Privacy policy

Two groups of people appear in this policy, and they are treated differently.

Restaurants are our customers. They create an account, run a storefront and pay us a subscription fee.

Dinersare their customers. They order from a restaurant's storefront. For their information, the restaurant is the party that decides what is collected and why; Provn processes it on the restaurant's behalf.

Account details — name, email address and password — so you can sign in. If you sign in with Google, we receive your name, email address and profile picture from Google and never see your Google password.

Business details — legal and trading name, address, phone number, province and tax registration numbers — because these determine how your orders are taxed and how your storefront presents you.

Content you create: menus, photos, opening hours, homepage copy and theme choices.

Operational records: audit entries for staff and settings changes, including the IP address and browser the change came from.

Contact details needed to fulfil an order: phone number, and for delivery, a name and address. An email address if one is given for order updates.

Order contents, totals, tax breakdown and fulfilment method, stored against the restaurant the order was placed with.

We do not collect card numbers. Payment details are entered directly into Stripe's hosted fields and Provn receives only a token and the last four digits.

To provide the service: showing a menu, taking an order, charging for it, dispatching a courier and telling everyone involved what is happening.

To meet legal obligations: tax records and financial records have retention periods we do not get to choose.

To keep the service working: diagnosing faults, preventing abuse and understanding which features are used.

We do not sell personal information, and we do not market to a restaurant's diners on our own behalf.

The restaurant you ordered from receives the order and the contact details needed to fulfil it. That is the point of the service.

Stripe processes payments and holds the payment relationship. Their privacy policy governs card data.

Uber Direct receives a pickup address, a dropoff address and a contact number when a courier is dispatched for a delivery order — and only then.

Supabase hosts our database and authentication. ZeptoMail sends transactional email. Google Maps geocodes addresses so delivery distances can be measured.

We may disclose information where the law requires it, and will tell the affected party unless we are prohibited from doing so.

Provn is built for Canadian restaurants, but some of our processors operate infrastructure outside Canada. Where personal information crosses a border, it remains subject to this policy and to our agreements with those processors.

Order and tax records are retained for as long as Canadian financial record-keeping rules require.

Account content — menus, photos, settings — is kept while the account is open, and remains exportable after cancellation until deletion is requested.

Diner records are held on behalf of the restaurant and are deleted when the restaurant deletes them or closes its account.

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@provn.app.

If you are a diner asking about an order, the restaurant is the right first stop — they can act immediately, and we will forward your request to them if you write to us instead.

If you are unsatisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada.

We set cookies that are necessary for the service to function: keeping you signed in, remembering your cart, and preserving your place through a sign-in redirect.

We do not run third-party advertising trackers on storefronts.

If we make a material change we will update the date at the top of this page and notify account holders by email before it takes effect.

Privacy questions: privacy@provn.app. Anything else: team@provn.app.