Privacy Policy
This policy explains what we collect when you use dineplenty.com, why, and your choices. Last updated November 1, 2026.
1. What we collect
- 1.1When you sign up: your name, email address, mobile number, home city and a password (stored only as a secure hash by our login provider).
- 1.2When you join a waitlist: your email address, ZIP code and, if you give it, your mobile number. We use the number to keep your place and perks tied to one person, and we only text it if you tick the SMS consent box.
- 1.3Your bookings, cancellations, credits, favorites, alerts and reviews, and any dietary notes or requests you add to a booking.
- 1.4Payments are handled by Stripe; we never see or store your full card number.
- 1.5Technical data: your IP address and browser details, used to keep you logged in, protect the site from abuse and fix problems; and usage analytics (pages viewed, features used) through PostHog, which you can block in your browser.
2. Why we use it
- 2.1To run your bookings: confirming them, telling the restaurant who's coming, sending reminders, handling cancellations and credit.
- 2.2To keep the service fair and safe (for example no-show limits and abuse protection), to improve the site, and to meet legal and tax duties.
3. What restaurants see
- 3.1For each booking: your first name and last initial, your mobile number (so they can reach you about the table), party size, booking code, special requests and any dietary notes you add.
- 3.2If you tick the box at booking to hear from that restaurant, it also sees your full name and email. You can stop this at any time from your account page.
- 3.3Private reviews are shared with the restaurant and our team only. Public reviews appear on the restaurant page without your name.
4. Ratings restaurants give you
- 4.1After each visit the restaurant rates the booking (Fantastic, Fine, Terrible or No-show). Ratings are visible to that restaurant and to us, not to other restaurants or diners.
- 4.2A Terrible rating removes you from that restaurant's mailing list. 3 no-shows in 12 months pause your account.
5. Email
- 5.1We send booking emails (confirmations, reminders, cancellations, credit notices) because you need them. Reminders and slot alerts can be turned off in Account settings.
- 5.2Marketing email only if you opt in.
6. Text messages
- 6.1Diners: we text you only if you give a mobile number and tick an SMS consent box. There are two separate boxes: one for booking texts (confirmations, same-day reminders and a post-meal rating request) and one for marketing texts (up to 2 per week about available tables near you; texting START or JOIN to our number also opts you in). Each consent is kept with the time you gave it. See /sms for the full program.
- 6.2Restaurants: we text the numbers a restaurant entered for that purpose about its bookings (a new booking or a cancellation).
- 6.3Message frequency varies. Message and data rates may apply. Reply STOP to stop texts at any time, or HELP for help. Mobile numbers and text consent are never sold or shared with third parties or affiliates for their marketing.
7. Your rights
- 7.1Download all your data or delete your account from Account settings. Deleting removes your personal details and forfeits any remaining credit; booking and payment records are kept without your details for tax and accounting. You must cancel upcoming bookings first.
- 7.2California residents have the right to know what personal information we hold about them, to get a copy, to correct it and to delete it, and not to be treated differently for using these rights. Use Account settings, the form at dineplenty.com/data-request, or write to team@dineplenty.com; we'll verify the request comes from you and answer within 45 days.
- 7.3We do not sell your personal information or share it for cross-context behavioral advertising.
8. Who we share with
- 8.1The restaurant you book with, as described above.
- 8.2Service providers that run the product for us, under contracts that limit their use of it: Supabase (database and login), Stripe (payments), Resend (email), Twilio (text messages), PostHog (analytics), Upstash (abuse protection), Vercel (hosting) and Google Maps (restaurant addresses and maps).
- 8.3Authorities, when the law requires it, or to protect people from harm or fraud.
- 8.4Mobile phone numbers collected for SMS consent are used only to send the messages described in our Terms and are not shared with third parties or affiliates for their marketing purposes.
- 8.5Mobile phone numbers and SMS opt-in data are never shared with or sold to third parties or affiliates for marketing purposes.
9. Cookies
- 9.1We use cookies to keep you logged in and remember your choices, and PostHog uses them for analytics. We don't use advertising cookies.
10. Keeping it safe and how long
- 10.1Your data is stored in the United States, encrypted in transit, and only our team can reach it. No system is perfectly secure; we'll tell you promptly if a breach affects you.
- 10.2We keep your account data while your account is open. Booking and payment records are kept for as long as tax and accounting rules require, without your personal details after you delete your account.
11. Children, changes and contact
- 11.1DinePlenty is for adults (18+). We don't knowingly collect data from children.
- 11.2We'll update this page when our practices change and email you about material changes. Questions: team@dineplenty.com.