Privacy
What we hold, and why.
This is the whole of it, in plain words: what Syphor is given, why, who else ever sees it, how long it is kept, and how to have it removed. It covers this website and the Syphor product both.
Who this is
The companySyphor Inc, Toronto, Ontario, Canada. We are the people who hold the data described below.
Writing to us545 King Street West, Toronto, Ontario M5V 1M1, Canada. Visit by appointment. That is the address for a privacy request as well as for anything else.
Reaching a personprivacy@syphor.com1 888 593 3881 A person reads it and answers within one business day.
When this was last changedSeptember 23, 2026. If we change it we date it again, and anything that materially affects a customer is emailed rather than quietly edited.
What this website collects
If you fill out a formYour name, your company, your phone number, your email address, how many restaurants you run, which point of sale you use, and anything you type in a message box. Nothing else, except which page you were on when you filled it in. The only required fields are your name, a way to reply to you, and — on the contact form, where there is nothing else to go on — a line saying what it is about.
WhyTo answer you, and to talk to you about Syphor. That is the only reason.
Where it goesInto our customer record system. It is not added to a mailing list, it does not start a sequence of emails, and it is not sold or shared for anybody else’s marketing. The one exception is booking a demo: that page is run by a scheduling service, and the name and email you type there go to them as well, so they can hold the slot and send the invitation.
Cookies and trackersThis website sets no cookies of its own, apart from the one described at the end of this section. It counts page views with two services that set none either and collect nothing about you personally — not your name, not your address, and nothing that follows you to another site. No session recorder. One exception while we advertise on Google: if you arrive from a Google ad, Google sets its own cookie so it can tell whether that click led to a demo booking. It carries no name and we never see it. The one page that is not ours is Book a demo, which is run by a scheduling service and sets its own. We also use a service called RB2B that tries to identify a business visitor’s company and, in the United States, the visitor’s name, and it sets a cookie in your browser to do it; you can opt out at app.retention.com/optout.
Signing in is differentThe Syphor product itself sets one cookie when you sign in, to keep you signed in. It is not a tracker, it carries no advertising, and it ends when you close the browser. Nothing else is set.
What the web host recordsThe company that serves this site keeps ordinary request logs — the address asked for, the time, and the internet address it was asked from. That is standard for any website and we do not read them for anything but faults.
The typefaceThe fonts are fetched from a typeface service, so that service sees the internet address of the machine that loaded the page. Nothing else about you goes with it.
What Syphor is given about your restaurant
How it arrivesTwo ways, depending on where your point of sale runs. If it runs in your restaurant, it sends us read-only extracts on a schedule. If it runs in your supplier’s cloud, we read their interface with your authorization, which you can withdraw. Either way nothing is installed in your restaurant, nothing of ours opens a connection into your own system, and nothing is ever written back. See Security, which says the same.
Your sales numbersChecks, items, revenue centers, dayparts, voids and discounts, kitchen ticket times, and supplier invoices you send us.
Your other connected systemsWhere you connect them, and only where you do: your accounting ledger (QuickBooks Online, Xero, Sage Intacct), your inventory and invoice system (MarginEdge, MarketMan, Restaurant365, Crunchtime), your scheduling and payroll (7shifts, Deputy, Homebase, QuickBooks Time), your delivery apps (DoorDash, Uber Eats, Grubhub, ChowNow) and, for a hotel, the property system (Oracle OPERA, Mews, Cloudbeds, Stayntouch, Agilysys). Each one is read with your authorization, read-only, and you can withdraw it. None of them is required to use Syphor and nothing is written back to any of them.
Your reservationsCovers, the time, and the size of the party. That is all. A reservation book is read for the count, never for the guest — no guest name, email or phone number comes to us from OpenTable, Resy, SevenRooms or Tock. A guest name reaches Syphor two other ways, and both are below: your point of sale writes one on a check, or a manager writes one in a note.
Your staff, by nameWe hold named employees — employee number, first and last name, job, hours, and their pay rate, overtime, declared tips and credit card tips. This comes across in the timecard file. We say it plainly because it is the part a privacy notice usually hides.
What we are NOT given about staffNo Social Security number, no home address, no personal phone number, no personal email, no date of birth. The export takes employee number, name, active flag, hire date and end date. Nothing else is available to it.
Your guestsWhere your point of sale records a guest name against a check, that name comes with it. No guest email, phone number, address or card detail exists anywhere in Syphor, because no column for one exists.
Manager notesLogbook entries are stored as typed, with the name of whoever wrote them, and they are read into the morning brief. If a manager writes a name in a note, that name is in Syphor.
Card numbersNone. Syphor holds no card number, expiration date, security code or payment token, anywhere, in any table. Trial and subscription cards are held by our payment processor and never reach us.
Who owns itYou do. It is your data and we hold it to do a job for you.
Pooling it with other restaurantsNever. Your figures are used to answer your questions and to write your brief, and for nothing else. Syphor sets a restaurant against its own normal — not an average, not a benchmark, never another business. Nothing of yours is pooled into an industry figure, and no other operator ever sees a number of yours, in any form.
Who else ever sees it
Who writes the answerThe words are written by a language model run by OpenAI. The rows that answer your question are sent to them to do it. OpenAI does not train on it. Nothing goes anywhere else, and nothing is written back to your systems.
The model that writes your answersThe answer engine. To answer a question we send the question, the map of your tables, and up to 200 rows of the result. To read an invoice we send the image. To write your morning brief we send the day’s figures and your logbook notes, with the author’s name.
A research serviceCompetitive research. Receives your restaurant’s name and address and your competitors’ names. It is never sent your sales, your checks, your labor, your staff or your guests.
An events serviceLocal events. Receives a latitude, a longitude, a radius and a date range. Nothing identifies you.
A weather serviceCoordinates and dates. No account, no name, no address.
A mapping serviceTurns your street address into coordinates. Receives your address.
Email and text deliveryDeliver the emails and text messages you asked for. They receive the recipient and the message, which contains your figures.
Our customer record systemHolds what a website form collected. No restaurant data ever goes into it.
A scheduling serviceRuns the Book a demo page. Receives the name and email you type to hold a slot, and anything you answer on that page. It is the only page on this website that is not ours, and it sets its own cookies when you use it.
A payment processorTakes the card. We see the last four digits and nothing more.
And nobody elseWe do not sell your data. Not to advertisers, not to data brokers, not to anyone. It is never shared for someone else’s marketing. If a court or a law compelled us to hand something over we would tell you, unless telling you were itself unlawful.
TrainingThat provider’s published terms for the interface we use say data sent through it is not used to train their models. We rely on that published term; we have not separately bought a zero-retention agreement, and we would rather say so than imply otherwise.
Which companies these areAsk us and we will tell you. The others are not printed here because the list can change, and a page naming a company we have stopped using is worse than no page. Ask at any time and you get the list as it stands that day.
Where it is, and how long we keep it
Where it is heldOn hardware we run, in a data center in the United States. It is not on a shared platform belonging to anybody else.
And the services aboveThose sit in the United States and Europe, so some of your data is processed outside Canada.
How longWhile your account is open, we keep it, and nothing expires on a timer — your history is the whole point. What happens when you leave is the two rows down.
Having it removedWrite to privacy@syphor.com and ask. A person removes it, and we do that inside thirty days. That applies while you are a customer and after you leave.
When you cancelYour data — sales, invoices, logbook, timecards and the raw files your point of sale sent us — stays available for you to export for thirty days. After that all of it is deleted.
System logsThe logs that record activity hold questions asked and figures returned. They are kept 14 to 21 days and then overwritten.
Raw point-of-sale filesThe files your point of sale sends us are archived on our server while your account is open. They are not a separate case: they go with everything else, thirty days after you cancel, and sooner if you ask.
What you can ask for
To see itAsk and we will tell you what we hold about you and give you a copy.
To correct itIf something is wrong, tell us and we fix it.
To have it removedAs above — ask, and a person does it inside thirty days.
To take it with youAsk and we will export your data in a readable file.
To complainTell us first — privacy@syphor.com. If we do not put it right you can complain to the Office of the Privacy Commissioner of Canada. If you are in the United States you may also have rights under your own state’s law, including California’s; the same address reaches us.
If you are an employeeYour employer decides what their point of sale sends us. Ask them first — but write to us at the address above and we will help, and we will tell your employer we heard from you.
Two last things
If there is a breachIf your data is exposed we tell you inside 72 hours of knowing about it, what was involved, and what we did. Not a week later and not in a footnote.
ChildrenSyphor is a tool for businesses. It is not for anyone under 16 and we do not knowingly collect anything about a child.
SecurityHow the data is protected is a separate page, written the same way: what protects your numbers.
Two things to be straight about
This is an honest account, written from the code rather than from a template, and it is the account we stand behind. It is not an attorney’s document and does not pretend to be one. If your legal team wants their own version, ask and we will work through it with them.
If any of it changes, the date at the top changes with it, and anything that materially affects a customer is emailed rather than quietly edited.
Questions about any of it — 1 888 593 3881.
SyphorOne page, every morning.
Read a whole morning — one night, every lens. Or five pages, as a PDF, for somebody who has to see it and was not on the call.