DineSift ← Back to Home

Privacy Policy

Last updated: February 26, 2026

DineSift ("we," "us," or "our") is operated by 1524469 B.C. LTD, a British Columbia corporation. We are committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

1. Information We Collect

Account Information

When you create a DineSift account, we collect your name, email address, and password (stored as a cryptographic hash — we never store plain-text passwords). If you are invited by an organization, we also associate your account with that organization.

Payment Information

Payment processing is handled entirely by Square, Inc. Card numbers, CVVs, and expiry dates are entered directly into Square's secure iframe and never touch our servers. We store only a Square customer ID, card token, last four digits, card brand, and expiry date for display purposes.

Restaurant Review Data

We collect publicly available review data from Google and OpenTable for restaurants you add to DineSift. This includes reviewer display names, ratings, review text, dates, and any staff names mentioned in reviews. This data is publicly available on the respective platforms.

Usage Data

We collect standard server log data including IP addresses, browser type, pages visited, and timestamps. We do not use third-party analytics or tracking tools.

2. How We Use Your Information

We use personal information solely for the following purposes:

  • Providing and operating the DineSift platform
  • Processing subscription payments through Square
  • Sending transactional emails (login codes, review alerts, weekly digests)
  • Detecting and attributing staff mentions in reviews
  • Generating sentiment analysis and insights
  • Responding to your support inquiries

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate DineSift:

  • Square, Inc. — Payment processing. Subject to Square's Privacy Policy.
  • Postmark (ActiveCampaign) — Transactional email delivery. Subject to Postmark's Privacy Policy.
  • DigitalOcean — Cloud hosting. Servers located in North America. Subject to DigitalOcean's Privacy Policy.
  • Google Places API — Fetching publicly available review data.

Each third-party service processes data in accordance with their own privacy policies and applicable laws.

4. Data Storage and Security

Your data is stored on encrypted servers hosted by DigitalOcean in North America. We implement appropriate technical and organizational safeguards including:

  • HTTPS/TLS encryption for all data in transit
  • Bcrypt password hashing
  • Two-factor authentication (email, TOTP, or passkey)
  • Role-based access controls
  • Regular security updates and monitoring

5. Cookies

DineSift uses only essential cookies required for the platform to function:

  • Session cookie (PHPSESSID) — Maintains your login session. Expires when you close your browser.
  • Cookie consent cookie (dinesift_cookies) — Remembers your cookie preference. Expires after 365 days.

We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

6. Your Rights

Under PIPEDA and BC PIPA, you have the right to:

  • Access — Request a copy of the personal information we hold about you.
  • Correction — Request correction of inaccurate or incomplete information.
  • Deletion — Request deletion of your personal information and account.
  • Withdraw consent — Withdraw consent for data processing at any time (which may affect your ability to use the service).
  • Complaint — File a complaint with us or with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, contact us at privacy@dinesift.com. We will respond within 30 days.

You can also delete your account and all associated data at any time from the Account Deletion page.

7. Data Retention

We retain your personal information only as long as necessary to provide the service and fulfill the purposes described in this policy. When you delete your account, we permanently remove your personal data within 30 days, except where retention is required by law (e.g., financial transaction records).

8. Children's Privacy

DineSift is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact Us

If you have questions about this Privacy Policy or our data practices:

Privacy Officer
DineSift
privacy@dinesift.com

You may also contact the Office of the Privacy Commissioner of Canada or the BC Office of the Information and Privacy Commissioner.

DineSift
© 2026 DineSift. All rights reserved. | Terms of Service | Privacy Policy