TableAgent LLC, doing business as TableAgent ("TableAgent," "we," "us," or "our"), operates the TableAgent restaurant-reservation platform and related websites, mobile sites, booking widgets, account dashboards, and services (collectively, the "Services").
This Privacy Policy explains the personal information we collect, how we use and disclose it, the choices available to you, and the rights that may apply under privacy laws where you live.
TableAgent separates reservation-form information from advertising technologies and limits the information provided to analytics services.
On pages where diners enter or submit reservation information, including booking widgets, guest-contact forms, special-request fields, payment or card-hold steps, and checkout flows, TableAgent does not load advertising tags, advertising pixels, session-replay technologies, or Raptive advertising code. Google Analytics may be present on these pages to collect limited technical and general usage information, but it is not configured to collect or receive information entered into reservation forms or reservation-specific details.
Information entered on these pages is used to provide, administer, secure, and support the reservation service; transmit the reservation to the restaurant selected by the diner; communicate about the reservation; process a payment, deposit, or card hold when applicable; prevent fraud and misuse; and comply with legal obligations.
TableAgent does not sell reservation information or share reservation information for cross-context behavioral advertising. Information entered into reservation forms is not provided to Google Analytics, Raptive, or other advertising or behavioral-analytics providers.
Operational providers, such as payment processors, hosting providers, security providers, and email or text-message providers, may process limited information when necessary to provide their services. A payment processor may provide hosted payment fields or other payment functionality on a booking page. These operational services are not used to advertise to diners or build advertising profiles from reservation information.
This section is TableAgent's Notice at Collection for California residents. A conspicuous link to this section should be displayed at or before the point where personal information is collected, including near the reservation-submission button.
| Category collected | Examples | Purposes | Sold or shared for cross-context behavioral advertising? | Retention criteria |
|---|---|---|---|---|
| Identifiers and contact information | Name, email address, telephone number, account username, IP address, session and device identifiers | Create and manage reservations and accounts; communicate with diners and restaurants; authenticate users; provide support; maintain security | Reservation identifiers and contact information: No. Limited online identifiers collected on designated ad-supported blog pages may be shared for advertising as described below | Retained while needed to provide the requested service, maintain an active account or business relationship, support reservation history, resolve disputes, prevent abuse, and satisfy legal obligations |
| Commercial and reservation information | Restaurant selected, reservation date and time, party size, seating preference, reservation status and history, special requests, deposits, card holds, subscription and transaction status | Fulfill and manage reservations; provide restaurant-management tools; process transactions; maintain business records; resolve disputes | No | Retained while reasonably necessary for reservation history and operations, and longer where needed for unresolved disputes, security, accounting, tax, contractual, or legal obligations |
| Sensitive personal information | Account credentials; payment-account or card information handled by payment processors; allergy, accessibility, or health-related information voluntarily included in a special request | Authenticate users; process and secure transactions; fulfill a diner-requested accommodation or reservation request; prevent fraud | No | Retained only as reasonably necessary for the requested service, transaction, security purpose, or applicable legal requirement. TableAgent does not use this information to infer characteristics about consumers |
| Internet or electronic-network activity | Browser and device type, operating system, pages viewed, timestamps, referring page, cookie and session data, security and diagnostic logs | Operate, secure, troubleshoot, measure, and improve the Services; provide advertising on designated blog pages | Reservation-form content and reservation-specific information: No. Technical and general usage information may be disclosed to Google Analytics on pages where it is used. On designated ad-supported blog pages, some identifiers and browsing activity may be shared for advertising | Security and operational data is retained according to the nature of the event, security need, and applicable limitation period. Analytics and advertising data is retained according to TableAgent's configured settings and the applicable provider's disclosed retention practices |
| Approximate geolocation | City, state, region, or country derived from an IP address | Security, localization, analytics, advertising measurement, and regional privacy compliance | Approximate location may be processed by Google Analytics on pages where it is used. On designated ad-supported blog pages, it may be shared for advertising. Reservation-form content is not used for either purpose | Retained according to the purpose for which it was collected and the applicable provider's retention practices |
| Professional or employment information | Restaurant or employer name, job title, business contact information, account permissions, job-application information | Administer restaurant accounts; manage business relationships; provide support; maintain security; process applications | No | Retained during the relationship or application process and afterward as reasonably necessary for support, recordkeeping, disputes, and legal compliance |
| Advertising inferences | Interest categories or advertising audience segments generated from activity on ad-supported blog pages | Provide, measure, and limit personalized or targeted advertising | May be shared on designated ad-supported blog pages | Retained according to Raptive's and participating advertising partners' disclosed retention practices and applicable opt-out choices |
TableAgent does not collect personal information for materially different purposes without providing any additional notice required by law.
The information we collect depends on how you interact with the Services.
When you make or manage a reservation, we may collect:
Please do not include sensitive information in a free-form special-request field unless it is reasonably necessary for the restaurant to fulfill your request.
When a diner, restaurant, or other business user creates or administers an account, we may collect:
We may collect:
On reservation and checkout pages, TableAgent collects information used to provide the reservation flow, maintain sessions, protect security, diagnose errors, and prevent fraud or abuse. Google Analytics may also collect limited technical and general usage information on these pages. Google Analytics, Raptive, and other advertising or behavioral-analytics providers do not receive information entered into reservation forms or reservation-specific details such as a diner's name, email address, telephone number, selected restaurant, reservation date or time, party size, special requests, payment information, or confirmation number.
We may receive personal information from:
We use personal information to:
TableAgent does not use reservation-form information to create advertising profiles or for cross-context behavioral advertising.
TableAgent uses cookies and similar technologies differently depending on the portion of the Services you visit.
Reservation, checkout, account, and restaurant-administration pages may use technologies necessary for functionality and security, such as session cookies, authentication cookies, CSRF tokens, load-balancing identifiers, preference cookies, and payment-session or fraud-prevention identifiers.
Disabling these technologies may prevent portions of the Services from functioning correctly.
TableAgent may use Google Analytics on any or all portions of the Services, including reservation-entry and checkout pages, to understand website traffic, page performance, and general interactions with the Services.
Google Analytics may process cookie or device identifiers, page-view and interaction data, approximate location, and other technical information. TableAgent does not configure Google Analytics to collect or receive names, email addresses, telephone numbers, payment information, special requests, or other information typed into reservation forms. TableAgent also does not send reservation-specific details, such as the selected restaurant, reservation date or time, party size, reservation notes, payment details, or confirmation number, to Google Analytics.
Where applicable law requires consent for analytics cookies, TableAgent will request consent before using them.
Certain blog or content pages display advertising through CMI Marketing, Inc., doing business as Raptive. Raptive advertising technology is not loaded on reservation pages, booking widgets, payment pages, checkout flows, or restaurant-administration pages.
Advertising. CMI Marketing, Inc., d/b/a Raptive ("Raptive") is a service provider of this Site for the purposes of placing advertising on the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive's data usage, see the Raptive Creator Advertising Privacy Statement.
Raptive and participating advertising partners may use cookies, advertising identifiers, IP addresses, browser and device information, approximate location, page-view information, and other online activity information for advertising, measurement, audience analysis, and related purposes. Where applicable law requires consent, these technologies will be managed through the applicable consent process.
You may manage cookies through your browser and through any consent or privacy controls presented on the Site. Browser settings that block all cookies may impair necessary functionality.
A cookie banner alone is not necessarily a request to opt out of sale or sharing under California law. California residents may use the Your Privacy Choices or Do Not Sell or Share My Personal Information control and may enable Global Privacy Control as described in the California Privacy Notice below.
We may disclose personal information to the following categories of recipients.
At the diner's direction, TableAgent transmits reservation information to the selected restaurant so that it can review, fulfill, manage, modify, or cancel the reservation and communicate with the diner.
The selected restaurant may independently determine how it uses information after receiving it and may be subject to its own privacy policy and legal obligations. Sending a reservation to the restaurant selected by the diner is not a sale or sharing for cross-context behavioral advertising.
We may use providers for hosting, cloud infrastructure, database services, security, fraud prevention, customer support, email, telephone, text messaging, payment processing, accounting, auditing, insurance, and legal services.
These recipients receive only information reasonably necessary for the relevant service. We use contractual and other safeguards appropriate to the provider's role and applicable law. Some providers, such as payment processors, may act as independent businesses or controllers for portions of their processing and may provide their own privacy notices.
Google Analytics may receive technical and general usage information from pages where it is deployed, including reservation and checkout pages. It does not receive information entered into TableAgent reservation forms or reservation-specific details such as a diner's name, email address, telephone number, selected restaurant, reservation date or time, party size, special requests, payment information, or confirmation number.
Raptive and participating advertising partners may receive identifiers, online activity, approximate location, and advertising inferences from designated ad-supported blog pages. This activity does not involve reservation data.
We may disclose information when reasonably necessary to:
TableAgent does not sell personal information in exchange for money.
TableAgent does not sell reservation information and does not share reservation information for cross-context behavioral advertising.
On designated ad-supported blog pages, however, Raptive and participating advertising partners may collect or receive online identifiers, internet or electronic-network activity, approximate geolocation, and advertising inferences for personalized or targeted advertising, cross-context behavioral advertising, advertising measurement, audience analysis, and related purposes. Under broad state-law definitions, these activities may be considered a sale or sharing of personal information even though TableAgent does not receive money specifically in exchange for an individual visitor's personal information.
TableAgent retains personal information only for as long as reasonably necessary and proportionate for the purposes described in this Privacy Policy.
Retention is determined by factors including the nature and sensitivity of the information, the duration of the account or restaurant relationship, the need to provide reservation history and support repeat visits, unresolved support requests or disputes, fraud and security requirements, backup cycles, applicable limitation periods, and legal, accounting, tax, and contractual obligations.
In general:
When information is no longer reasonably necessary, TableAgent may delete, deidentify, aggregate, or securely dispose of it.
TableAgent uses administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction. Depending on the information and service, safeguards may include encryption in transit, access controls, authentication, logging, monitoring, backups, vulnerability management, and incident-response procedures.
Payment-card information may be entered directly into hosted fields operated by payment processors. Those providers are responsible for their payment environments and applicable payment-card security obligations. TableAgent generally receives a payment token or limited transaction information rather than the full card number when hosted or tokenized processing is used.
No method of transmission or storage is completely secure, and TableAgent cannot guarantee absolute security.
Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or portability of personal information; object to or restrict certain processing; withdraw consent; opt out of targeted advertising or the sale or sharing of personal information; and appeal a denial of a privacy request.
To submit a request, contact us using the methods in the Contact Us section. We may need to verify your identity and authority before completing certain requests. We will not unlawfully discriminate or retaliate against you for exercising a privacy right.
Where TableAgent processes reservation information solely on behalf of a participating restaurant, TableAgent may refer the request to that restaurant or assist the restaurant in responding.
This section applies when the European Union General Data Protection Regulation, United Kingdom GDPR, Swiss Federal Act on Data Protection, or similar law applies.
TableAgent LLC, doing business as TableAgent, is the controller for personal data used for TableAgent's own website operations, accounts, security, billing, customer support, and direct business administration.
Depending on the service and contract, TableAgent may process reservation information on behalf of a participating restaurant. In that context, the restaurant may be the controller and TableAgent may act as its processor. The restaurant remains responsible for its own processing after receiving the reservation.
TableAgent relies on the following legal bases as applicable:
Consent may be withdrawn prospectively, but withdrawal does not affect processing already lawfully performed or information that must be retained under another legal basis.
TableAgent is based in the United States. Personal data may be processed in the United States and other countries where TableAgent, participating restaurants, or service providers operate.
Where applicable law requires safeguards for international transfers, TableAgent uses an available lawful transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses, the United Kingdom International Data Transfer Addendum, or another legally recognized safeguard.
Subject to applicable conditions and exceptions, you may request access, correction, deletion, restriction, portability, or objection to processing and may withdraw consent where consent is the legal basis.
You may also lodge a complaint with the data-protection authority in the country where you live or work or where you believe a violation occurred. Contact TableAgent first if you would like us to attempt to resolve the issue.
This section supplements the rest of this Privacy Policy for California residents. The terms "personal information," "sensitive personal information," "sell," "share," "service provider," and "contractor" have the meanings assigned by the California Consumer Privacy Act, as amended (the "CCPA").
"Sharing" under the CCPA generally concerns disclosure for cross-context behavioral advertising. It does not include transmitting a reservation to the restaurant selected by a diner at the diner's direction.
TableAgent may have collected the following statutory categories, depending on the consumer's interaction with the Services:
TableAgent does not use or disclose sensitive personal information for purposes other than those permitted without providing a separate right to limit. TableAgent does not use sensitive personal information to infer characteristics about consumers.
The categories of sources, purposes, and category-specific retention criteria are described in the California Notice at Collection, Information We Collect, How We Use Personal Information, and Data Retention sections above.
TableAgent has not sold or shared reservation information.
On designated ad-supported blog pages, the following categories may have been sold or shared, as those terms are broadly defined by the CCPA:
These categories may have been sold or shared with advertising networks, advertising exchanges, demand-side and supply-side platforms, audience-measurement providers, data or identity providers, and other participating advertising-technology partners for personalized advertising, cross-context behavioral advertising, measurement, audience analysis, fraud prevention, and related purposes.
TableAgent does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.
TableAgent may have disclosed the following categories to service providers or contractors for business purposes:
Recipients may include hosting, cloud, database, security, fraud-prevention, communications, customer-support, payment, accounting, auditing, insurance, and legal-service providers. Business purposes include providing the Services, maintaining accounts, processing transactions, communications, security, fraud prevention, debugging, support, recordkeeping, and legal compliance.
Reservation information is also disclosed to the restaurant selected by the diner to fulfill the diner's request. The restaurant may be an independent business rather than TableAgent's service provider.
Subject to applicable exceptions and verification requirements, California residents have the right to:
TableAgent does not currently use automated decisionmaking technology to make significant decisions concerning consumers in a manner that triggers separate CCPA access or opt-out rights for automated decisionmaking.
California residents may opt out of advertising-related sale or sharing by using the Your Privacy Choices or Do Not Sell or Share My Personal Information control provided on the Site.
TableAgent and its advertising provider process a qualifying Global Privacy Control or other legally recognized opt-out preference signal as a request to opt out where required by law. The signal generally applies to the browser or device from which it is sent. Unless the signal can be associated with an authenticated account, it may not apply across other browsers, devices, or offline information.
An opt-out does not disable strictly necessary technologies or prevent processing required to provide, secure, or maintain the reservation service. Visitors who opt out may continue to see non-personalized advertising.
TableAgent will not ask a consumer to opt back in to sale or sharing for at least 12 months after receiving an applicable opt-out request unless otherwise permitted by law.
Some browsers transmit a legacy "Do Not Track" header. Because there is no uniform legal or industry standard governing that header, TableAgent does not currently respond to legacy Do Not Track signals. This statement does not apply to Global Privacy Control or another legally recognized opt-out preference signal.
Third-party advertising companies may collect information about a visitor's online activities over time and across different websites on designated ad-supported blog pages. Cross-site advertising technologies are not loaded on TableAgent reservation or checkout pages.
A California resident may submit a request to know, access, delete, or correct personal information through:
Please state that the request concerns a California privacy right and provide enough information for TableAgent to identify the relevant account, reservation, or interaction. You do not need to create an account to submit a request.
A request to know may ask for information beyond the 12 months preceding the request, including all responsive information collected on or after January 1, 2022, subject to applicable law and exceptions.
TableAgent will ordinarily confirm receipt within 10 business days and respond within 45 calendar days. When reasonably necessary, TableAgent may extend the response period by up to an additional 45 days and will provide notice and an explanation.
TableAgent will use reasonable methods to verify that the person making a request is the consumer to whom the information relates. Verification may include matching information provided with information already maintained, confirming access to an associated email address or telephone number, confirming account access, or requesting additional information proportionate to the nature and sensitivity of the request.
Verification information will be used only to process and document the request. TableAgent may deny or limit a request when identity or authority cannot reasonably be verified or when an exception applies.
A request to opt out of sale or sharing does not require identity verification. TableAgent will not require a consumer to create an account to opt out.
A California resident may authorize another person or entity to make a request. TableAgent may request proof of authorization and may contact the resident directly to verify identity and confirm permission. An agent holding a valid power of attorney may provide documentation establishing that authority.
Opt-out requests submitted through a qualifying browser-based opt-out preference signal do not require separate written authorization.
TableAgent does not offer financial incentives, loyalty programs, price differences, or service differences in exchange for the collection, sale, or sharing of personal information. Ordinary subscription pricing, promotions, discounts, or trial offers that are not based on the value of personal information are not financial incentives under this section.
Residents of other U.S. states may have rights to access, correct, delete, or obtain a portable copy of personal information and to opt out of targeted advertising, sale, or certain profiling. Some states also provide a right to appeal a denied request.
Submit a request using the contact methods below and identify your state of residence and the right you wish to exercise. If applicable law provides an appeal right, you may appeal a denial by replying to TableAgent's decision or emailing [email protected] with the subject line Privacy Request Appeal.
TableAgent recognizes qualifying opt-out preference signals where required by applicable state law.
The Services are not directed to children under 13, and TableAgent does not knowingly permit a child under 13 to create an account or knowingly collect personal information directly from a child under 13 without legally valid authorization.
An adult making a restaurant reservation should not include unnecessary information about a child in a reservation note. If TableAgent learns that it collected personal information directly from a child under 13 contrary to this policy, it will take reasonable steps to delete it.
TableAgent does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.
The Services may link to third-party websites or services that TableAgent does not operate. TableAgent is not responsible for their content or privacy practices.
Participating restaurants may have their own privacy policies and may independently determine how they use reservation information after receiving it. Review the applicable restaurant's privacy disclosures when available.
TableAgent may update this Privacy Policy to reflect changes in its Services, information practices, providers, or legal obligations. The date at the top shows when it was last updated.
If a change materially affects how TableAgent uses previously collected personal information, TableAgent will provide any additional notice or obtain any consent required by applicable law before applying the materially different practice.
For questions, concerns, or privacy requests, contact:
TableAgent LLCThis document was last updated on July 15, 2025.