MaitreData Processing Addendum
This version takes effect on November 15, 2026.
In short
For your guests' information, you decide and Maitre processes it for you. We use it only to run the service for you, never sell it, never use it for ourselves or to train AI, keep it secure and confidential, tell you of a confirmed breach within 72 hours, help you answer guests' requests, give you 15 days' notice of new providers, and delete it on schedule.
1. Definitions and roles
This addendum is part of the Terms of Service. For guest data, the restaurant is the business and controller, Maitre is its service provider and processor, and the companies on the Subprocessors page are subprocessors. It is intended to meet the service-provider and processor requirements of the California Consumer Privacy Act, the Virginia Consumer Data Protection Act and similar state laws.
2. Scope and instructions
Maitre processes guest data only to provide the service described in the Terms of Service and the Privacy Policy, on your documented instructions given through the dashboard and the service's settings, and tells you if it believes an instruction breaks the law.
3. Service-provider restrictions and certification
Maitre will not sell or share guest personal information, will not retain, use, or disclose it for any purpose other than providing the services (including any commercial purpose of its own), will not retain, use or disclose it outside the direct business relationship between you and Maitre, and will not combine it with personal information from another source except as the law permits a service provider. Maitre certifies that it understands these restrictions and will comply with them, and will tell you if it can no longer meet them. You may take reasonable steps to stop and fix any unauthorized use by contacting team@hiremaitre.com.
4. Processor duties
- Everyone who handles guest data for Maitre is bound to keep it confidential.
- At your direction, Maitre deletes or returns guest data at the end of the service, unless the law requires keeping it.
- Maitre gives you the information you reasonably need to show compliance, and cooperates with reasonable assessments (Part 11).
- Maitre puts every subprocessor under a written contract with data protection duties at least as strong as these.
5. Confidentiality of personnel
Access to guest data is limited to the people who need it to run, secure and support the service, and each is bound to confidentiality.
6. Subprocessors
The current list is on the Subprocessors page. Maitre emails you at least 15 days before adding or replacing a subprocessor that handles guest data. You may object by email within that time; if we cannot resolve a reasonable objection, you may end the affected service and receive a pro-rated refund of prepaid fees.
7. Security
Maitre applies the measures in Annex B, appropriate to the risk of the data.
8. Breach notice
Maitre tells you within 72 hours of confirming a breach of security affecting guest personal information it holds, with what it knows about the nature of the breach, the data and people affected, the likely consequences and the steps taken, so you can give your own notices, and updates you as it learns more.
9. Guests' requests
Maitre acts on verified requests it can fulfill for you and passes on any other request about your restaurant within 10 business days. Through the dashboard you can delete messages, conversations or your whole history at once.
10. Deletion and return
Guest conversations are deleted automatically 90 days after they are created, and at once when you delete them. When the service ends, Maitre deletes all guest data within 30 days, except where the law requires keeping it. On our current hosting plan no database backups are kept, so nothing survives in a backup. Content received from Square is deleted when you disconnect, as the Terms of Service describe.
11. Audits
Once a year, on request, Maitre answers a reasonable written questionnaire about its practices. On reasonable notice, you may also review any third-party reports Maitre has, or carry out a scoped assessment at your own cost that does not disrupt the service or expose other customers' data.
12. No sale, no sharing, no combining
Maitre does not sell guest data, share it for advertising, or combine it with data from other restaurants or sources to build profiles.
13. Recording laws
Maitre receives and stores guest messages only as your service provider, for your benefit, and uses them for no purpose of its own. You remain responsible for the notices and consents described in the Terms of Service.
14. Your responsibilities
As the business, you are responsible for your own compliance, including notices, consents, honoring consumer rights and having a lawful basis for the processing you instruct.
Annex A. Details of processing
| Item | Details |
|---|---|
| People | Guests who use the widget on your website. |
| Data | Messages and answers, voice-call text, order details and pickup name, a one-way code made from the network address, approximate city and time zone. |
| Sensitive data | Only what guests choose to mention: allergies and dietary needs, religious diets, accessibility needs. |
| Purpose | Answering guests and taking pickup orders for your restaurant. |
| Duration | 90 days for conversations; voice audio never stored. |
Annex B. Security measures
- Row-level database rules so each restaurant reaches only its own data.
- Signed widget sessions tied to the restaurant and its approved websites.
- Optional multi-factor sign-in and trusted-device checks for owners.
- Our database host encrypts stored data with AES-256, and every connection uses TLS.
- Secrets kept on our servers only; request size and rate limits; security event logging.
- Network protection and bot checks from Cloudflare.