How we use data

This is the plain-language version. For the full detail, see our Privacy Policy.

The short version

We collect only what we need to run your orders, we never sell your personal data, and you can export or delete your account at any time from settings. Here's the quick tour.

What we collect when you use Queshot

• Account - your name, email, phone and suburb.
• Orders - what you order, your "usual", and your order history.
• Payments - handled by Stripe; we never see or store your full card number.
• Location - only your approximate location, only while you have an active order or have turned on Kerbside or auto-order, and only with your permission.
• Device & usage - basic device information and how you use the app, to keep it working and fix problems.
• Server logs - our servers keep a log of each request (IP address, browser or app and operating system, the page or feature asked for and, if you are signed in, your account identifier) and of the technical messages they write while they work, kept 30 days by Axiom in the United States, for security, reliability and troubleshooting. See Privacy Policy clauses 2 and 10.
• Security records - records of failed or suspicious sign-in attempts (the email entered, IP address and browser/device information - never the password), kept to protect accounts and prevent fraud. See Privacy Policy clauses 2 and 10.

Cookies and similar technologies

Our website uses essential cookies to work properly, and may use analytics cookies to understand how the site is used. You can control or clear cookies in your browser. The mobile app does not use website cookies but uses similar device identifiers for analytics and error monitoring. In particular:

Advertising pixels

Only while our advertising campaigns are active, we use tags from our advertising and analytics partners, which may load through a tag management tool, on our website to measure whether our ads work - for example, whether someone who clicked an ad went on to apply to list their venue. Our analytics tool, which also loads through the tag management tool, automatically records the address of any link you click that leaves our website, how far down a page you scroll, whether you play a video on it, the name of any file you download from it and, for any form you start or send, its name, the address it sends to and the words on its send button - never what you type into it. We use your browser's reported time zone to avoid enabling these tags, the analytics tool included, for visitors who appear to be browsing from the EU/EEA, UK or Switzerland. You can turn them off at any time: press "Manage analytics" on this How we use data page, "Cookies & Analytics" in the footer of our pages (or "Manage analytics" at the bottom of a page that has no footer), then "Turn off analytics" (the same switch that turns off our analytics), or directly through our advertising partners' own ad-preference pages:

• Ad preferences for social media ads
• Ad settings for search ads

While advertising measurement is on, these tags also learn which button you pressed, the page you were on, the campaign tags in the link that brought you there, how far down you scrolled and read, which parts of a page, plans, questions, features and calculator steps you looked at, and which version of a page you were shown in a test. They never receive anything you type. When you apply to list your venue, we send them a reference number made from your application that cannot be turned back into your email, and we save that reference, the campaign tags and your advertising click identifier with the application. Later, from our servers, we may tell them that the application was approved, started a trial or a paid plan, or took its first order. While our campaigns are active, these tags may also be used to show our ads to people who have visited our website before (remarketing). This works through the cookie in your browser, never your name, email address or phone number, and it stops when you turn analytics off as described above. Our advertising partners' tag also automatically records the same link, scroll, video, download and form details listed above - never what you type.

Analytics and session replay

We use our analytics partners (autocapture, heatmaps and session replay - with everything you type masked - and tools to catch and fix errors and crashes) to understand how the Platform is used and to keep it working well. We do not put personal identifiers such as your name, email or phone number into analytics events - events and recordings are keyed to an internal account identifier, or an anonymous device identifier if you are not signed in. Analytics events may include a coarse, city-level location worked out from your IP address; where we retain an IP address, we keep it for security and fraud-prevention purposes, and in our server logs for 30 days (turning analytics off does not stop these). See our Privacy Policy clauses 5 and 10 for full detail.

Our hosting provider also measures how fast our pages load: the page address (without anything after a "?" in it), the page that sent you there, your browser and device type, your country and the load timings. It sets no cookies, stores nothing in your browser and does not use your IP address or your device to identify you. See our Privacy Policy clause 5.

Location and geofencing

Kerbside and auto-order use your approximate location to time your order to your arrival. A single privacy radius controls when auto-order triggers. You can turn location off any time in your device or app settings - the rest of Queshot still works.

Who we share data with, and where it goes

We share data only with the venue you order from (to fulfil your order) and the service providers that run the Platform: Stripe (payments), Supabase (database, sign-in, image storage), Resend (email), ClickSend (SMS codes), Google (Maps and push delivery), our analytics partners (analytics and error monitoring), our hosting provider (hosting our website and dashboards, and page speed measurement), Axiom (server logs, kept 30 days), Anthropic (reading menu photos and PDFs you send to the card surcharge calculator, and the menu files a venue imports, in its dashboard or through our team), and - only while our advertising campaigns are active - our advertising partners, for advertising measurement (see "Advertising pixels" above). Some of these store or process data overseas, including in the United States and the EU/EEA. We take reasonable steps to ensure they protect your information consistently with Australian privacy law.

Your choices and controls

• Notifications - service messages (order updates, security codes) come with the service; marketing is opt-in and you can unsubscribe any time.
• Analytics - turn analytics and session replay off any time in Settings → Privacy, or ask us at [email protected].
• Your data - access, correct, export or delete your account and data in Profile → Settings → Delete account, or by emailing [email protected]. If you delete your account, we delete or de-identify your data; we may keep de-identified records - which no longer identify you - solely to improve Queshot's forecasting models. We keep security and fraud-prevention records as well - such as records of failed or suspicious sign-in attempts - for as long as necessary for security, fraud-prevention and legal purposes (Privacy Policy clauses 10 and 12). Our server logs are deleted automatically after 30 days, including after you delete your account. We also keep a record of how the app was used on your account, with your account identifier swapped for an internal reference so it no longer identifies you directly - never your name, contact details or anything you typed. We can still link that reference back to your former account, so we keep treating the record as personal information; we do not claim it is anonymous. Ask us at [email protected] (with your order number) if you would rather we deleted it outright.

Learn more

Full detail - including your rights, retention, overseas disclosure and how to make a privacy complaint - is in our Privacy Policy. Questions: [email protected].