When you book: your name, phone number, optional email, party size, date and time, and any notes you add. When a venue signs up: account and venue details. When you write to us: your message and contact details. We also keep short-lived technical logs (IP address, errors) to keep the service working and fight abuse.
To pass your booking to the venue, send confirmations and reminders by SMS or email, ask for your opinion after a visit, respond to messages, and protect the platform (rate limiting, fraud prevention). We do not sell personal data and we do not use it for third-party advertising.
The venue you book, so it can host you. Service providers acting for us: SMS gateways, email delivery, and Stripe for deposits. Venue content on listing pages (menus, photos, ratings) may come from partner platforms; your booking details are not shared with them.
We use a small number of first-party cookies for signing in, your language and appearance preferences. Page-view counters for venues are collected by us, without third-party trackers or advertising cookies.
Bookings are kept as part of the venue's reservation history; logs are short-lived. You can ask us to delete data we no longer need to keep.
Under the GDPR you may ask for access to, correction of, or deletion of your personal data, and object to or restrict certain processing. Reach us through the contact page and we will respond promptly. You may also complain to your data-protection authority.
Traffic is encrypted (HTTPS) and access to personal data is restricted to what operating the service requires. The service is not directed at children under 16.
You can connect an AI app to your Table12 login: diners to manage their own reservations, venue owners and managers to run their venues. You approve the connection when you sign in, and you can withdraw it at any time (Settings, Connected apps; or AI assistants in the venue dashboard), which signs the app out at once.
We receive the requests the app makes (what it asks for, such as a date or a booking number), never your conversation with it. We return only what your login may see, and guests' phone numbers and email addresses only when a request asks for them. Each request an assistant makes for a venue is recorded with the person, the app's name, the booking it concerned and what changed, without guests' phone numbers or email addresses; the venue's team sees this record in its dashboard, and we delete it after 400 days. It is not used for advertising and not sold.
The app's provider (for example Anthropic or OpenAI) receives what its app sends and gets back, under its own privacy policy. Finding a restaurant and a free table through the diners' connector needs no sign-in; seeing or making a reservation asks you to sign in first. How to connect: table12.com/ai.
We may update this policy; the date above shows the current version. Significant changes will be announced on the site.