Privacy policy
Last updated: September 2026
Who we are
À compléter (raison sociale) ("Taplo") provides cafés and restaurants with a table-ordering and management solution. This policy explains which data we process and why, in line with Moroccan law 09-08 on personal data protection.
Data we process
Guests: orders placed from the table (items, amounts, time). No account is required. If you choose to: your phone number (loyalty card) and your review.
Venue staff and managers: name, login, role, and actions taken in the app (payments, cancellations, stock and cash movements).
Prospects: name, phone, venue and message sent through the demo form.
Why
To run the service: send, track and settle orders.
Loyalty and reviews, only if the guest uses them.
Security and internal control for venues (traceability of payments and cancellations).
To contact you after a demo request.
Who can access it
The venue where you order can access its own orders and customers. Taplo acts on its behalf as a processor.
Our technical providers (hosting, WhatsApp messaging, AI for reading menus), only as needed. We never sell your data.
Retention
Order data: as long as the venue's accounting obligations require.
Loyalty number: while the card is used, then at most 24 months of inactivity.
Demo requests: 12 months.
Cookies
We only use strictly necessary cookies and local storage: staff login session, chosen language, current cart and offline mode. No advertising or analytics cookies.
Your rights
You have the right to access, correct and object. Write to contact@gotaplo.com. You may also contact the CNDP (www.cndp.ma).
If you are in the European Union or the United Kingdom, the GDPR / UK GDPR also applies: you additionally have the rights to erasure, restriction and portability, and may complain to your country's data protection authority.