Privacy notice

Who we are: TAB — Total Automated Billing, the operator of totalautomatedbilling.com. Contact: through the contact form on our website. Last updated: 15 September 2026.

1. Our role

For our own business contacts — venue sign-ups, sales enquiries and support — we are the controller. For guest data a venue records through TAB (names, table numbers, contact details, tab items), the venue is the controller and we act as processor on its instructions.

2. What we collect

• Venue and staff accounts: name, work email, role and venue membership, and the activity attributed to that account (tabs opened, items added, voids, settlements, shift reports).
• Guests: the name, table and phone number a venue records when opening a tab, the items on the tab, tip choices, and the status and amounts of payments.
• Sales enquiries: name, company, email, phone, number of sites and your message.
• Documents: photographs of till slips and Z-report slips uploaded by staff, stored privately against the relevant tab or shift.
• Technical data: log and diagnostic data needed to run and secure the service.

We never receive or store full card numbers. Card details are entered directly with Stripe. We hold only payment references, amounts and statuses.

3. Why we use it, and our lawful bases

• Providing the service — contract with the venue, and the venue's own lawful basis for guest data.
• Taking and settling payment, including card pre-authorisations — contract and legitimate interests in securing payment for goods supplied.
• Fraud prevention, security and audit trails — legitimate interests and legal obligation.
• Responding to sales enquiries — legitimate interests, or steps towards a contract.
• Accounting and tax records — legal obligation.

4. Who processes data for us

• Stripe Payments Europe Ltd — card authorisations, captures, payment links. Stripe acts as an independent controller for payment data.
• Our hosting and database provider — Lovable Cloud, hosting the application and stored records.
• Automated text recognition — used to read a total from an uploaded till slip image. The reading is offered for a person to confirm and never changes a bill automatically.
• Email delivery — Resend, for account and notification email.

Where a provider processes data outside the UK, transfers are covered by the UK addendum to the EU standard contractual clauses or another approved safeguard.

5. How long we keep it

• Tab, payment and shift records: 6 years for accounting and dispute purposes.
• Uploaded slip images: 24 months, or sooner on the venue's instruction.
• Staff account records: for the life of the account, then 12 months.
• Sales enquiries: 24 months from the last contact.

6. Your rights

You have the right to access your data, to have inaccurate data corrected, to erasure and restriction where applicable, to object to processing based on legitimate interests, and to data portability. Guests should contact the venue that opened their tab in the first instance; we will support the venue in responding. You can also complain to the Information Commissioner's Office (ico.org.uk).

7. Security

Access is restricted by venue and by role, records are protected by row-level access rules, uploaded documents are stored in private storage accessed through short-lived links, and administrative actions such as voids and shift closures are logged against the staff member who performed them.

8. Cookies and similar technologies

We use only the storage strictly necessary to keep staff signed in and to run the app. We do not use advertising or cross-site tracking cookies.

9. Contact

Privacy questions: through the contact form on our website. See also our terms of service.