Privacy policy
In effect from 1 August 2026.
Short version: we collect as little as possible, we never sell data on, and you can ask us at any time to show or delete what we hold about you. Write to us and we sort it out.
1. Who this page is about
Goboblo is run by Strumpbudet (Swedish company reg. 880519-5115), Vestagatan 5, 416 48 Gothenburg, Sweden. We are the data controller for information about you as a visitor to goboblo.com or a customer of ours — that is, you who run a restaurant.
If you are a guest who booked a table or collected stamps at a restaurant, the restaurant is responsible for your data, not us. See section 3.
2. If you visit the site or get in touch
Just reading the site. We have no analytics tracking, no ad pixels and set no cookies. You can read all of goboblo.com without leaving anything behind — which is why there is no cookie banner here to click away.
If you fill in a form (contact, demo or account) we store what you write: name, email, phone, the restaurant's name and your message. We use it to answer you and to handle the relationship — nothing else. If you become a customer we also store what belongs to the agreement: invoices, subscriptions and support tickets.
3. Restaurants' guests — who is responsible for what
When a guest books a table, joins a stamp card or orders food from a restaurant using Goboblo, the restaurant is the data controller for that guest's data. We process it only on the restaurant's behalf, as a data processor — we do not decide what it is used for, and we never use it for our own marketing.
If you are a guest and want to know what is stored about you, or want it deleted, contact the restaurant. Every restaurant site we build has its own page about this, and the restaurant can answer directly. The split is also written into our terms.
4. Who else sees the data
We never sell data on, and we do not hand it to anyone who does not need it to run the service. The providers we use are: Stripe (payments), Resend (email), 46elks (texts), Supabase (database), Vercel and Railway (hosting), and Anthropic and OpenAI (the AI features). Data is processed within the EU/EEA or in countries with an approved level of protection.
5. How long we keep it
As long as we need it for what you used it for, and no longer. If you write and ask something, we delete the conversation once the matter is closed. If you are a customer we keep contract and billing records for as long as accounting law requires (seven years) — the rest is cleared when the account closes.
6. Your rights
You have the right to know what we hold about you, to have it corrected if it is wrong, to have it deleted, and to object to how we use it. Email help@goboblo.com and we answer — normally within a few days, always within a month. If you think we handled something badly, you can contact the Swedish Authority for Privacy Protection (IMY) or your own national data protection authority.
7. Changes
If we change something material, we get in touch before it takes effect. Everything shows in the change log below.
Change log
- 2026-08-01 — First version.