Tasti Desk is a back-office tool for cafés and restaurants, run by Tasti.io in Vancouver, British Columbia. This policy explains what we collect, why, where it is kept and what you can ask us to do with it. We follow Canada’s PIPEDA and British Columbia’s Personal Information Protection Act.
The short version: your venue’s data is yours, it is stored in Canada, it is never shown to other venues, and we never sell it.
Two roles
For your own account (your name and email) we are responsible for the information. For the information you put into Desk about your venue and your team, your business is responsible for it and we process it on your behalf, only to run Desk for you. If a team member asks about their information, we will help you answer them.
What we collect
- Your account: name and email from Google sign-in or the email you sign in with.
- Your venue: name, address, province, opening hours and settings.
- Your team, as you enter it: names, roles, hourly wages, preferred hours, availability, optional emails, shifts and day-off requests.
- From Square, if you connect it (read-only): your business name and locations, completed orders (stored as hourly and per-item totals, not individual receipts or card details), menu items and prices, and team members and timecards. Desk never creates, changes or refunds anything in your Square account.
- Billing: handled by Stripe. We keep your Stripe customer and subscription IDs, plan and renewal date. Your card number goes straight to Stripe; we never see or store it.
- A change history: who changed what and when (for example a venue rename or a published schedule), so you can trust what you see.
- Technical basics: sign-in cookies and the standard request logs our hosting keeps to run and protect the service. A light/dark preference is stored in your own browser.
We do not use advertising trackers, and we do not build profiles of you or your staff.
What we use it for
- Running the features you use: schedules, coverage and pay checks, sales and labour figures, forecasts.
- Keeping your account secure, and billing.
- Writing to you about your account, billing and important changes. No marketing email without your consent.
- Improving Desk. We learn from how features are used and from your corrections, but we do not use your venue’s data in another venue’s results. Any cross-venue benchmark (for example “typical food cost for cafés in BC”) will be optional, anonymous and aggregated, and we will ask before including you.
Avo, the AI assistant
When you use Avo, the parts of your venue’s data needed to answer are sent to our AI provider, Anthropic, to generate a response. Anthropic does not use this data to train its models. Avo only suggests; nothing in Desk changes until you confirm it.
Who processes data for us
- Supabase: database and sign-in. Your data is stored in Canada (Montréal region).
- Vercel: hosts the app and serves pages, which may pass through servers outside Canada.
- Stripe: payments and invoices.
- Square: only if you connect it, to read your sales, menu and team.
- Google: only if you sign in with Google.
- Anthropic: only when you use Avo.
Some of these companies may process information in the United States, where it can be subject to local law. Each is bound by contract to protect it and use it only to provide its service to us.
How we protect it
- Every venue’s records are separated in the database itself, and we test that one venue cannot read or change another’s.
- Connection tokens (such as Square’s) are encrypted before they are stored, and are never sent to your browser.
- Owners and managers see wages and sales; staff access is limited.
- Data is encrypted in transit and at rest.
No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell you and the regulator as the law requires.
How long we keep it
While your account is open. If you close it, we delete your venue’s data within 30 days, except what we must keep for tax and accounting (billing records, usually up to 7 years) and backups, which roll off within a further 30 days. Disconnecting Square stops new imports immediately; you can ask us to delete imported sales too.
Your choices
- See, correct or export your information.
- Disconnect Square or other connections at any time in Settings.
- Close your account and have your data deleted.
- Withdraw consent for anything optional.
Email hello@tasti.io and we will reply within 30 days. If you are not satisfied, you can contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.
Changes
If we change this policy in a way that matters, we will tell account owners by email at least 30 days before it takes effect.