Who we are
Lobbra is a booking system for restaurants, with an AI receptionist that answers the phone. It is run by Yossef Alaswad in Malta. Questions about your data: support@lobbra.com.
What data we keep
- The restaurant’s team: name, email, the restaurant you work for, your role, and your login (a password, or Google or Apple: then we only use your name and email from them). If you turn on phone alerts, the address Apple or Google gives us to reach your phone.
- Guests: name, phone number, email if given, and the booking: day, time, number of people, the table, wishes such as allergies or an occasion, and notes. Also whether the guest came, and notes the restaurant’s team writes about a guest (for example “regular” or “VIP”).
- Calls to the AI receptionist: the caller’s phone number, the recording, the word-by-word text and a short summary.
- The online booking page: what the guest types, and for 7 days a scrambled code of their internet connection and phone number, only to stop spam.
- Messages: the emails, texts (SMS) and WhatsApp messages we send for the restaurant, and whether they arrived.
- Payments (restaurant owners): paid on Stripe’s page. Lobbra never sees the card number; we keep the card type and its last 4 digits, and what was paid.
- A card for a big group: some restaurants ask a big group to hold its table with a card. The guest types the card on Stripe’s page, and Stripe keeps it for the restaurant, on the restaurant’s own Stripe account, together with the guest’s name, email and phone number. Lobbra never sees the card number; we keep the card type, its last 4 digits, and whether the restaurant charged it.
Why
To take bookings by phone, on the restaurant’s booking page and at the host stand; to show them to the restaurant’s team; to tell the guest the answer; and, when the restaurant turns these on, to send a reminder before the visit and one request for a Google review after it (every review request has a link to stop them). We don’t sell data, show ads or track anyone. The only cookie keeps you logged in. Your device also remembers the Day or Night colours, and the Lobbra app keeps today’s and tomorrow’s bookings on the phone in case the internet stops; logging out removes them.
For guest data, the restaurant decides what is kept (it is the “controller”); Lobbra works for it (the “processor”). For the restaurant team’s accounts, Lobbra is the controller.
Who helps us
- Our database and call recordings: Supabase, in Frankfurt (EU).
- The voice of the AI receptionist: ElevenLabs (United States), with Anthropic’s Claude to understand the call.
- Reading a restaurant’s website during setup: Anthropic’s Claude (United States).
- The phone lines the AI answers on: Zadarma (Maltese numbers) and Twilio (United States numbers).
- “Hold to talk” in the restaurant’s app: what a team member says while holding the button becomes text at ElevenLabs (United States), and Anthropic’s Claude (United States) works out what they asked. Lobbra keeps neither the recording nor the words; nothing changes until the team member presses a button.
- Emails: Resend. Texts: Twilio (SMS) and Meta (WhatsApp). Phone alerts: Apple and Google.
- Payments: Stripe (the restaurant’s credit with Lobbra, and a group’s card on the restaurant’s own Stripe account). The website and app: Vercel.
How long
- Call recordings and their word-by-word text: 30 days, then deleted, at Lobbra and at ElevenLabs. The summary and the booking stay.
- The spam-stop codes from the booking page: 7 days.
- A group’s saved card: removed 14 days after the booking.
- Guests, bookings and messages: until the restaurant deletes them or closes its account. The restaurant’s owner can delete one guest at any time: the guest’s details, calls, recordings, allergies and messages go.
- Team accounts: until the account is closed. Delete yours at any time in Settings → Your account → Delete my account.
Delete your account
In the app or on the website: Settings → Your account → Delete my account. It works at once. The only owner of a restaurant deletes the whole restaurant with it: its guests, bookings, calls and recordings. Without the app: write to support@lobbra.com from the email address of your account, and we delete it within 30 days.
Your rights
Under the GDPR you can ask to see your data, correct it, delete it, get a copy, or object to how it is used. Guests: ask the restaurant you booked with, or write to us and we will pass it on. You can also complain to Malta’s data protection regulator, the Information and Data Protection Commissioner (IDPC), idpc.org.mt.