Privacy Policy

Last updated: June 2026

Yuzu ("we," "our," or "us") provides a smart digital queueing platform for restaurants, bars, clubs, cafés, and event venues. This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

1. Data We Collect

From Guests (Queue Users)

  • Name or nickname
  • Party size
  • Phone number (optional, if SMS or WhatsApp is chosen)
  • Email address (optional, if email notifications are chosen)
  • Preferred notification channel
  • Notification consent status
  • Age confirmation (for venues that require it)
  • Queue position and status data

From Business Users (Venue Staff)

  • Account email and name
  • Venue information (name, address, hours, branding)
  • Queue management actions (audit logged)

2. Why We Collect Data

  • To operate the queue and notify guests when it is their turn
  • To send notifications through the guest's chosen channel (SMS, WhatsApp, Telegram, Viber, or Email)
  • To provide analytics to business users
  • To maintain security and prevent abuse

3. Notification Consent

Guests must explicitly consent to receive notifications before joining a queue. Notifications are limited to queue-related messages: join confirmation, position updates, "your turn" alerts, and venue messages. We do not send marketing messages to queue guests.

4. Notification Channels

We support SMS, WhatsApp, Telegram, Viber, and Email notifications. These are delivered through:

  • SMS & WhatsApp: Twilio
  • Telegram: Telegram Bot API
  • Viber: Viber Bot API
  • Email: Resend

Your contact details are shared only with the notification provider for the channel you selected. We do not sell or share this data for any other purpose.

5. Data Retention

  • Active queue data is kept while the queue is active.
  • Operational logs (notification logs, audit logs) are kept for 30 days by default.
  • Business users may configure shorter retention periods.
  • Guests may request deletion of their data at any time.

6. Children Under 13

Yuzu does not knowingly collect personal data from users under 13 years of age. If a user indicates they are under 13, their queue submission is blocked and we display the following message:

"Yuzu does not collect personal data from users under 13. Please ask a parent, guardian, or venue staff member for help."

7. Data Deletion

Guests can request deletion of their queue data by contacting us at privacy@yuzu.app. We will process deletion requests within 30 days.

8. Security

  • All data is transmitted over HTTPS.
  • Database access is protected by row-level security.
  • API keys and service credentials are stored server-side only.
  • Phone numbers and emails are masked in the business dashboard by default.
  • All staff actions are audit-logged.

9. Third-Party Providers

  • Supabase: Database, authentication, and real-time updates
  • Twilio: SMS and WhatsApp delivery
  • Resend: Email delivery
  • Telegram Bot API: Telegram notifications
  • Viber Bot API: Viber notifications

10. Business Customer Responsibilities

Venue operators using Yuzu are responsible for ensuring their use of the platform complies with local privacy laws and regulations. This includes informing their guests about the use of digital queueing and obtaining appropriate consent.

11. International Users

Yuzu may be used by venues and guests in multiple countries. Data may be processed in the region where our infrastructure is hosted. By using Yuzu, you consent to the transfer and processing of your data as described in this policy.

12. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. Continued use of Yuzu after changes constitutes acceptance of the updated policy.

13. Contact

For privacy questions, data deletion requests, or concerns, contact us at: privacy@yuzu.app