Privacy policy
Last updated: September 28, 2026
LE POISSON BLEU (SASU, 60 rue François Ier, 75008 Paris, France), publisher of Tably, is the controller of the personal data processing described below. We only collect what the service needs to work. This is a translation: in case of discrepancy, the French version prevails.
1. Restaurant owners' data (our customers)
Account e-mail address and password (never stored in plain text); content of your establishment and menu (name, address, phone, dishes, photos); billing data (company name, address, VAT number); date you accepted the terms of sale; technical logs (IP address, date and time of sign-ins). Your card details are processed by Stripe and never reach us.
2. Restaurant guests' data
Viewing a menu requires no account. No advertising cookie or tracker is used: only technical data (IP address, browser type) is processed transiently to display the page and protect the service against abuse. The chosen language is remembered in the browser.
3. Purposes and legal bases
Providing the service and managing your account (performance of the contract); invoicing and bookkeeping (legal obligation); sending service e-mails — password reset, end of trial, payment reminders (performance of the contract); securing the service and preventing abuse, for example by limiting requests and AI usage (legitimate interest). We send no marketing without your consent and sell no data.
4. Recipients and processors
Your data is processed on our behalf by: Vercel Inc. (site hosting, United States); Supabase (database and authentication, hosted in the European Union, in Ireland); Stripe (payment and invoicing); OpenAI (menu photo import and automatic translation: only your menu's photos and texts are sent, never your contact details; under its terms, OpenAI does not use data received through its API to train its models); Resend (e-mail delivery). If you order stickers from your dashboard, Printful (printing and shipping, production in the European Union) receives the recipient's name, delivery address, phone number and e-mail. Sentry (technical error monitoring, data hosted in the European Union) receives the technical details of an error, without personal data.
5. Transfers outside the European Union
Some providers (Vercel, Stripe, OpenAI, Resend) are based in the United States. These transfers are covered by the EU–US Data Privacy Framework where the provider is certified and, otherwise, by the European Commission's standard contractual clauses. Printful, which prints the stickers, is also a US company; the same safeguards apply.
6. Retention periods
Account and menu: while the account is active, then deleted when the account is closed (the menu is also deleted 90 days after an unpaid due date). Invoices and accounting records: 10 years (article L123-22 of the French Commercial Code). Technical logs: limited period, 12 months at most. So that each free trial is used only once, an irreversible fingerprint (hash) of the e-mail address is kept for 3 years, including after the account is deleted.
7. Cookies
We use strictly necessary cookies (session to keep you signed in, language), which require no consent. On the website's presentation and sign-up pages only — never on the menus viewed by restaurant guests — and only if you accept it in the banner, we also use Google Analytics (Google Ireland Ltd) to measure traffic, and the Meta pixel (Meta Platforms Ireland Ltd) to measure how well our ads perform on Facebook and Instagram. Your choice is kept for 6 months; you can change it at any time via "Manage cookies" at the bottom of the page. Audience data is kept for 14 months, and the Meta pixel cookie expires after 90 days.
8. Security
Traffic is encrypted (HTTPS), data access is isolated per establishment directly in the database, and passwords are never stored in plain text.
9. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. You can delete your account yourself from your settings, or exercise your rights by writing to us (see Contact below). If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
Contact
Questions about these terms or your data? Email us at contact@lepoissonbleu.pro.