Privacy Policy

Last updated: December 7, 2025

1. Introduction

FullTable, Inc. ("FullTable," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our customer engagement and reputation management platform and related services.

By using our services, you agree to this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

  • Name and contact details (email address, phone number)
  • Business and location information
  • Payment details (processed securely via Stripe)
  • Account login and authentication data
  • Customer feedback, review information, and conversation history
  • Contact CRM data including tags, notes, and customer interactions

2.2 Usage Information

When you access or use our platform, we automatically collect:

  • Device information, browser type, and IP address
  • Pages visited and features used
  • Date, time, and duration of access
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and improve our services
  • Process payments and manage subscriptions
  • Send SMS messages for service notifications, review requests, marketing campaigns, and customer support
  • Deliver customer support and account communications
  • Comply with applicable laws and enforce our Terms of Service
  • Analyze usage to improve performance and features
  • Send important updates or service notifications
  • Enable AI-powered features such as auto-reply and review response generation

3.1 AI and Automated Processing

We use artificial intelligence and machine learning to provide features such as automated review response generation and intelligent auto-replies. These AI features process your content (review text, customer messages) to generate suggestions and responses. AI processing is done to improve service quality and is not used for automated decision-making that significantly affects your rights.

You have the right to opt out of AI-generated content or request human review of any AI-generated suggestions. Contact us at wesley@fulltableapp.com to exercise these rights.

4. SMS Communication and Consent

FullTable uses Twilio to send text messages for service notifications, review requests, marketing campaigns, and customer support communications.

4.1 Consent

By providing your phone number to a participating business or through our platform, you consent to receive automated, service-related text messages. Marketing messages require separate explicit opt-in consent. Consent is not a condition of purchase.

Consent is collected verbally or digitally and is logged for compliance purposes under the Telephone Consumer Protection Act (TCPA) and CTIA guidelines.

4.2 Opt-Out

You may opt out of SMS messages at any time by replying "STOP" to any message. You will receive a confirmation message and no further texts will be sent (except for critical account-related communications). You may also contact the business directly for assistance.

4.3 Message Handling

We retain SMS message logs (including sender, recipient, timestamps, and delivery status) through Twilio, our trusted SMS provider, to ensure system reliability and regulatory compliance. Message content is used for service delivery, customer support, and marketing (with proper consent). All marketing messages require explicit opt-in.

5. Information Sharing and Disclosure

We do not sell or rent your personal information. We may share data in the following circumstances:

  • Service Providers: With trusted partners such as Stripe (payments) and Twilio (SMS delivery) to operate core platform functions.
  • Third-Party Integrations: When you connect Google Business Profile or Facebook Business accounts, we share necessary data (business information, review data) with Google and Meta to provide integration services. These integrations are subject to Google's and Meta's respective privacy policies.
  • Legal Compliance: When required by law or valid legal process.
  • Business Transfers: If FullTable undergoes a merger, acquisition, or asset sale.
  • Consent: When you explicitly authorize us to share information for specific purposes.

All third-party partners are contractually required to handle your information securely and in accordance with applicable data protection laws.

Third-Party Privacy Policies: For information about how Google and Meta handle your data, please review their privacy policies:Google Privacy Policy andMeta Privacy Policy.

6. Data Security

We use industry-standard measures to protect your data, including:

  • Encryption in transit and at rest
  • Role-based access controls
  • Secure authentication mechanisms
  • Regular system audits and vulnerability testing

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

6.1 Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law. We will notify affected users within 72 hours of becoming aware of the breach, where feasible, and provide information about the nature of the breach, the data affected, and steps we are taking to address it.

7. Data Retention Policy

We retain personal and business data only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Our retention periods are based on the type of data and applicable legal requirements.

7.1 Account and Business Data

We retain account information, business profiles, and location data for as long as your account is active. After account termination, we retain this data for up to 90 days to allow for account recovery, then securely delete it unless we are required to retain it for legal or regulatory purposes.

7.2 SMS and Communication Data

SMS message logs, conversation history, and related communication data are retained for the duration of your account and up to 3 years after account termination to ensure service continuity and compliance with telecommunications regulations.

7.3 Consent and Opt-In Records

Opt-in and opt-out records, including consent documentation, are retained for at least three (3) years for compliance with TCPA, CTIA guidelines, and other telecommunications regulations. This includes records of when and how consent was obtained.

7.4 Review and Feedback Data

Review data, feedback submissions, and related analytics are retained for as long as your account is active and up to 2 years after account termination, unless you request earlier deletion or we are required to retain it for legal purposes.

7.5 Payment and Transaction Data

Payment information is processed securely through Stripe and is subject to their retention policies. We retain billing records and transaction history for 7 years to comply with tax and accounting regulations.

7.6 Usage and Analytics Data

Aggregated usage data and analytics are retained for up to 2 years to improve our services. This data is anonymized and does not identify individual users.

7.7 Data Deletion Requests

You may request deletion of your personal data at any time by contacting us atwesley@fulltableapp.com. We will honor such requests within 30 days, except where we are required to retain data for legal, regulatory, or legitimate business purposes (such as maintaining transaction records for tax compliance).

7.8 Legal and Regulatory Requirements

We may retain certain data beyond the periods described above when required by law, regulation, court order, or to protect our legal rights. This includes data related to ongoing disputes, investigations, or compliance with government requests.

8. Legal Basis for Processing (GDPR Notice)

If you are located in the European Economic Area (EEA), we process your information based on one or more of the following legal bases:

  • Your consent
  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate business interests (e.g., improving our services)

9. International Data Transfers

We and our service providers (including Twilio and Stripe) may process and store your data in the United States or other countries. We take steps to ensure that data transferred internationally is protected under appropriate safeguards, such as the EU Standard Contractual Clauses.

10. Your Rights and Choices

Depending on your location, you may have the right to:

  • Access and obtain a copy of your personal data
  • Correct or delete inaccurate information
  • Restrict or object to processing
  • Withdraw consent at any time
  • Request data portability

To exercise these rights, please contact us using the information provided in Section 15 (Contact Information).

We will respond to your request within 30 days, or as required by applicable law. We may require verification of your identity before processing certain requests.

11. Cookies and Tracking

We use cookies and similar tracking technologies to improve user experience, analyze site performance, and provide personalized content.

11.1 Types of Cookies We Use

  • Essential Cookies: Required for the platform to function (authentication, security, session management)
  • Analytics Cookies: Help us understand how visitors interact with our platform
  • Preference Cookies: Remember your settings and preferences

11.2 Managing Cookies

You can manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling essential cookies may affect platform functionality and prevent you from accessing certain features.

11.3 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Currently, there is no industry standard for responding to DNT signals. We do not currently respond to DNT browser signals.

12. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a child under 13, we will delete it promptly.

13. Your California Privacy Rights (CCPA)

If you are a California resident, you may have additional rights regarding access, deletion, and disclosure of personal information under the California Consumer Privacy Act (CCPA). To submit a request, contact wesley@fulltableapp.com.

14. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top reflects the latest version. Continued use of our services after updates constitutes acceptance.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days. For formal data subject requests (access, deletion, etc.), please include "Data Subject Request" in your subject line and provide sufficient information to verify your identity.

FullTable | Customer Engagement & Reputation Management Platform