Legal

Privacy Policy

Updated 29 October 2026

Spacebar provides storefront, merchant workspace, ordering, customer communication and operational tools for participating businesses. This policy explains how Spacebar handles personal data across the Spacebar website, merchant portal and Spacebar Merchant mobile apps.

Data we handle

• Merchant account data such as name, business email, authentication details, store membership and account settings.
• Store and order data such as catalogue items, availability, order contents, totals, status, fulfilment details and operational notes.
• Customer order data provided to a merchant, which can include name, phone number, email address, delivery address, table number and order notes.
• Device and notification data such as push notification tokens, platform, notification preferences and app version.
• Security and technical data such as IP address, request logs, error details and information needed to prevent abuse.

How we use data

We use data to authenticate merchants, display and process orders, keep authorised devices in sync, send operational notifications, provide support, maintain security, improve reliability and comply with legal obligations. Customer order data is shown only to the relevant merchant and authorised Spacebar operators who need it to provide the service.

Public business pages

When you publish a page, your business name, public phone, location, description and menu become visible to visitors and search engines. Your account email is used for access and account communication and is not published as part of your listing. Unpublished setup drafts may be stored locally in your browser so you can resume. Contact help@spacebar.ae to request removal of a public page.

Service providers

Spacebar uses service providers to operate the platform, including Supabase for authentication and database services, Cloudflare for hosting and security, Apple Push Notification service and Firebase Cloud Messaging for notifications, Meta for opted in WhatsApp communication, and Resend for applicable service email. These providers process data only for the services they supply and under their own applicable terms.

Advertising and tracking

The Spacebar Merchant apps do not sell personal data, use cross app advertising identifiers or track merchants across unrelated apps and websites. The public Spacebar website may use basic analytics to understand visits and improve performance.

Retention and security

We retain account, order and operational records for as long as needed to provide the service, resolve disputes, meet legal and accounting duties and protect the platform. We use access controls, encrypted network connections and restricted production credentials. No online service can guarantee absolute security.

Your choices and rights

You may request access, correction or deletion of personal data associated with your account, subject to legal and operational retention requirements. Merchants remain responsible for responding to their own customers when they control the relevant order data.

Children

Spacebar Merchant is a business operations service and is not directed to children.

International processing

Our service providers may process data in countries outside your location. We use reputable providers and applicable safeguards for those transfers.

Contact

Changes

We may update this policy as the service or legal requirements change. The effective date above identifies the current version.