Privacy Policy

Last updated: June 28, 2026

Yagnotech Inc. ("Yagnotech", "Dinify", "we", "us") operates the Dinify® restaurant platform and the website at dinify.ca. This policy explains what personal information we collect, how we use it, and your choices.

1. Who this applies to

We handle personal information for two groups: restaurant customers (owners and staff who use our software) and diners (guests who order through a restaurant using Dinify). For diners, the restaurant is the primary party deciding how their guest data is used; Dinify processes it on the restaurant's behalf.

2. Information we collect

  • Account & business details: name, email, phone, restaurant name and address, and billing information.
  • Diner details: name, email and/or phone provided at checkout, order history, and marketing consent status.
  • Payment data: processed by our payment provider (Stripe). We do not store full card numbers.
  • Usage data: device, browser and interaction data to operate and improve the service.

3. How we use it

  • To provide the platform: taking orders, processing payments, running loyalty and sending receipts.
  • To send transactional messages (order confirmations, password resets).
  • To send marketing messages only with a lawful basis (express consent, or implied consent from an existing business relationship under CASL) and always with a working unsubscribe.
  • To provide support, prevent fraud and meet legal obligations.
  • To operate, secure, analyse, develop and improve our products, features and AI/ML models, including via aggregated and de-identified data (see section 5a).

5a. Aggregated and de-identified data

We may aggregate, de-identify, and/or anonymize information collected through the Services and use, retain, and disclose it for any lawful purpose (including improving our products and AI/ML models and creating and licensing aggregated benchmarks and insights) provided it no longer identifies you; this is not personal information and survives account closure. We do not sell identifiable personal information; licensed aggregated data is subject to no-re-identification terms.

4. Marketing & your consent (CASL)

Restaurants using Dinify's marketing tools must have a lawful basis to contact each diner. Dinify enforces consent records, identifies the sender, includes a physical mailing address, and provides one-click unsubscribe on every commercial message, as required by CASL. You can withdraw consent at any time via the unsubscribe link or by contacting the restaurant.

5. Sharing

We share personal information with service providers (sub-processors) who help us run the platform, under contracts that limit their use of it. We do not sell identifiable personal information, and we do not use it for third-party targeted advertising outside Dinify services. We may disclose information where required by law. Our current sub-processors include:

  • Fly.io: application / backend hosting (USA / Canada).
  • Cloudflare: web-app hosting (Pages), CDN and DNS (global).
  • MongoDB Atlas: database hosting (Canada / USA).
  • Amazon Web Services (AWS): file storage (S3) and transactional email (SES) (USA).
  • Stripe: payment processing and merchant onboarding (USA).
  • Twilio / SendGrid: transactional SMS and email delivery (USA).
  • Google Firebase: phone-number verification (takeout OTP) and push notifications (USA).
  • Anthropic: AI features: the AI waiter and menu translation process diner-entered chat text and menu content; AI menu import and marketing copy for operators (USA).

Diners' order data (name, phone, order details) is shared with the restaurant that received the order, which acts as the primary controller of that data under our Data Processing Agreement.

6. Storage & security

We use industry-standard safeguards (encryption in transit, access controls, audit logging). Data may be processed in Canada and other jurisdictions where our providers operate; we take steps to ensure comparable protection.

7. Retention

We keep personal information only as long as needed for the purposes above or as required by law, then delete or anonymise it.

8. Your rights

Subject to law, you may request access to, correction of, or deletion of your personal information. Diners should contact the restaurant they ordered from; restaurant customers can contact us directly.

9. Contact

Privacy questions: info@dinify.ca. Privacy is overseen by the Privacy Officer, Yagnotech Inc., Vancouver, British Columbia, Canada.

10. Changes

We may update this policy and will post the new date above. Material changes will be communicated through the product or by email.