Privacy Policy

The data controller is Hector YEHOUENOU (Comptoir by JAYE).
For any question regarding the protection of your data, you can contact our Data Protection Officer (DPO) at: dpo@jaye-tech.fr.

For end customers (QR code users): You do not need to create an account. We only collect data related to your order (items chosen, table number) and, depending on the service chosen by the restaurant, a first name or phone number. For a delivery, this also includes the address, an optional GPS point and delivery instructions; for an advance payment by Mobile Money, the payer's number, the transaction reference and, if you send one, a payment screenshot. The text you type in the address field may be sent to an address suggestion service (see section 4).

For restaurant owners (Comptoir clients): We collect the information needed to create and manage your account: establishment name, email address, hashed password, billing details and menu data (names, descriptions, options and images: logo, product photos, covers, publicly accessible by their URL for menu display). Drivers are devices paired by the restaurant owner: we store the device label (which the restaurant owner can choose freely), its pairing date, its last activity and the history of its deliveries and declared cash.

Data is processed exclusively to ensure the operation of the service (order transmission, kitchen tracking, delivery, payment proof verification, history, delivery cash tracking, menu translation and billing).

The legal bases for this processing are: performance of the contract (for restaurant owners) and legitimate interest or consent (for end customers). No data is resold or used for advertising targeting purposes.

The database infrastructure is provided by Supabase. Application data is hosted on secure servers located in the European Union.
The web user interface is hosted by Vercel Inc., and restaurant owner subscriptions are managed by Stripe.

Some services operate outside the European Union, with appropriate safeguards:
Google Cloud Translation: at the restaurant owner's request, menu text (names, descriptions, options) is sent from our servers to offer an English version, which the restaurant owner reviews and edits. No end customer data is transmitted to this service. A daily character limit per establishment applies.
Address suggestions (delivery): text entered in the address field is sent from the browser to Google Places or, failing that, to Photon (OpenStreetMap data).
WhatsApp (Meta): when the restaurant owner or customer uses a WhatsApp link, the pre-filled message (order number, status) is transmitted via this service, under its own terms.

End customer data: the address, GPS point and delivery instructions, name and phone number, payer's number and payment screenshot are deleted 30 days after the order is completed (unless a refund is pending). Orders (amounts, dates, statuses) are deleted after 12 months; the transaction reference follows this deletion. Database provider backups may retain this data for a limited time after deletion.
Menu images: retained as long as the restaurant exists, deleted when the restaurant owner removes them, then automatically cleaned up after the restaurant is deleted.
Driver devices: retained as long as the restaurant exists.
The restaurant owner remains responsible for archiving their own data outside the application (exports), which is not an accounting archive.

Restaurant owner account data is retained as long as the account is active, then archived according to legal limitation periods before being permanently deleted.

The application uses only "technical" cookies (strictly necessary for session maintenance and security). We do not use any intrusive advertising tracking cookies, which exempts us from the requirement to obtain prior consent under CNIL guidelines.

In accordance with the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict and port your data.

To exercise these rights, contact us at dpo@jaye-tech.fr. End customers and drivers can also contact the restaurant owner directly with whom they placed an order or work: it is the restaurant owner who informs them of the data recorded about them.

If you believe your rights are not being respected, you have the right to lodge a complaint with the CNIL (www.cnil.fr).