Privacy policy

Last updated: November 2026

Courtesy translation. In case of discrepancy, the French version prevails.

RYVKA, an SAS registered with the RCS under SIREN 994 521 631 (SIRET 994 521 631 00022), with its registered office at 23 Avenue de Bonneuil, 94210 Saint-Maur-des-Fossés, France, processes the data described below as data controller or as processor, depending on the case (see “What is Ryvka's role?” below). Contact: contact@ryvka.fr

Who is concerned?

This policy covers three categories of people: restaurateurs who create an account on the app to manage their menu, orders and payments; restaurant guests who order and pay from the public site (menu.ryvka.fr) without creating an account; and visitors to ryvka.fr who request a demo.

What is Ryvka's role?

For restaurateur account data (email, restaurant information, POS system connections), Ryvka is the data controller: it alone determines the purposes and means of this processing.

For restaurant guests' data (orders, amounts paid), the restaurant is the data controller with regard to its own guests. Ryvka acts only as processor, on the restaurant's instructions, within the meaning of Article 28 of the GDPR; Ryvka's detailed commitments in this capacity are set out in the Terms of sale.

In plain terms: for a question about your restaurateur account, contact Ryvka directly. For a question about an order placed in a restaurant, contact that restaurant first.

Data collected

  • Email, password (restaurateur): account creation and access
  • Restaurant name, email, phone, photo, Google My Business link: display on the public menu, contact
  • Menu, dishes, prices, 3D models: operation of the digital menu
  • Orders, amounts, table (restaurant guests): processing of orders and payments, on behalf of the restaurant (Ryvka as processor)
  • Push notification token (device): alerting the restaurateur to a new order
  • POS system login credentials (restaurateur): synchronising orders with the POS
  • Name, restaurant, email, phone, chosen day and time (visitor of ryvka.fr): booking a demo of Ryvka

Ryvka never collects or stores bank card details. Payments are processed directly by Stripe, which alone handles card data (PCI-DSS compliance); Ryvka only receives the payment confirmation and its amount.

Demo request

When you book a demo on ryvka.fr, you provide your name, your restaurant's name, your email address, your phone number and the chosen time slot. This information is used only to schedule and hold the appointment, and to contact you about it. It is processed on the basis of pre-contractual measures taken at your request, or of Ryvka's legitimate interest in answering the requests addressed to it.

The booked slot is recorded in a file on the site's server so that it cannot be booked twice. A notification is sent to Ryvka and a confirmation email is sent to you, via the email delivery provider Resend. Ryvka then sends you, at the email address provided, an invitation to a Google Meet video call at the time of the appointment.

Recipients of the data

  • Supabase: hosting of the database, authentication and file storage
  • Stripe: payment processing and payouts to restaurateurs
  • Third-party POS systems: synchronising orders with the POS, if enabled
  • Apple (APNs): sending push notifications
  • Cloudflare: hosting of the public ordering site
  • Hostinger: hosting of the ryvka.fr site and of the demo slots file
  • Resend: sending notification and demo confirmation emails
  • Google (Calendar and Meet): demo invitation and video call, sent by Ryvka

These providers access only the data strictly necessary for the service to work.

Retention period

Restaurateur account data is kept for as long as the account is active, then deleted within a reasonable time after the account is deleted (a feature available in the app). Order-related data is kept for as long as required by applicable accounting and tax obligations. Demo request data is kept for 12 months from the request, then deleted; if the restaurant becomes a client, it is kept under the conditions that apply to restaurateur accounts.

Your rights

Under the GDPR, you have the right of access, rectification, erasure, restriction, portability and objection regarding your data. If you are a restaurateur, exercise these rights by writing to contact@ryvka.fr or by deleting your account from the app. If you are a guest of a restaurant that uses Ryvka, send your request to the restaurant concerned, which is responsible for your data; Ryvka provides it with the assistance needed to respond. In all cases you may lodge a complaint with the CNIL (cnil.fr).

Cookies and local storage

The ryvka.fr site does not use any cookies or trackers, whether advertising, analytics or third-party.

The public ordering site (menu.ryvka.fr) does not use advertising cookies or third-party trackers. A display preference (list view or 3D view) is stored locally in the browser for the user's convenience, without being sent to Ryvka.

Changes

This policy may be updated to reflect changes to the service or to the regulations. The date of the last update appears at the top of this page.