Dineway Privacy Policy

Last updated: June 26, 2026

This Privacy Policy explains how Dineway ("Dineway," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our websites, use our products and services, contact us, or interact with restaurant websites and pages powered by Dineway.

This Privacy Policy should be read together with our Terms of Service.

Plain English summary for restaurant owners

  • Your restaurant data stays yours. Dineway is infrastructure for your restaurant website and guest action paths. Your menus, photos, logos, private guest lists, private ledgers, and revenue data belong to you.
  • We do not sell private restaurant data. We do not sell restaurant guest lists or private restaurant operating data.
  • We do not use private restaurant data to train third-party foundation models. Non-public restaurant operating data and guest personal information are not used to train external AI foundation models.
  • Restaurants are responsible for their guests. When a guest books, orders, submits a form, or gives contact information to your restaurant through a Dineway-powered experience, the restaurant usually decides why that data is collected and how it is used. Dineway processes it to provide the service.
  • AI helps, but facts must be checked. AI-assisted content can help draft and improve pages, but restaurants must confirm facts before publication, especially allergens, prices, discounts, hours, availability, and legal notices.

1. Who this policy applies to

This policy applies to:

  • Restaurant owners, operators, managers, employees, and other business users who use Dineway.
  • Visitors to Dineway websites and marketing pages.
  • Guests who interact with restaurant websites, menus, forms, reservation paths, ordering paths, review prompts, or other experiences powered by Dineway.
  • People who contact us for support, sales, security, or other requests.

Our privacy role

Dineway may act in different privacy roles depending on the context.

For restaurant account information, billing information, support communications, Dineway website visitors, product security, and our own business operations, Dineway generally acts as an independent controller of personal information.

For guest and end-user information processed through Dineway-powered restaurant websites, forms, booking paths, ordering paths, review prompts, or similar restaurant-controlled experiences, the restaurant usually decides why the information is collected and how it is used. In those cases, Dineway processes the information as a service provider or processor for the restaurant, according to the restaurant's instructions and applicable agreements.

Restaurants are responsible for providing required guest notices, obtaining required consents, honoring guest privacy rights, and ensuring their use of Dineway complies with applicable law.

2. Information we collect

We may collect the following categories of information, depending on how you use Dineway.

Account and business information

We collect information such as your name, email address, phone number, role, restaurant name, restaurant address, billing details, account settings, login credentials, and team member permissions.

Restaurant content

We collect restaurant content that you provide or connect to Dineway, such as logos, photos, menus, prices, hours, descriptions, promotions, event details, reservation links, ordering links, review links, social links, and other business information.

Some restaurant content may include personal information, such as staff names, owner names, contact details, or guest-facing review content.

Guest interaction information

When guests interact with restaurant experiences powered by Dineway, we may process information such as form submissions, reservation or ordering handoff data, phone or direction clicks, review prompt interactions, menu views, page visits, device information, approximate location inferred from IP address, and similar interaction data.

Dineway does not intentionally collect payment card numbers through its own forms unless a specific Dineway payment feature says otherwise. Payment details are typically processed by third-party payment providers.

Communications

If you contact us, we may collect your name, email address, company or restaurant name, message content, support history, attachments, and other information you choose to provide.

Usage, device, and log information

We may collect IP address, browser type, device type, operating system, referring pages, pages viewed, dates and times of visits, feature usage, error logs, performance data, and similar technical information.

Cookies and similar technologies

We may use cookies, pixels, local storage, and similar technologies to operate our websites, remember preferences, analyze usage, improve performance, protect against fraud, and support marketing where permitted by law.

Third-party integrations

If you connect third-party services, such as Google Business Profile, maps, analytics tools, reservation platforms, ordering platforms, payment processors, email providers, review platforms, or domain providers, we may receive information from those services according to your settings and their policies.

3. How we use information

We use information to:

  • Provide, operate, maintain, secure, and improve Dineway.
  • Create, publish, host, update, and support restaurant websites, menus, pages, and guest action paths.
  • Manage accounts, authentication, permissions, billing, subscriptions, and customer support.
  • Process restaurant content and guest interaction data as directed by restaurants.
  • Connect and operate third-party integrations selected by restaurants.
  • Generate analytics, reporting, performance insights, and product improvements.
  • Develop, test, and improve features, including AI-assisted features.
  • Detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.
  • Communicate about service updates, support, billing, security, and product changes.
  • Send marketing communications where permitted, with choices to opt out.
  • Comply with legal obligations, enforce our terms, and protect rights, safety, and property.

We do not sell restaurant guest lists. We do not sell personal information for money. If we ever use advertising or analytics tools in a way that is considered a "sale" or "sharing" under applicable privacy laws, we will provide required choices.

4. AI-assisted features

Dineway may use AI-assisted tools to help generate, edit, summarize, translate, classify, recommend, or improve content. Information you provide may be processed by AI systems to provide those features.

We design AI-assisted features for restaurant workflows, but AI output can be inaccurate or incomplete. Restaurants are responsible for reviewing AI-assisted content before publishing it, especially menu items, prices, allergens, dietary claims, discounts, hours, legal notices, and other guest-facing commitments.

We do not use non-public restaurant operating data, private guest lists, transaction history, private ledgers, or guest personal information to train, retrain, or fine-tune external third-party foundation models.

Dineway may provide structured public restaurant information, such as menu data, business hours, location, availability, search snippets, Schema.org markup, llms.txt files, feeds, or API-style outputs where enabled. We are not responsible for how third-party AI assistants, search engines, crawlers, browsers, or independent agents interpret, summarize, hallucinate, or present public information after they retrieve it.

5. How we disclose information

We may disclose information in the following ways.

Service providers

We may share information with vendors that help us provide Dineway, such as hosting providers, cloud infrastructure, payment processors, analytics providers, customer support tools, email providers, security tools, and professional advisors. These providers are authorized to use information only as needed to provide services to us, unless another lawful basis applies.

Restaurant-controlled publishing

Restaurant content and certain guest-facing information may be published on restaurant websites, menu pages, search snippets, structured data, previews, or other public experiences when a restaurant uses Dineway to publish them.

Third-party integrations selected by restaurants

When a restaurant connects or uses a third-party integration, we may share information with that third party as needed to operate the integration. Third-party services have their own terms and privacy policies.

Legal, safety, and compliance

We may disclose information if we believe it is necessary to comply with law, legal process, government requests, enforce our terms, protect rights and safety, investigate abuse, or prevent security incidents.

Business transfers

If Dineway is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be disclosed or transferred as part of that transaction, subject to appropriate protections.

Aggregated or de-identified information

We may use and disclose aggregated or de-identified information that does not reasonably identify you or a specific guest.

6. Third-party services

Dineway may link to or integrate with third-party services. We do not control those services, and their use of information is governed by their own terms and privacy policies.

Restaurants should review the privacy and data practices of third-party services they choose to connect, including payment, reservation, ordering, analytics, maps, review, email, and domain services.

When you connect an integration, Dineway only requests the permissions needed to operate that integration. You can disconnect integrations through available settings or by contacting us. Disconnecting an integration may limit related features, such as map display, ordering links, reservation paths, analytics, or Google Business Profile syncing.

If a third-party service has an outage, changes its API, changes its policies, rejects content, delays data, or experiences a payment, booking, map, ordering, or review issue, Dineway may help surface the issue where practical and provide troubleshooting guidance. We do not control third-party systems or guarantee their availability, decisions, data practices, or performance.

7. Public structured data and autonomous agents

Restaurant websites are designed to be found and understood by guests, search engines, maps, directories, and, where enabled, AI assistants or autonomous agents. When a restaurant publishes public pages through Dineway, public restaurant facts may be exposed through visible pages, metadata, Schema.org structured data, search snippets, feeds, llms.txt files, API-style outputs, or similar machine-readable formats.

Public restaurant facts may include menu items, prices, hours, location, phone number, reservation links, ordering links, availability signals, descriptions, promotions, and other guest-facing business information approved or provided by the restaurant.

Once a third-party search engine, browser, AI assistant, crawler, directory, or autonomous agent retrieves public restaurant information, that third party's own terms and privacy policy govern its subsequent handling of that information and any guest interaction it controls. Dineway does not control how third-party agents interpret, summarize, rank, transform, or present public restaurant information.

8. Cookies and analytics choices

You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.

Where required by law, we will provide additional choices for non-essential cookies, targeted advertising, or cross-context behavioral advertising.

9. Data retention

We keep personal information for as long as reasonably necessary to provide the Services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business needs.

Retention periods may vary depending on the type of information, account settings, legal requirements, and restaurant instructions. Restaurants may request export or deletion of their content according to the Services and applicable agreements.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, authentication, encryption in transit, monitoring, backups, vendor review, and internal policies.

No method of transmission or storage is completely secure. If you believe your account or information has been compromised, contact us promptly.

11. International transfers

Dineway may process and store information in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from the laws where you live.

Where required, we use appropriate safeguards for international transfers.

12. Your choices and privacy rights

Depending on where you live, you may have rights to:

  • Access or know what personal information we process about you.
  • Request correction of inaccurate information.
  • Request deletion of personal information.
  • Request a copy of your information.
  • Opt out of certain marketing communications.
  • Opt out of certain sales, sharing, or targeted advertising where applicable.
  • Limit certain uses of sensitive personal information where applicable.
  • Object to or restrict certain processing where applicable.
  • Appeal a decision we make about your privacy request where required by law.

To make a privacy request, contact us at privacy@dineway.ai. We may need to verify your identity before completing a request.

If your request relates to information held by a restaurant that uses Dineway, we may direct you to that restaurant or help the restaurant respond, depending on our role and legal obligations.

We will respond to verified privacy requests within the time required by applicable law. Where GDPR applies, this is generally within one month. Where CCPA applies, this is generally within 45 days, with a possible extension where permitted by law.

Dineway does not use sensitive personal information to make legally significant decisions about guests through fully automated decision-making. Where required by law, you may opt out of certain sales, sharing, targeted advertising, cross-context behavioral tracking, or automated profiling by using available privacy controls or contacting us.

13. California privacy notice

If you are a California resident, California law may give you specific rights, including the right to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising your rights.

We do not sell personal information for money. We do not knowingly sell or share personal information of people under 16.

If our use of analytics, advertising, or similar technologies is considered a sale or sharing under California law, you may opt out by contacting privacy@dineway.ai or using any privacy choices made available on our website.

14. EEA and UK privacy rights

If you are located in the European Economic Area or the United Kingdom, our legal bases for processing personal information may include:

  • Performance of a contract.
  • Legitimate interests, such as operating and improving the Services, securing our systems, and communicating with customers.
  • Consent, where required.
  • Compliance with legal obligations.

You may have rights to access, rectify, erase, restrict, object to processing, data portability, and withdraw consent. You may also have the right to lodge a complaint with a data protection authority.

15. Children's privacy

Dineway is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.

16. Marketing communications

You may opt out of marketing emails by using the unsubscribe link in the email or contacting us. We may still send non-marketing messages, such as billing, security, account, and service notices.

17. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated policy, updating the "Last updated" date, sending a notice, or using another reasonable method.

18. Contact us

For privacy questions or requests, contact:

privacy@dineway.ai

For general support:

support@dineway.ai