Privacy policy
Last updated September 4, 2026
This policy explains what Tablenote collects, why, and what we do with it. We keep it short where we can and specific where it matters.
The short version
- We collect what we need to ship cards, bill subscriptions, and produce the report. Nothing more.
- Stripe handles payment. We never see or store card numbers.
- A tap on a card records a timestamp and a device type. It does not record who the guest is.
- The report is built from reviews that are already public on Google.
- We do not sell personal information. We do not run advertising trackers on this site.
Who this policy covers
This policy applies to three groups of people:
- Restaurant customers. Owners, managers, and staff who order cards, subscribe to the report, or contact us.
- Guests. Diners who tap a Tablenote card at a restaurant. We collect very little from guests, and none of it identifies them.
- Website visitors. Anyone who browses tblnt.com.
What we collect and why
1. Information you give us on the website
When you fill out a lead form, book a demo, or place an order, we collect what you type: your name, email address, phone number if you provide it, restaurant name and address, and any message you send. For orders we also collect your shipping address, the Google review link for your restaurant, the quantity of cards, and any logo or artwork you upload for the card design.
We use this information to answer you, produce your design preview, print and ship your cards, and set up your account.
2. Payment information
Payments are processed by Stripe. When you pay, your card details are entered directly into Stripe’s secure form and sent to Stripe. We never receive, see, or store your full card number, expiration date, or security code. Stripe shares with us only what we need to run the account: a customer identifier, the last four digits and brand of the card, the amount charged, and the billing status. Stripe’s own privacy policy governs how it handles your data.
3. Tap analytics from the cards
Each card carries a short link on our domain (tblnt.com) that redirects the guest to your restaurant’s Google review page. When a guest taps a card we log:
- The date and time of the tap.
- Which card was tapped (its serial), so you can see which tables are active.
- A general device type, such as iPhone or Android, taken from the browser user agent.
We do not collect the guest’s name, phone number, email address, Google account, contacts, or precise location. We do not set cookies on the guest’s phone during the redirect. We do not know whether the guest went on to write a review or what they wrote; that happens on Google, not with us. The IP address used for the request is processed briefly to serve the redirect and protect against abuse and is not stored with the tap record.
We use tap counts to show you how often cards are being used and to spot cards that may be lost or damaged.
4. Public Google review data we process for the report
If you subscribe to the monthly report, we read the reviews that are publicly posted on your restaurant’s Google listing. A public review includes the reviewer’s chosen display name, their star rating, the text of the review, the date, and any public reply from the restaurant. This information is already visible to anyone on Google. We do not obtain private information about reviewers, and we do not contact reviewers.
We process this data to:
- Summarize what guests praise and what they complain about.
- Identify dishes and staff members mentioned by name in reviews.
- Track how sentiment changes month to month.
- Suggest concrete actions for you to consider.
Reports are generated with the help of an AI language model. Review text is sent to our model provider solely to produce your report. We choose providers that contractually agree not to use customer content to train their models. Reports are delivered only to the restaurant that subscribed to them.
5. Google Business Profile access
Some restaurants choose to grant us manager access to their Google Business Profile. This is optional. If you grant it, we use that access only to read your reviews reliably and, if you ask us to, to help you post replies. We do not change your business information, hours, photos, or posts unless you specifically request it in writing. You can remove our access at any time from your Google Business Profile settings, and we will remove ourselves promptly when you cancel.
6. Information collected automatically on our website
Our web servers keep standard logs, which include IP address, browser type, the pages requested, and timestamps. We use these logs for security, debugging, and to keep the site running. They are kept for a limited period and then deleted.
Cookies
We use only essential cookies: the ones needed to keep you signed in to your account, remember your order as you build it, and protect forms from abuse. These cannot be switched off without breaking the site.
We do not currently use advertising cookies or third-party analytics trackers. If we add a privacy-focused analytics tool in the future, we will update this policy first and, where required by law, ask for your consent before setting any non-essential cookie.
Email communications
We send three kinds of email:
- Transactional. Order confirmations, design previews, shipping updates, receipts, and monthly reports. You receive these because they are part of the service you bought.
- Service notices. Changes to pricing, this policy, or the Terms, and security alerts.
- Occasional updates. Tips and product news. These are optional. Every one includes an unsubscribe link, and opting out does not affect your service.
We do not send marketing email to guests who tap a card. We never have their email address.
How we share information
We do not sell personal information, and we do not share it with advertisers. We share information only with:
| Who | What | Why |
|---|---|---|
| Stripe | Billing name, email, amounts | Payment processing and subscription billing |
| Print and fulfillment partner | Shipping name, address, card artwork | Printing and delivering your cards |
| Hosting and email providers | Account data, report content | Running the website and delivering email |
| AI model provider | Public review text | Generating your monthly report |
| Authorities | Only what is legally required | Responding to valid legal requests |
If Tablenote LLC is ever acquired or merges with another company, customer information may transfer as part of that deal. We would tell you before that happens and this policy would continue to apply.
How long we keep information
- Account and order records: for as long as you are a customer, and then as long as tax and accounting rules require, typically seven years for invoices.
- Tap analytics: up to 24 months, then aggregated or deleted.
- Review data and reports: for as long as your subscription is active so we can show trends. When you cancel, we delete stored review data and generated reports within 90 days, except for copies you have downloaded.
- Lead form submissions that do not become customers: up to 18 months.
- Server logs: up to 90 days.
Security
We use encryption in transit for all connections to our website and services, limit staff access to the minimum needed, and rely on established providers for hosting, payments, and email. No system is perfectly secure. If we learn of a breach that affects your information, we will notify you as required by law.
Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to opt out of marketing. Residents of California and several other US states have specific rights under their state privacy laws, including the right to know what we collect and the right not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioral advertising.
To exercise any of these rights, email hello@tblnt.com from the address on your account. We will respond within the time required by applicable law, usually within 30 days. We may ask you to verify your identity first.
Reviewers. If you wrote a Google review and want it changed or removed, that must be done through Google, since we only process what is publicly posted there. If you would prefer we exclude your review from a restaurant’s report, email us and we will do so.
Children
Our website and services are intended for business owners and adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided information to us, contact us and we will delete it.
Where data is stored
We are based in the United States and store data with providers in the United States. If you access our services from outside the US, you understand that your information will be processed here.
Changes to this policy
When we make meaningful changes, we will update the date at the top of this page and email active customers before the changes take effect. Continued use of the service after the effective date means you accept the updated policy. Past versions are available on request.
Contact
Tablenote LLC
Email: hello@tblnt.com
Website: tblnt.com
Reference: the monthly report is billed at $50 per month per location and includes 10 replacement cards per month. Pricing terms are set out in our Terms of service.