invoices to QuickBooks as bills or importing food cost. We do not sell it, share it with other Customers, or use it for any other purpose. Access tokens are stored encrypted. A Customer can disconnect a service at any time from Integrations in the admin app or from within that service, and we then stop accessing it.
AI processing
Some features use AI models, for example to read invoice lines from a photo or to draft a recipe. For those features the relevant content is sent to an AI model provider to produce the result. Results can contain mistakes and should be reviewed.
Service providers
We use trusted providers to run the Service, and they process information only on our instructions: Google Cloud (hosting and sign-in with Google), Neon (database), Cloudflare (web hosting and file storage), Resend (email delivery) and OpenRouter (access to AI models). We may also disclose information if required by law, or to protect the rights and safety of our Customers, Users or the public.
Security
Traffic to the Service is encrypted in transit. Credentials for connected services are encrypted before they are stored. Access inside an account is limited by the roles and permissions its owners set, and changes to access are recorded in an audit log. No system is perfectly secure, but we work to protect your information.
Cookies
The Service uses cookies only to keep you signed in and to protect against cross-site request forgery. We do not use advertising or tracking cookies.
Retention
We keep business data for as long as the Customer's account is active, and delete or return it after the account is closed, except where we must keep it longer by law. Backups are kept for a limited period and then deleted.
Your choices and rights
You can ask to see, correct or delete your personal information by writing to info@fortavola.com. If your information is part of a Customer's account, we may direct your request to that Customer.
Children
The Service is for businesses and is not directed to children under 16.
Changes
We may update this policy. If the changes are significant, we will notify Customers before they take effect. The effective date above shows when it last changed.
Contact
Fortavola, info@fortavola.com