Privacy Policy

1. Who are we?

Diiing is published by Brain Flow Limited, Private Company Limited by Shares, CRO 809326, The Old Station House, 15A Main Street, Blackrock, Dublin, A94 T8P8, Ireland. Brain Flow Limited is the controller of the data described on this page. For any question about your data: dpo@diiing.app.

2. Who is this page for?

Visitors of www.diiing.app and the restaurant owners and professionals who use Diiing (our “customers”).
— You received an email from us without being a customer: see Data of professionals we contact.
— You booked, ordered or paid in a restaurant that uses Diiing: the restaurant is responsible for your data, and Diiing acts on its behalf. See the booking service privacy policy.

3. When you visit the website

The website is hosted by Cloudflare, which processes your IP address and technical connection information to serve the pages and protect the website. To know which pages are read and where visitors come from, we use Cloudflare Web Analytics: cookieless audience measurement that only produces aggregate statistics (page views, referring sites, country, device type), with no visitor profile. The website uses no advertising tracker. It sets a single cookie, lang-choice, and only if you choose the website language: it remembers it for 1 year.

4. When you write to us (chat, contact form)

The chat and the contact form run on Crisp (Crisp IM SAS, France). Crisp only loads if you open the chat or send the form: it then sets its own cookies to keep track of your conversation. We receive your business name, your email, your phone number if you provide it and your message, in order to reply to you (steps taken at your request or legitimate interest). Exchanges are kept for 3 years after the last contact.

5. When you use Diiing (customer account)

Data: your first name, last name, email and password (stored in an unreadable form); your business details (name, address, phone) and, if you select it at sign-up, the public information of its Google listing; your subscription and invoices (your card is entered on Stripe: we never see or store it); connection data (IP address, browser, sessions); the devices on which you enable notifications; our exchanges; how you signed up (referral, promo code, partner, campaign).
Why: to provide the service and support (performance of the contract); to manage the subscription, billing and accounting (contract and legal obligations); to send service emails, including getting-started help (contract); to secure accounts and prevent abuse, measure the effectiveness of our sales efforts and improve the service (legitimate interest).
Application cookies: those needed for sign-in and security (session, form protection, “remember me”, selected business); and, if you arrive through a referral or partner link, a promo code or a link in our emails, a cookie that remembers it until you sign up (30 days, 90 days for our emails).
How long: as long as your account exists, then 3 years after it is closed; invoices and accounting records for the period required by law (6 years).

6. Our providers

They process data on our behalf, according to our instructions and under a contract:
— hosting of the application and its data, on servers located in France;
— hosting of the website, domain names and website audience measurement (Cloudflare);
— payments: subscriptions, card holds (Stripe) and pay at the table;
— sending of service emails and email;
— search for your business at sign-up (mapping service);
— AI reading and translation of the menus you import;
— chat and contact form (Crisp);
— application font;
— your browser's notification services, for the notifications you enable.
Some of these providers are located outside the European Union, notably in the United States: these transfers are covered by the safeguards provided for by the GDPR (EU-US Data Privacy Framework or the European Commission's standard contractual clauses). The list of our providers by name is available on request at dpo@diiing.app. Your data is never sold.

7. Your rights

You can access your data, have it corrected or deleted, restrict its use, object to processing based on our legitimate interest, and receive the data you provided in a common format. To do so, or to close your account, write to dpo@diiing.app. We reply within one month.

8. Complaints

You can lodge a complaint with the data protection authority of your country (in France, the CNIL: cnil.fr). The lead supervisory authority for Brain Flow Limited is the Irish Data Protection Commission (dataprotection.ie).

9. Security

Exchanges with the website and the application are encrypted (HTTPS), passwords are never stored in clear text and access to data is limited to the people who need it.

10. Changes

This page may change, in particular if we change providers. The date of the last update is shown at the top of the page.