Privacy Policy

You are talking to the venue, not to us. The venue decides what questions its assistant answers, what it collects from you and how long it keeps it — in the language of privacy law, the venue is the controller and Afterset is its processor. If you want your information corrected or deleted, the venue decides; you can ask us and we will route it.

The assistant is automated. It says so at the start of every web chat and in the first text message of every conversation, and will tell you truthfully if you ask. You can ask for a person at any point — in web chat there's a control in the header, and over text you can reply PERSON.

We collect only what the conversation requires: your name, mobile number or email if you give one, what you asked and what the assistant answered, your booking details, your consent to be texted (and the exact wording you agreed to), an age attestation if the venue requires one, deposit amount/status (never your card number — that goes to Stripe directly), and basic technical data. Please don't send us a government ID number, health information, or a card number in a chat or text — we'll remove it if you do.

We do not sell your information, share it for cross-context behavioral advertising, use it to train AI models, or use it to market to you on our own behalf. Any marketing message you receive comes from the venue, because you consented to hear from that venue.

If you opted in to text messages from a venue: the messages come from that venue through our platform. Promotional messages are sent only between 8:00am and 8:00pm in your local time, and no more than three in any 24-hour period. Reply STOP at any time — or quit, end, cancel, unsubscribe, or anything else that plainly says stop — and the messages end; you may get one confirmation. Reply HELP for help. Message and data rates may apply, message frequency varies, and carriers are not liable for delayed or undelivered messages. Opting in is never a condition of booking anything. Our full SMS terms are at afterset.ai/sms-terms.

You are our customer. For your own account information — business details, the people you give access to, billing information, what you do in the portal, support correspondence — we are the controller. We use it to provide and bill for the service, register your messaging campaign with The Campaign Registry, support you, secure the platform, and comply with law.

When you confirm a piece of venue content — a table minimum, your hours, a policy — we record the name of the individual who confirmed it and the date, and keep that record even after that person leaves, because a price the assistant quoted has to stay attributable to the person who stood behind it.

The assistant generates language. It does not make decisions with a legal or similarly significant effect on anybody — it does not decide whether a guest may enter a venue, approve or deny credit, price differently per person, or score anyone. Prices it quotes come from figures the venue entered, not from the model. Whether to accept a booking is the venue's decision, made by a person.

If a message suggests self-harm, a medical emergency, assault or a threat, or severe intoxication, the automated conversation may pause and an urgent alert may be sent to the venue's own named safety contact. A restricted record is kept of the category, time, channel, actions shown and whether the alert was delivered — the alert itself never reproduces your actual message text.

Our marketing site uses a privacy-preserving analytics service that does not set cookies, fingerprint, or track you across other sites. The chat widget uses local browser storage only to keep your conversation open while you move between pages of a venue's site — that's not advertising technology and it isn't shared. We don't use advertising or cross-site tracking cookies, and we don't host third-party advertising trackers, so we do not respond to Global Privacy Control signals — there is no sale or sharing for them to opt out of.