Privacy Policy

Last updated: 6 August 2026

Masa is a digital menu and table-ordering service for restaurants, operated by DOTVOZ SRL, a company registered in the Republic of Moldova. This policy explains what we do with personal data — both for the restaurants that use Masa and for the guests who scan a QR code at a table.

The two roles we play

For restaurant accounts — the people who sign up, run a venue and use the waiter app — we are the data controller. We decide what is collected and why, and this policy governs it.

For guests at a table we are a processor acting on the restaurant's behalf. The restaurant decides what happens to its orders; we store and transmit them so the order reaches the kitchen and the waiter. If you are a guest and want your data removed, ask the restaurant — or write to us and we will pass it on.

What we collect from restaurant accounts

  • Your name and email address, and a password we only ever store hashed.
  • If you sign in with Apple, Google or Discord, the account identifier and email address that provider gives us. Your password there is never visible to us.
  • Preferences — interface language, time zone, notification settings, and whether two-factor authentication is on.
  • Everything you put into the product: your venue and its details, menu items, descriptions, prices, photos, tables and QR codes, and the accounts of the staff you invite.
  • The IP address of your current and last sign-in, and how many times you have signed in. We keep these for security.
  • A push notification token for each device that installs the waiter app, so alerts reach the right phone.
  • Your subscription status as reported by the app stores — which product, which entitlement, and when it expires.
  • Support conversations you start with us, including what is written in them.

What we collect at the table

A guest never needs an account. We do not ask a guest for an email address, a phone number or payment details, and there is nothing to install.

  • An optional name, typed in when a tab is opened, so the waiter knows which table said what. Whatever is typed is what the guest chose to type.
  • The order itself — items, sizes, extras, notes and the time it was placed — along with waiter calls and bill requests.
  • A random identifier stored in a cookie on the guest's phone for one year, so that phone recognises its own tab and its own order. It is a random value: no name, no fingerprint, nothing that identifies the device anywhere else.
  • The technical data every website receives — IP address, browser and operating system.

Analytics

We run our own analytics on our own servers. There is no Google Analytics, no advertising network and no third-party tracking pixel anywhere on this site or in the app.

Visits are recorded server-side. IP addresses are masked before they are stored — the last part is dropped — and the country is worked out from the address using an offline MaxMind database on our own server, so it is never sent to a geolocation service. Analytics records are deleted automatically after 32 days.

Cookies

We use the cookies that make the product work and none that follow you around other websites. The marketing pages ship no JavaScript at all.

  • The session cookie, which keeps you signed in.
  • device_id — the random tab identifier described above, kept for one year on a guest's phone.
  • ahoy_visit and ahoy_visitor — our own analytics, kept for 4 hours and 2 years.
  • browser_time_zone — so times appear in your own time zone.
  • tab_overrides — remembers which tables you chose to watch in the waiter app.
  • impersonating — set only while an administrator is signed into an account for support.

Why we are allowed to use it

  • To perform our contract with you: running your account, delivering orders to your waiters, and sending the emails the service depends on.
  • Our legitimate interests: keeping the service secure, preventing abuse, seeing which features are used, and fixing what breaks.
  • Your consent: optional marketing email and push notifications, which you can switch off at any time in settings.
  • Legal obligations: accounting and tax records, where they apply.

Who else sees it

We do not sell personal data and we do not share it for advertising. A small number of providers process it on our instructions.

  • Hetzner Online GmbH — Application hosting, the database and the search index (Germany, EU)
  • Amazon Web Services — Storage of uploaded photos (United States)
  • Twilio SendGrid — Transactional email — confirmations, password resets, notifications (United States)
  • Sentry — Error and performance diagnostics, which can include your IP address and account id (United States)
  • RevenueCat — Subscription status for the mobile apps (United States)
  • Apple and Google — Push notification delivery, and payment for subscriptions bought inside the mobile apps (United States and EU)

Card details never reach us. A subscription bought inside the app is billed by Apple or Google, and all we receive back is whether it is active.

We also disclose data where the law requires it, or where it is needed to protect our rights or the safety of our users.

Transfers outside Moldova and the EU

Our servers are in Germany. The providers listed above as United States receive data there; those transfers rely on the European Commission's standard contractual clauses or on the EU–US Data Privacy Framework, depending on the provider.

How long we keep it

  • Account data: for as long as your account exists. Delete the account and the record goes with it.
  • Menu, tables and photos: for as long as your account exists; deleted with it.
  • Orders and tabs: kept as your venue's operating record while your account exists. You can export them at any time.
  • Analytics: 32 days.
  • Unread in-app notifications: one month.
  • Error diagnostics: 90 days, at Sentry.
  • Daily aggregate statistics — counts, no names: up to a year.

Your rights

Under Law 133/2011 on the protection of personal data and, where it applies to you, the GDPR, you can ask us to

  • show you what we hold about you;
  • correct anything that is wrong;
  • delete it;
  • restrict or object to what we do with it;
  • hand it over in a portable format, or send it to someone else;
  • honour the withdrawal of a consent you gave, without affecting what was done before.

We make no decisions about you by automated means. Write to hello@masa.md and we will answer within 30 days. If our answer does not satisfy you, you can complain to the National Centre for Personal Data Protection of the Republic of Moldova (CNPDCP, Chișinău), or to the supervisory authority of your own country in the EU.

Security

  • Everything travels over HTTPS.
  • Passwords are stored as bcrypt hashes — we cannot read them, and neither can anyone who steals the database.
  • Two-factor authentication is available on every account, and we recommend turning it on.
  • Access to production data is limited to the people who need it to run the service.
  • We never store card details, and we never see them.

Children

Masa is a tool for businesses and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes to this policy

If this policy changes we will update the date at the top, and for anything significant we will email account holders before it takes effect.

Contact

Questions about this policy, or a request about your own data? Write to us and we will answer within 30 days.

DOTVOZ SRL
hello@masa.md