Privacy Policy

Last updated: June 30, 2026

1. Introduction

This Privacy Policy governs how TableMaestro (hereinafter: “we”, “us”, “our”, or “platform”) collects, uses, processes, and protects users' personal data when using our platform available at tablemaestro.rs and app.tablemaestro.rs.

By using our platform, you confirm that you have read, understood, and agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use our platform.

2. Who Manages the Data

TableMaestro is an internet platform managed by an individual (unregistered entity) based in the Republic of Serbia. Contact information is listed in the Contact section at the bottom of this page.

3. What Data We Collect

During registration and platform use, we may collect the following data:

• Account data: name, surname, email address, password (hashed), profile picture (optional).
• Event data: event name, event type (wedding, restaurant, etc.), date, location, description, table arrangement, guest data (name, surname, email, phone number, RSVP status, allergies, notes).
• Payment data: subscription data, transactions, and payment status are processed through — Lemon Squeezy. We do not store and have no access to your credit/debit card data.
• Technical data: IP address, browser type, operating system, access time, pages visited within the platform.
• Usage data: interactions with platform features (e.g., creating tables, inviting guests, sending RSVP messages).

4. Purpose of Collection and Processing

We process your data exclusively for the following purposes:

• Creating and managing your user account
• Providing platform functionality (seating arrangement, RSVP system, guest management)
• Processing subscriptions and payments (via Lemon Squeezy)
• Sending transactional emails (registration confirmation, password reset, RSVP notifications) — via Brevo service
• Analytics and platform improvement
• Fulfilling legal obligations

We do not sell, rent, or share your data with third parties for marketing purposes.

5. Legal Basis for Processing

Processing of your data is based on the following legal grounds:

• Contract performance: processing necessary to provide platform services (Art. 12, Para. 1, Item 2 of the RS Data Protection Law).
• Consent: for certain activities (e.g., sending promotional emails — if ever introduced) we request your explicit consent.
• Legitimate interest: usage analytics, platform security, fraud prevention.

6. Cookies

Our platform uses the following types of cookies:

• Essential cookies: enable basic functionality (session, authentication). The platform cannot function without them.
• Analytical cookies: Google Analytics (GA4) — anonymous collection of visit and usage data for platform improvement.

You can disable cookies in your browser settings, but this may affect platform functionality.

7. Third Parties and Services

In providing services, we use the following third-party services:

• Lemon Squeezy — payment processing and subscription management. Lemon Squeezy Privacy Policy.
• Brevo (formerly Sendinblue) — transactional email service. Brevo Privacy Policy.
• Google Analytics — public website visit analytics. Google Privacy Policy.
• MongoDB — database software (hosted on Hetzner servers in Frankfurt).

We assume no liability for the privacy policies, practices, or content of third-party services. We recommend familiarizing yourself with their privacy policies before use.

8. Data Storage and Protection

Your data is stored on Hetzner servers in Frankfurt, Germany (European Union).

We apply standard technical and organizational protection measures: data encryption in transit (HTTPS/TLS), password hashing (bcrypt), database-level access control, and regular security updates.

Despite measures taken, no system is 100% secure. We cannot guarantee absolute security of your data and assume no liability for unauthorized access, loss, modification, or destruction of data due to circumstances beyond our reasonable control, including but not limited to: hacker attacks, force majeure, equipment failures, third-party software errors.

9. Data Retention Period

We retain your data only as long as necessary to fulfill the purpose of processing:

• Account data: while the account is active. Upon account deletion, data is permanently deleted within 30 days.
• Event and guest data: until you delete the event or account. Upon your request, we delete them immediately.
• Payment data: in accordance with Lemon Squeezy policy and applicable tax regulations.
• Technical data (logs): up to 12 months.

10. Your Rights

In accordance with the RS Data Protection Law and GDPR (where applicable), you have the following rights:

• Access: right to know what data we process.
• Rectification: right to correct inaccurate data.
• Erasure: right to deletion of data (“right to be forgotten”).
• Restriction of processing: right to request restriction of processing.
• Portability: right to receive your data in a structured format.
• Objection: right to object to data processing.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of the above rights, contact us via the information in the Contact section.

11. Children's Privacy

Our platform is not intended for persons under 16 years of age. We do not knowingly collect data from persons under 16. If you are a parent or guardian and believe your child has provided personal data without your consent, contact us and we will immediately remove it.

12. Data Security

We inform you that data is transmitted and stored on the internet — a medium that is not completely secure. While we make commercially reasonable efforts to protect your data, we cannot guarantee the security of data transmitted to our platform. Any data transmission is done at your own risk.

13. Disclaimer of Liability

The TableMaestro platform is provided “AS IS” and “AS AVAILABLE”, without any warranties, express or implied, including but not limited to warranties of fitness for a particular purpose, accuracy, reliability, or non-infringement of rights.

Under no circumstances shall TableMaestro, its owner, administrators, associates, or affiliated parties be liable for any damages (direct, indirect, incidental, consequential, special, or punitive) arising from or in connection with platform use, including but not limited to: data loss, loss of profit, business interruption, privacy violation, unauthorized data access, as well as any damages resulting from errors, omissions, service interruptions, file deletion, viruses, delays in operation or transmission.

By using this platform, you expressly accept that your use is at your own risk and that you are solely responsible for any damages that may occur.

14. Policy Changes

We reserve the right to modify this Privacy Policy at any time, without prior notice. The modified policy takes effect immediately upon posting on this page. The date of the last modification is indicated at the top of this page. It is your responsibility to regularly review this policy. Continued use of the platform after changes constitutes acceptance of the modified policy.

---

15. Contact

For any questions, requests, or complaints regarding this Privacy Policy, you can contact us:

• Email: podrska@tablemaestro.rs
• Address: TableMaestro, Republic of Serbia (individual — full address available upon request)

We will respond to your inquiry within 30 days of receipt.

---

Also read: Terms of Service  |  Serbian version