Omakasia privacy policy

Version 2026-11. This is a translation for your convenience: in case of discrepancy, the Spanish version prevails.

1. Who processes the data

Omakasia (the "controller") provides software for restaurants and bars on a subscription basis, from the browser. Contact for any privacy matter: privacidad@omakasia.com.

2. What data is processed and why

• Venue account: name, email address and, if you sign in with Google, the identifier and email address Google provides. They are used to create and maintain your access, to notify you about the service and to bill the subscription.
• Data the venue enters: reservations, customers, sales, menus and settings. The venue is the controller of that data; Omakasia processes it only on the venue's behalf to provide the service (processor, art. 28 GDPR).
• Technical data: IP address, browser and access logs, for the security of the service and to detect misuse.

3. Signing in with Google

If you choose to sign in with Google, Omakasia receives only your identifier, your name and your email address in order to recognise you. It does not access your Gmail, your contacts or any other data in your Google account, and it does not post anything on your behalf.

4. Legal basis

Performance of the subscription contract (art. 6(1)(b) GDPR) for the account and the service; legitimate interest (art. 6(1)(f)) for security; and compliance with legal obligations (art. 6(1)(c)), such as tax and invoicing obligations.

5. Retention

While the account is active and, afterwards, for as long as legal obligations (tax and invoicing) require. The venue's data can be exported and deleted from "Your account → Data and privacy".

6. Recipients

Omakasia relies on infrastructure and service providers (hosting and database on Google Cloud/Firebase in the European Union, email and SMS delivery, payment gateway) acting as processors or sub-processors with the safeguards required by the GDPR. The Slinky assistant in the application uses models from Anthropic, PBC (United States): when a request needs AI, the text of that request and only what is needed to answer it are sent to Anthropic, which does not use them to train its models. The transfer relies on the European Commission's standard contractual clauses, included in its data processing agreement. AI-generated output may contain errors: review it before using it. Data is not sold or transferred to third parties for their own purposes.

7. Your rights

Access, rectification, erasure, objection, restriction and portability, by writing to privacidad@omakasia.com. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Cookies

The Omakasia application uses only technical cookies and storage needed to keep you signed in and to run the application. It does not use advertising or third-party tracking cookies.

The omakasia.com website uses Google Analytics to see how many people visit it and which pages they read, only if you accept it in the cookie notice. If you accept, Google Analytics stores two cookies: _ga, to tell visitors apart, and _ga_<ID>, to keep the session, both for 2 years. If you reject or don't choose, Google Analytics stores no cookies and only receives anonymous visit signals that don't identify you. Your choice is stored in your browser and you can change it at any time from the «Cookies» link in the website footer. Provider: Google Ireland Limited. We do not use this data for advertising.

9. Changes

The version in force is the one published on this page. If something relevant changes, the application notifies you.

© 2026 Omakasia · All rights reserved · Legal notice · Terms of use