User Data Deletion

Gastilo is operated by Review Lab L.L.C (Business No. 812366509), Rruga UÇK, Prishtinë 10000, Kosovo. You can ask us at any time to delete the personal data we hold about you.

This page explains how to make that request, what happens to your data, and how long the process takes.

Send an email to info@gastilo.com with the subject “Data deletion request” and include:

• The email address linked to your Gastilo account or enquiry
• Your restaurant or business name, if applicable
• Whether you want everything deleted or only specific data (for example a contact or demo request)

We must be able to verify that the request comes from you, so please write from the email address associated with the data. If we cannot verify identity, we may ask for additional confirmation before acting.

On a full deletion request we remove, from our production systems:

• Your account and login credentials
• Contact and demo request records (name, email, business name, message)
• Content you uploaded to your website, menus and reservation settings
• AI chat assistant conversation history linked to your workspace
• Social media content and schedules we manage on your behalf

For guest data (reservations, menu views, chat messages) Gastilo acts as a processor on behalf of the restaurant. If you are a guest, please contact the restaurant directly — they control that data. If they instruct us to delete it, we will do so. You may also write to us and we will forward your request.

• We confirm receipt of your request within 5 business days
• Deletion from production systems is completed within 30 days
• Encrypted backups are rotated out within 90 days, after which no copy remains

Some records must be retained to meet legal obligations or to defend legal claims. These are kept separately and are not used for any other purpose:

• Invoices and accounting records, for the statutory retention period
• Records of the deletion request itself, as proof of compliance
• Security and abuse logs, in anonymised or minimal form

Deletion is permanent and cannot be undone. If you delete an active account, your published website, QR menus, reservation booking and AI chat assistant stop working. Export anything you want to keep before you send the request — we are happy to help you prepare an export.

Besides deletion, you can request access, rectification, portability, restriction, or object to processing. See our Privacy Policy for the full description of your rights and how we handle data.