Privacy policy

Postree Order Station is the app restaurants use on a tablet or phone at the counter to receive, accept and print online orders placed through their Postree ordering site. It is for restaurant staff only; customers never use it. This policy explains what personal data the app handles, why, and the choices you have. It is published by Postree ("we", "us").

For the orders themselves, the restaurant decides how its customers' data is used and we process it on the restaurant's behalf. For the staff accounts, devices and alerts described below, we are responsible for the data.

• Staff sign-in. The email address and password a staff member signs in with, and their name and role in the restaurant. The password is checked by our server and is never stored on the device. The device keeps a sign-in token in the phone's secure storage so the tablet stays signed in.
• Device details. An identifier for the app installation (on Android the system's app identifier, on iPhone and iPad the identifier for this vendor), the device name and model, operating system version, app version, IP address and the time it last connected. We use these to show the restaurant which tablets are signed in, to let it sign a tablet out remotely and to keep sessions secure.
• Check-ins. Every few minutes the app tells our server that it is running, whether an order is ringing, how many orders are waiting, whether its printers are working and whether the screen is on. This lets the restaurant see that the tablet is ready to take orders.
• Manager contact. The name, email address and mobile number of the manager the restaurant chooses. If a tablet goes offline during opening hours, we email and text that manager so new orders are not missed.
• Orders. To do its job the app shows staff each order: the customer's name, phone number, delivery address, items, notes and payment status. This data comes from the restaurant's Postree ordering site, and the app sends back what staff do with an order (accepting it, the ready time, rejecting it with a reason, marking it ready or completed).

We use this data to provide the service the restaurant has signed up for and, where noted, because we and the restaurant have a legitimate interest in an order screen that works reliably and securely.

The app keeps recent orders, printer addresses and settings on the device so the order board stays visible during a short internet drop. Dockets and receipts are sent straight from the device to the restaurant's printer over its local network; they do not pass through us. Signing out removes the sign-in token, and uninstalling the app removes the rest.

The app shows no advertising, contains no analytics or tracking tools, does not track you across other apps or websites, and we do not sell personal data. The app does not use your location, camera, microphone or contacts.

The restaurant's own admins see their tablets, staff and orders. We use service providers to run the service: our hosting provider (servers and database), our email provider (alert and order emails) and, when text alerts are switched on, our SMS provider. They process the data only on our instructions. Apple and Google deliver the app and its updates under their own privacy policies. If a provider handles data outside the European Economic Area, we rely on safeguards such as the European Commission's Standard Contractual Clauses.

Staff accounts, device records and the manager contact are kept while the restaurant uses Postree and remain part of its account history after a tablet is signed out. Order data is kept for as long as the restaurant's account and its legal record-keeping require. When a restaurant closes its account, or asks us to delete specific data, we delete or anonymise it unless the law requires us to keep it.

All traffic between the app and our servers is encrypted (HTTPS). Sign-in tokens are short-lived, kept in the device's secure storage and bound to the device, and a restaurant admin can sign any tablet out at any time from the web admin.

You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format. Staff accounts are created and removed by the restaurant's admin, so you can also ask your restaurant. If you are a restaurant customer, please contact the restaurant first, as it decides how your order data is used. To exercise any right, email help@postree.ie. You also have the right to complain to the Data Protection Commission in Ireland (dataprotection.ie) or your local data protection authority.

The app is a work tool for restaurant staff and is not intended for children.

If we change this policy we will update this page and the date at the top. Questions about this policy or your data: Postree, help@postree.ie.