Privacy policy
This policy explains what personal data Maploft Ltd ("we", "us") processes when you visit posboard.app or use Posboard, and why. Maploft Ltd is registered in the United Kingdom (company no. 17142711), Suite A, 82 James Carter Road, Mildenhall, Suffolk IP28 7DE. You can contact us about your data at privacy@maploft.com.
Our role
For the account and billing data of our customers, and for visitors to this website, we are the data controller. For personal data that a restaurant puts into Posboard (for example the names and email addresses of its staff), the restaurant is the controller and we process that data on its behalf as a processor.
What we collect
- Account data: the email addresses and roles of the people a restaurant invites, and when they sign in.
- Restaurant data: the restaurant's name and menu data read from its POS (products, prices, categories). We do not read sales, customer or payment data from the POS.
- Editor data: the messages you write to the assistant, the changes it makes, and the history of published changes.
- Billing data: the billing contact, company details, invoices and payment status. Card details are handled entirely by our payment provider and never reach us.
- Technical data: request logs (IP address, time, page, browser) kept briefly for security and to fix problems.
This website does not use advertising or analytics cookies. The editor uses a sign-in cookie that is strictly necessary to keep you logged in.
Why we use it
- To provide the service you subscribed to (performance of our contract with you).
- To bill you and keep accounting records (contract and legal obligation).
- To keep the service secure and working, and to answer your questions (our legitimate interests).
Who we share it with
We use these service providers, who process data for us under data protection agreements:
- Cloudflare: hosting, database, sign-in and email delivery.
- OpenRouter and the AI model providers it routes to (such as Anthropic): to run the assistant. They receive your messages to the assistant and the menu files being edited.
- GitHub: stores the source of your menu screens and the history of changes.
- Our payment provider: card payments and invoices.
- Your POS provider: we read your menu data from it with your permission.
Some of these providers process data outside the UK and EEA, for example in the United States. Where they do, the transfer is covered by adequacy regulations or standard contractual clauses.
How long we keep it
- Account, menu and editor data: while your subscription is active, and up to 12 months after it ends (or sooner, on request).
- Invoices and billing records: as long as UK accounting law requires (currently 6 years).
- Request logs: up to 30 days.
Your rights
Under UK and EU data protection law you can ask to see, correct, delete or export your personal data, and object to or restrict how we use it. Email privacy@maploft.com. If you are not happy with our answer, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to your local data protection authority, which in the Czech Republic is the Úřad pro ochranu osobních údajů (uoou.cz).
Changes
If we change this policy, we will update the date at the top. If a change is significant, we will also email account owners.