Privacy Policy

Google account information. When you sign in with Google, we receive your name, email address, profile picture, and Google account identifier. We request only the basic email and profile scopes. We never receive or have access to your Google password.

Reservation preferences. Information you provide to configure the Service, including restaurants, party sizes, dates, preferred dining times, and table type preferences.

Resy credentials. If you choose to use the Service, you provide your own Resy API key and authentication token so that bookings can be made under your Resy account. These are verified with Resy and then stored encrypted in AWS Secrets Manager. They are never displayed back to you, never sent to your browser after being saved, and are read only by the job that books your reservation. You can replace them at any time from your profile page.

Reservation records. Details of booking attempts made on your behalf, including which reservations succeeded or failed and when.

Technical information. Standard log data generated when you use the Service, such as IP address, browser type, and timestamps.

We use the information we collect solely to:

• Authenticate you and maintain your signed-in session
• Book reservations on your behalf according to your stated preferences
• Show you your scheduled and completed reservations
• Communicate with you about the Service and your bookings
• Diagnose problems, prevent abuse, and improve reliability

We do not sell your personal information. We do not share it with third parties for advertising, and we do not use it to build advertising profiles.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google account data only to identify you and to operate features you have explicitly requested. We do not transfer Google user data to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition. We do not use Google user data for advertising, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymized.

We rely on a small number of third parties to operate the Service. Each has access only to the information necessary to perform its function:

• Supabase — authentication and database hosting. Your account record and reservation preferences are stored here.
• Vercel — hosting and delivery of this website.
• Amazon Web Services — execution of the automated booking jobs.
• Google — authentication provider when you choose to sign in with Google.

The Service interacts with third-party reservation platforms, such as Resy, in order to book tables for you. Those platforms are operated independently and have their own privacy policies and terms, which govern their handling of your information. Any reservation made through the Service is subject to the policies of the platform and the restaurant.

We keep your account information for as long as your account remains active. Reservation records are kept so that you have a history of bookings made on your behalf. When you delete your account, we delete your account information, reservation preferences, and stored Resy credentials. You can also invalidate your stored Resy token yourself at any time by signing out of Resy on all devices. Routine backups and server logs may persist for a limited period afterward before being overwritten.

You can request access to, correction of, or deletion of your personal information at any time by contacting us at leamur88@gmail.com. You can also revoke the Service’s access to your Google account at any time from your Google Account permissions page. Revoking access will prevent you from signing in.

We use encryption in transit, rely on managed infrastructure providers, and limit access to personal information to what is necessary to operate the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by email.

Questions about this policy can be sent to leamur88@gmail.com.