Privacy Policy

Last updated: 19 August 2026 · Applies to getyasi.com, app.getyasi.com and the Yasi mobile apps.

Yasi is built and operated by yasi as, a Norwegian company registered in Tromsø, Norway ("Yasi", "we"). This policy explains what personal data we handle, why, and the rights you have under the EU/EEA General Data Protection Regulation (GDPR).

1. Who we process data for

Yasi is software for restaurants. Most personal data in Yasi — reservations, guest profiles, orders, staff schedules — is entered by or on behalf of the restaurant you interact with. For that data the restaurant is the data controller and yasi as is the data processor, handling it only on the restaurant's instructions. For data about our own website visitors and our business customers' accounts, yasi as is the controller.

2. What we collect

• Website (getyasi.com): nothing beyond standard technical logs. We use no advertising trackers and no analytics cookies on this site. If you email us, we keep the correspondence.
• Platform accounts (app.getyasi.com and the mobile apps): name, email address and sign-in credentials of restaurant users (handled by our authentication provider), and the settings of the restaurant's account.
• Guest data processed for restaurants: reservation details (name, contact details, party size, time, notes the guest chooses to leave), messages sent to a restaurant's chat assistant or WhatsApp number, and order history where the restaurant uses our point of sale.
• Mobile apps: if you enable notifications, a push token identifying your device so the app can alert you about activity in your own venue (for example a new reservation). No advertising ID, no location tracking, no contact-list access.

3. What we use it for

• Providing the service: taking and managing reservations, answering guest questions, running the till, scheduling staff — the things the restaurant asked Yasi to do.
• Service messages the guest or restaurant expects (for example a booking confirmation email, or a reservation reminder).
• Security, troubleshooting and abuse prevention.

We do not sell personal data, and we do not use guest data for advertising.

4. AI features

Restaurants can enable an AI assistant that answers guest questions and takes bookings. Guest messages to that assistant are processed by our AI infrastructure providers to generate a reply. They are used to answer the guest — not to build advertising profiles.

5. Where data lives and who helps us

We use a small number of European- and US-based infrastructure providers to run Yasi (hosting, database, authentication, email delivery, messaging and AI processing), each bound by data-processing agreements. Transfers outside the EU/EEA rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

6. How long we keep data

Account data is kept while the restaurant's account is active. Reservation and sales records are kept as long as the restaurant needs them, including statutory retention that Norwegian bookkeeping law requires for sales records. Push tokens are deleted when a device is signed out or stops responding.

Requesting deletion of your data (Yasi apps)

This applies to all Yasi mobile apps and the Yasi platform (Yasi Staff, Yasi Reservations, Yasi POS, Yasi Kitchen, app.getyasi.com) by yasi as.

• How to request deletion: email hello@getyasi.com from the address linked to your account (or via your restaurant's manager, who can remove your profile directly). We confirm and complete the deletion within 30 days.
• What is deleted: your account/profile (name, contact details, sign-in code), app messages, schedule and time-clock entries, and any device push tokens.
• What may be kept: records your employer is legally required to retain (for example payroll-relevant worked-hours records and sales records under Norwegian bookkeeping law) are kept for the statutory period, then deleted.

7. Your rights

You may request access, correction, deletion or export of your personal data, and object to or restrict processing. If your data was entered by a restaurant (for example a reservation), the fastest route is to contact that restaurant — we support them in fulfilling every request. You may also complain to the Norwegian Data Protection Authority (Datatilsynet).

8. Contact

We update this policy when the product changes; the date above always reflects the current version.