Our DPA, available on request
When you use Ontabee, we process your diners' personal data on your behalf. A Data Processing Agreement (DPA) sets out how. The summary below reflects our standard terms; the signed agreement is available on request.
If you need a signed DPA — common for agency, multi-location, and enterprise agreements — email [email protected] and we’ll send our current DPA for signature.
Roles
For your diners' personal data, you are the data controller and Ontabee (Ontabee Solutions Pvt. Ltd.) is the processor, processing it only on your documented instructions.
Scope & purpose of processing
Subject matter: operating your online ordering. Nature: storing and processing menus, customer profiles, and orders; routing transactional messages through your configured providers. Duration: the life of your account plus the retention window in our Privacy Policy.
Sub-processors
We use only the sub-processors needed to run the service (cloud hosting; the platform-tier email service for account/billing messages). Your customer-facing payment, SMS, email, maps, and push run through your own configured providers.
Security measures
Encryption in transit; provider credentials encrypted at rest in a secrets vault; tenant isolation; role-based access; audited administrative access; rate limiting. See the Security page.
Data-subject requests & breach notification
We assist you in responding to access, export, and deletion requests, and will notify you without undue delay on becoming aware of a personal-data breach affecting your data.
International transfers & residency
Production data can be hosted in the region you select at onboarding (EU, India, or GCC). Where transfers occur, appropriate safeguards apply.
Return & deletion on termination
On termination you can export everything during a 30-day offboarding window, after which we delete or anonymize your data per the Privacy Policy.
Data controller contact: Ontabee Solutions Pvt. Ltd., 09, Om Ganesh Nagar 3rd Cross W, East, Vadavalli, Coimbatore, Tamil Nadu 641041, India.