Privacy Policy

Cenaiva (“Cenaiva,” “we,” “us,” or “our”) is a dining platform for reservations, pre-ordering, on-demand delivery, and a voice concierge, operated by Autor Technologies Inc. This Privacy Policy explains what personal information we collect when you use our websites and apps (the “Services”), how we use and share it, where it is stored, and the choices and rights you have.

We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Québec, the Act respecting the protection of personal information in the private sector (Law 25). By using the Services, you agree to this Policy.

1. Information we collect

We collect information you give us, information created as you use the Services, and information from a few trusted partners.

You provide

• Account — name, email, phone number, and password when you sign up.
• Reservations & orders — party size, dates/times, delivery or pickup address, dishes ordered, allergy or accessibility notes, and messages to restaurants.
• Payments — card payments are processed by Stripe. We do not store your full card number; we receive a payment token plus limited details (e.g. card brand, last four digits) to operate and support your orders.
• Reviews & content — ratings, review text, and photos or video you submit (including “Snap” content).
• Concierge conversations — the text or voice of your interactions with “Hey Cenaiva,” so we can complete your request (e.g. book, modify, or cancel a booking).
• Support — anything you tell us when you contact us.

Collected automatically

• Location — with your permission, your device location (or an address you enter) to show nearby restaurants, quote delivery fees, and enable live delivery tracking.
• Device & usage — device type, app version, IP address, and how you interact with the Services, for security, troubleshooting, and improvement.
• Push tokens — a notification identifier if you enable push, used to send order, reservation, and delivery updates.

From partners

• Restaurants — status updates about your reservation or order.
• Delivery drivers — pickup/drop-off progress and, at delivery, proof of delivery.

2. How we use your information

• Create and manage your account and authenticate you.
• Take reservations and pre-orders, process payments and deposits, and coordinate delivery or pickup.
• Share the details a restaurant or driver needs to fulfil your request.
• Send transactional messages (confirmations, updates, receipts) by email, SMS, or push.
• Power the voice/chat concierge and publish reviews or Snap content you choose to submit.
• Provide support, prevent fraud and abuse, keep the Services secure, and meet legal obligations.
• Understand and improve the Services (using aggregated or de-identified data where we can).

We rely on your consent, on the need to perform the service you asked for, and on our legitimate interest in operating securely. You can withdraw consent for optional uses (see “Your choices”), though some processing is necessary to provide the Services.

3. When we share information

We do not sell your personal information. We share it only as needed to run the Services:

• Restaurants you book or order from, to fulfil and support your request.
• Delivery drivers, to complete a delivery (limited to what the drop-off requires).
• Service providers (“sub-processors”) who process data on our behalf under contract, listed below.
• Legal & safety — where required by law, or to protect the rights, safety, and security of users, the public, or Cenaiva.
• Business transfers — in a merger, acquisition, or sale of assets, subject to this Policy.

Our sub-processors

• Amazon Web Services (AWS) — hosting, database, and email delivery, in the Canada (Montréal) region.
• Vercel — delivery of our web front-end.
• Stripe — payment processing and payouts.
• Twilio — SMS notifications.
• Google Maps Platform — maps, places, and routing.
• Google Firebase (FCM) / Apple (APNs) — push notifications.
• Loquent — the “Hey Cenaiva” voice and chat concierge.
• Apify — menu import for onboarding restaurants.
• upload-post — publishing Snap content you approve to Cenaiva’s own social accounts.

Some providers may process limited data outside Canada. Where that happens, we take reasonable steps so your information continues to receive a comparable level of protection, and we describe such transfers as required by law.

4. Where your data is stored

Your account, reservation, order, and related personal information is stored in Canada, in AWS’s Canada (Montréal) region, consistent with our commitment to Canadian data residency. Backups are encrypted.

5. How long we keep it

We keep personal information only as long as needed for the purposes above or as required by law — for example, to provide your account, honour your order history and receipts, resolve disputes, and meet tax and financial-record obligations. When information is no longer needed, we delete or de-identify it.

6. Your rights and choices

Subject to legal limits, you may:

• Access the personal information we hold about you and request a copy.
• Correct information that is inaccurate or incomplete.
• Delete your account and associated personal information — from the app under Account → Delete account, or by emailing us.
• Withdraw consent for optional processing, such as turning off location or push notifications in your device settings, or unsubscribing from non-essential messages.
• Portability — request that certain information be provided in a structured, commonly used format (Law 25).

To exercise a right, contact us using the details below. We may need to verify your identity first. We will respond within the timeframes required by applicable law.

7. Security

We use technical and organizational safeguards appropriate to the sensitivity of the information — including encryption in transit and at rest, access controls, and least-privilege practices. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and regulators of a breach where the law requires.

8. Children

The Services are intended for adults. We do not knowingly collect personal information from children under the age of majority in their province without appropriate consent. If you believe a minor has provided us information, please contact us and we will take appropriate steps.

9. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and understand usage so we can improve the Services. You can control cookies through your browser settings; disabling some may affect functionality.

10. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and change the “Last updated” date, and, for material changes, provide additional notice.

11. Contact us

Questions, requests, or concerns about your privacy can be sent to Autor Technologies Inc., which operates Cenaiva, at privacy@cenaiva.com.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or, if you are a Québec resident, the Commission d’accès à l’information du Québec.