Privacy policy

TableRise is software for private chefs and caterers to manage enquiries, quotes, invoices and events. It is operated by My Private Chef Limited, New Zealand (“we”). This policy explains what information TableRise handles, why, and the choices you have. We follow the New Zealand Privacy Act 2020.

Who this covers

• Chefs who create a TableRise account.
• Chefs' clients whose details a chef records, who send an enquiry through a chef's enquiry form, or who open a quote link. For this information the chef decides what is collected and how it is used; we store and process it on the chef's behalf.

What we collect

• Account details: your email address and password (stored only as a secure hash by our authentication provider).
• Business profile: business name, your name, contact details, website, service areas, currency, tax and invoicing details you enter.
• Business records: clients, enquiries, quotes, invoices, payment records, events, menus, tasks, notes and email history that you create or import.
• Enquiry form submissions: what a client types into a chef's enquiry form, such as name, email, phone, event details and dietary requirements.
• Subscription details: if you subscribe, your plan status and Stripe customer reference. Card details are handled by Stripe and never reach us.
• Technical information: sign-in cookies needed to keep you logged in, preferences stored in your browser (such as light or dark theme), and standard server logs.

Google user data

Connecting Google is optional. You choose whether to connect, and can disconnect at any time.

• Google Calendar (free/busy only): when you check a date, TableRise asks Google whether your calendar is busy on that date. We do not read event titles, descriptions, attendees or locations, and we do not store calendar events. We store only the connection itself (encrypted access tokens, the connected account email and calendar name).
• Gmail (read-only), where enabled: when you press “Load Gmail emails”, TableRise retrieves recent messages so you can choose one to turn into an enquiry. Messages are shown to you and not stored, except the details you choose to save as an enquiry. We never send, delete, label or change anything in your Gmail. Access tokens are stored encrypted.
• Gmail script (optional): if you set up the TableRise script in your own Google account, it sends new emails from your inbox to TableRise so you can review them. These emails are visible only to you. Each time the script sends new emails, any received more than 90 days earlier are deleted, and only the latest 500 are kept. If the script stops sending, older emails stay until you turn it off. Turning the script off in Settings deletes all of them.
• Xero (read-only), where enabled: TableRise reads the sales invoices, contacts, profit and loss report and financial year settings of the Xero organisation you connect. When you link a Xero invoice to a booking, we store that invoice's number, reference, contact name, status, dates and amounts (total, tax, paid and due) so the booking can show them. We never create, change or delete anything in your Xero. Access tokens are stored encrypted, and disconnecting Xero in Settings removes them.

TableRise's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is used only to provide the features described above; it is not sold, not used for advertising, not used to train AI models, and not read by people except with your permission, for security or abuse investigations, or where the law requires.

When you disconnect Google Calendar or Gmail in Settings, we delete the stored tokens and ask Google to remove TableRise's access. Gmail and Calendar share one Google permission for the same Google account. If the other one is still connected to that account, we keep that permission so it keeps working, and Google access is removed when you disconnect both. If Google can't be reached at that moment, the tokens are still deleted on our side. You can always check and remove TableRise's access yourself in your Google Account permissions.

How we use information

• To run TableRise for you: store your records, show them to you, prepare drafts and documents, and send enquiry notifications to your business email.
• To keep the service secure, prevent abuse and fix problems.
• To manage your subscription, if you have one.
• To contact you about your account or important changes.

We do not sell personal information and do not use it for advertising.

Who we share it with

Only service providers that help run TableRise, under their own security and privacy commitments:

• Supabase: database, sign-in and file storage.
• Vercel: website hosting.
• Resend: sending enquiry notification emails.
• Stripe: subscription payments, if you subscribe.
• Google: only if you connect Google Calendar or Gmail.

These providers may store data outside New Zealand. We may also disclose information if the law requires it.

Keeping information safe

• Connections are encrypted in transit; Google access tokens are also encrypted when stored.
• Each chef's records are separated at the database level, so one chef cannot see another's data.
• Access by our team is limited to running and supporting the service.

How long we keep it

We keep your records while your account is open. Emails received through the Gmail script are cleared as described under “Gmail script” above. If you close your account, we delete your records within 30 days, except where we must keep something by law (for example, billing records).

Your choices and rights

• You can view and correct most information yourself in TableRise.
• You can ask for a copy of your information, for corrections, or for your account and records to be deleted by contacting us at the contact address shown on this website.
• Clients of a chef should contact that chef first; we will help the chef respond.
• If you are not satisfied with our response, you can complain to the New Zealand Privacy Commissioner.

Children

TableRise is for businesses and is not intended for anyone under 16.

Changes

If we make important changes to this policy, we will update the date above and tell account holders by email or in the app.

Contact

My Private Chef Limited, New Zealand. Email: the contact address shown on this website.