Privacy Policy

Effective date: September 15, 2026 — yourturn.to

1. Who we are

yourturn ("we," "us," or "our") operates the waitlist and reservations platform available at yourturn.to, useyourturn.com, and app.useyourturn.com, including the short links in our text messages and emails (such as yturn.co). This policy applies to all of these addresses and to any other domain we use to provide the platform. We are based in Canada and subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

Questions about this policy? Email us at privacy@useyourturn.com.

2. Information we collect

From restaurant guests

Name or party name provided when joining a waitlist or requesting a reservation
Phone number and reservation email address used to send transactional waitlist or reservation updates
Party size, reservation date or time, optional occasion, optional notes, and guest replies
Join time, waitlist position, wait estimate, ready time, reservation status, confirmation activity, resolved time, and outcome
Preferred language selected for waitlist or reservation updates, used to send your messages and updates in that language
Booking submission metadata such as confirmation that the guest acknowledged the applicable Terms of Service and Privacy Policy disclosure shown near online reservation submit

From restaurant operators and staff

Email address and password for account authentication
Restaurant name, menu URL, waitlist settings, and subscription plan
Staff invite emails, roles, and account membership information
Floor map/table layout data, business hours, blackout dates, and custom SMS templates
Billing information processed through Stripe such as billing address, tax IDs, and payment method details entered in Stripe Checkout
Subscription and invoice metadata such as customer IDs, subscription IDs, billing periods, payment status, invoice status, and limited payment method details needed for billing support and account administration
SMS usage logs and audit logs used for billing, support, and security

From contact forms

Contact and business details such as name, email, optional phone number, role, city or area, restaurant name, location count, current waitlist setup, interests, how you heard about us, and notes you choose to provide

Automatically collected

Server logs such as IP addresses, request times, and error logs for security and debugging
Analytics data such as pages viewed, approximate location, device and browser information, traffic source, and interactions measured through Google Analytics
Cookies used for authentication, session management, and remembering your language preference; we do not use third-party advertising cookies

3. How we use your information

To send transactional SMS messages and reservation emails about waitlist status or bookings, including join confirmations, reservation confirmations, reminders, table-ready alerts, replies, and cancellation handling
To send transactional emails related to account confirmation, password recovery, onboarding, staff invitations, and reservation guest communications
To display waitlist position, estimated wait, reservation details, and guest manage links such as menu, directions, and restaurant contact links where provided
To allow restaurant staff to manage the waitlist, reservations, floor map, settings, team access, and analytics
To provide aggregate analytics and SMS usage visibility to restaurants
To set up and administer subscriptions, free trials, invoices, payment methods, taxes, and billing support
To respond to contact, support, privacy, and legal inquiries
To improve the platform and diagnose technical or security issues
To understand aggregate website and product usage through Google Analytics

We do not sell guest information or use guest waitlist or reservation information for third-party advertising. We also do not bundle marketing consent into reservation booking acknowledgments.

5. Data retention

Active waitlist entries and upcoming reservations are retained while needed to manage live service and the booked visit.
Resolved waitlist entries and completed or cancelled reservations may be retained to provide history, analytics, support, billing, audit, and security functions unless deletion is requested or the account is deleted.
SMS usage logs store only the last four digits of phone numbers where possible.
Restaurant account and settings data are retained while the account remains active or as needed for legal, billing, security, or support purposes.

6. Data storage and providers

yourturn uses infrastructure providers including Vercel for application hosting, Supabase for database and authentication services, Twilio for SMS delivery, Resend for transactional email delivery, Stripe for subscription billing and payment processing, and Google Analytics for aggregate website and product analytics. These providers may process data outside Canada, including in the United States.

Twilio receives the destination phone number and message content needed to send and receive SMS messages. Supabase stores application data needed to provide the platform. Resend processes email addresses and email content needed to deliver reservation confirmations, reservation reminders, account confirmation, password recovery, onboarding, and invite emails. Stripe processes payment information, billing address, tax IDs, invoices, and subscription events for paid plans and may share limited billing metadata with us so we can administer your account. Google Analytics receives analytics identifiers and usage information used to measure traffic, page views, device/browser information, approximate location, and interactions.

You can limit analytics collection using browser settings, cookie controls, ad personalization controls, or Google's available opt-out tools. We do not use Google Analytics to sell personal information or for third-party advertising.

7. Your rights under PIPEDA

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information, subject to legal, billing, security, and operational retention needs
Withdraw consent to SMS communications at any time (reply STOP)

To exercise any of these rights, email privacy@useyourturn.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), database access controls, and secure sign-in systems. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Children's privacy

yourturn is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at privacy@useyourturn.com.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated effective date. Continued use of the platform after changes constitutes acceptance of the revised policy.

Questions? Contact us at privacy@useyourturn.com