Legal

Privacy Policy

Effective date: April 19, 2026 - useyourturn.com

1. Who we are

yourturn ("we," "us," or "our") operates the waitlist management platform available at useyourturn.com and app.useyourturn.com. We are based in Canada and subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

Questions about this policy? Email us at privacy@useyourturn.com.

2. Information we collect

From restaurant guests

  • Name or party name provided when joining a waitlist or requesting a reservation
  • Phone number and reservation email address used to send transactional waitlist or reservation updates
  • Party size, reservation date or time, optional occasion, optional notes, and guest replies
  • Join time, waitlist position, wait estimate, ready time, reservation status, confirmation activity, resolved time, and outcome
  • Booking submission metadata such as confirmation that the guest acknowledged the applicable Terms of Service and Privacy Policy disclosure shown near online reservation submit

From restaurant operators and staff

  • Email address and password for account authentication
  • Restaurant name, menu URL, waitlist settings, and subscription plan
  • Staff invite emails, roles, and account membership information
  • Floor map/table layout data, business hours, blackout dates, and custom SMS templates
  • Billing information processed through Stripe such as billing address, tax IDs, and payment method details entered in Stripe Checkout
  • Subscription and invoice metadata such as customer IDs, subscription IDs, billing periods, payment status, invoice status, and limited payment method details needed for billing support and account administration
  • SMS usage logs and audit logs used for billing, support, and security

From contact forms

  • Contact and business details such as name, email, optional phone number, role, city or area, restaurant name, location count, current waitlist setup, interests, how you heard about us, and notes you choose to provide

Automatically collected

  • Server logs such as IP addresses, request times, and error logs for security and debugging
  • Analytics data such as pages viewed, approximate location, device and browser information, traffic source, and interactions measured through Google Analytics
  • Cookies used for authentication and session management; we do not use third-party advertising cookies

3. How we use your information

  • To send transactional SMS messages and reservation emails about waitlist status or bookings, including join confirmations, reservation confirmations, reminders, table-ready alerts, replies, and cancellation handling
  • To send transactional emails related to account confirmation, password recovery, onboarding, staff invitations, and reservation guest communications
  • To display waitlist position, estimated wait, reservation details, and guest manage links such as menu, directions, and restaurant contact links where provided
  • To allow restaurant staff to manage the waitlist, reservations, floor map, settings, team access, and analytics
  • To provide aggregate analytics and SMS usage visibility to restaurants
  • To set up and administer subscriptions, free trials, invoices, payment methods, taxes, and billing support
  • To respond to contact, support, privacy, and legal inquiries
  • To improve the platform and diagnose technical or security issues
  • To understand aggregate website and product usage through Google Analytics

We do not sell guest information or use guest waitlist or reservation information for third-party advertising. We also do not bundle marketing consent into reservation booking acknowledgments.

4. SMS messaging and consent

When you enter your mobile number and submit a waitlist join form, kiosk flow, or reservation booking that uses SMS updates, you agree to receive transactional SMS messages about that visit from the restaurant via yourturn. Consent to receive these messages is not a condition of purchase.

These messages may include:

  • A confirmation when you join the waitlist
  • A notification when your table is ready
  • A reservation confirmation or reminder when the restaurant uses SMS for reservation messaging
  • Replies or help messages triggered by messages you send to the waitlist number

Message frequency varies by visit and interaction, but most guests receive a join confirmation, a table-ready alert, and any help or reply messages they trigger. Message and data rates may apply. Reply STOP to opt out and HELP for help.

Online reservation forms may also ask guests to acknowledge the applicable Terms of Service and Privacy Policy near submit. That acknowledgment applies only to the single booking contact provided for that reservation and is not bundled with marketing consent.

Mobile opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes. We may share the phone number and message content with service providers such as Twilio only as needed to deliver the waitlist messaging service.

yourturn complies with Canada's Anti-Spam Legislation (CASL) and supports U.S. carrier and A2P messaging requirements for transactional messaging.

5. Data retention

  • Active waitlist entries and upcoming reservations are retained while needed to manage live service and the booked visit.
  • Resolved waitlist entries and completed or cancelled reservations may be retained to provide history, analytics, support, billing, audit, and security functions unless deletion is requested or the account is deleted.
  • SMS usage logs store only the last four digits of phone numbers where possible.
  • Restaurant account and settings data are retained while the account remains active or as needed for legal, billing, security, or support purposes.

6. Data storage and providers

yourturn uses infrastructure providers including Supabase for database and authentication services, Twilio for SMS delivery, Resend for transactional email delivery, Stripe for subscription billing and payment processing, and Google Analytics for aggregate website and product analytics. These providers may process data outside Canada, including in the United States.

Twilio receives the destination phone number and message content needed to send and receive SMS messages. Supabase stores application data needed to provide the platform. Resend processes email addresses and email content needed to deliver reservation confirmations, reservation reminders, account confirmation, password recovery, onboarding, and invite emails. Stripe processes payment information, billing address, tax IDs, invoices, and subscription events for paid plans and may share limited billing metadata with us so we can administer your account. Google Analytics receives analytics identifiers and usage information used to measure traffic, page views, device/browser information, approximate location, and interactions.

You can limit analytics collection using browser settings, cookie controls, ad personalization controls, or Google's available opt-out tools. We do not use Google Analytics to sell personal information or for third-party advertising.

7. Your rights under PIPEDA

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information, subject to legal, billing, security, and operational retention needs
  • Withdraw consent to SMS communications at any time (reply STOP)

To exercise any of these rights, email privacy@useyourturn.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), database access controls, and secure sign-in systems. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Children's privacy

yourturn is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at privacy@useyourturn.com.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated effective date. Continued use of the platform after changes constitutes acceptance of the revised policy.