Privacy Policy

Aivil Reserve is a reservation management platform for restaurants, operated by SEG AGENCIA DE MARKETING DIGITAL LTDA (CNPJ 47.886.314/0001-05, Brazil). For questions about this policy, contact us at: contato@aivilreserve.com.

2.1 Restaurant data (platform users)

• Business name and slug: to identify your restaurant on the platform and create its unique URL.
• Administrator name and email: to create your account, send notifications and recover access.
• Password: stored only as a bcrypt hash — we have no access to the plain-text password.
• Date and version of terms acceptance: to record consent, as required by law.

2.2 Guest data (collected by the restaurant through our platform)

• Name, email and phone number: used only to manage the booking and send confirmations and reminders.
• Booking date, time and party size: to manage the restaurant's capacity.

The restaurant is the controller of this data; Aivil Reserve processes it on the restaurant's behalf, as a processor.

2.3 WhatsApp data (when the restaurant enables the integration)

• Notifications and reminders: through the WhatsApp Business Platform (Meta) we send booking confirmations and reminders, with buttons to confirm or cancel, and alerts to the restaurant team. We receive the WhatsApp number, profile name and button replies, used only to update the related booking.
• Customer service assistant: when the restaurant enables the assistant, the text messages a guest sends to the restaurant's WhatsApp number are processed by an artificial intelligence assistant (Claude model, by Anthropic) to answer questions and to look up, create, reschedule or cancel bookings. The conversation can be handed over to the restaurant team at any time. Message content is used only for this service and is not used to train AI models.

2.4 Browsing data

• We only use cookies that are essential for the system to work (JWT authentication). Analytics or marketing cookies are used only with your explicit consent.

Processing is governed by the Brazilian General Data Protection Law (LGPD) and, for restaurants and guests in the European Union, by the GDPR. The legal bases are:

• Performance of a contract: data needed to provide the booking service, including WhatsApp messages about the booking.
• Consent: non-essential cookies and marketing communications.
• Legitimate interest: platform security, fraud prevention and service improvement.
• Legal obligation: record retention as required by applicable law.

We do not sell, rent or share your data with third parties for commercial purposes. We use the following sub-processors to run the service:

• Hetzner Online GmbH: hosting of our servers, database and encrypted backups (data center in Germany, GDPR-compliant).
• Cloudflare (cloudflare.com): content delivery and protection network (CDN/proxy) that carries the website traffic.
• Resend (resend.com): transactional email delivery (booking confirmations and reminders, restaurant alerts).
• Meta Platforms (WhatsApp Business Platform): sending and receiving the WhatsApp messages described in section 2.3. Meta also processes this data under the WhatsApp Privacy Policy.
• Anthropic (anthropic.com): artificial intelligence model behind the WhatsApp customer service assistant; it processes message content only to generate replies and does not use it to train models.
• Stripe (stripe.com): processing of advance booking payments, when the restaurant requires them. The payment is made to the restaurant, which is the seller; Stripe receives the payment data (name, email, card or Pix details) directly, and Aivil Reserve does not store card data. Stripe also processes this data as a controller, under the Stripe Privacy Policy.

All sub-processors operate under data protection agreements compatible with the LGPD and GDPR.

• Restaurant account data: kept while the account is active and for up to 5 years after it is closed, to meet legal and tax obligations.
• Guest booking data and WhatsApp messages: kept for 2 years from the date of the booking or message.
• Access and security logs: kept for 6 months.
• After these periods, data is anonymized or permanently deleted.

Under the LGPD and the GDPR, you have the right to:

• Access: know what data we hold about you.
• Rectification: request that incorrect or outdated data be corrected.
• Deletion: request the deletion of your data, subject to legal retention periods.
• Portability: receive your data in a structured, machine-readable format.
• Withdrawal of consent: withdraw consent at any time, without affecting prior processing.
• Objection: object to processing based on legitimate interest.

How to request deletion of your data: email contato@aivilreserve.com with the subject "Data deletion", including the email address or phone number (WhatsApp) used for your bookings. Use the same address to exercise any other right. We will reply within 15 business days.

We apply technical and organizational measures to protect your data against unauthorized access, loss or alteration, including: TLS encryption in transit, bcrypt password hashing, expiring JWT tokens, encrypted integration credentials and role-based access control. If a security incident affects your data, we will notify you as required by law.

We use the following types of cookies:

• Essential: required for the system to work (authenticated session). They do not require consent.
• Analytics (future): to understand how the site is used and improve the experience. Used only with your explicit consent.

You can manage or withdraw your consent at any time through the cookie banner on the site.

Data may be processed outside Brazil by Hetzner (Germany), by Resend, Anthropic and Meta (USA), by Cloudflare (global network) and, for payments, by Stripe (USA and Ireland). These providers offer adequate data protection safeguards under applicable law (GDPR/adequacy decisions).

We may update this policy from time to time. We will notify active users by email of material changes. The effective date at the top of this page shows the version in force.

For questions, requests or to exercise your rights, contact our data protection contact:
Email: contato@aivilreserve.com

You can also lodge a complaint with the Brazilian National Data Protection Authority (ANPD), at www.gov.br/anpd, or with the data protection authority of your country.