Privacy Policy

1. Who we are

TableCade by RandoLabs ("we", "us", "our") provides a QR-code table photobooth and entertainment product to venues (bars, restaurants, cafes) in Singapore, and operates the software their customers use at the table. This policy explains what personal data we collect — both from the venues that run TableCade and the diners who use it — why we collect it, and what rights you have over it under Singapore's Personal Data Protection Act (PDPA). You can reach us using the contact details in Section 11.

2. What we collect

We collect different data depending on whether you're a venue running TableCade or a customer using it at a table.

• Venue account details — business name, login/contact email, and the branding (logo, promo text, receipt settings) a venue configures in their staff dashboard.
• Booth session data — photos taken through the booth, puzzle/game activity, and feedback ratings or messages left by a venue's customers during a table session.
• Feedback contact details — a phone number, only if a customer explicitly opts in to be contacted about their feedback. This is never printed on paper — it stays in the venue's dashboard.
• Analytics data — if enabled, Google Analytics and Microsoft Clarity collect anonymised usage data (pages visited, device type, approximate location, session recordings/heatmaps) to help us understand how the marketing site is used. See Section 4.

3. How we use it

• To run the booth experience — capture and print photos and puzzles on the venue's printer, and route feedback to venue staff (including printing an instant alert for low ratings).
• To operate and support venue accounts.
• To communicate with you about your account or answer questions.
• To improve the product.
• To meet legal or accounting obligations.

We do not sell your personal data to third parties.

4. Cookies & analytics

Our marketing site may use Google Analytics and Microsoft Clarity to understand visitor behaviour. These tools use cookies or similar technology and may collect your IP address, browser type, and interactions with the page. You can opt out using your browser's cookie settings, or via Google's opt-out browser add-on. Until analytics IDs are configured in this site's settings, no analytics data is collected. The booth app itself (used at the table) does not run these analytics scripts.

5. Sharing your data

We share data only with the services needed to run TableCade, such as:

• Our database/hosting infrastructure (Supabase, Netlify), to store and serve venue and booth session data securely.
• WhatsApp / email, to receive and respond to support requests.
• A venue's own printer, which receives whatever a customer chooses to print at their table — this stays local to that venue's hardware.

6. How long we keep it

We keep different data for different lengths of time:

• Photos and saved videos — deleted within 30 days.
• Printed receipt content (photos, puzzle answers, and similar) — cleared within 30 days; we may keep a basic record (date and type only, no personal content) longer for our own usage statistics.
• Feedback phone numbers — cleared within 60 days. The rating and message may be kept longer for our own records, with the phone number removed.
• Technical/error logs — deleted within 75 days.
• Booth session records (no personal content, just activity timestamps) — deleted within 90 days.
• Venue account records and correspondence — kept for as long as needed to operate the service, handle support requests, and meet accounting or legal requirements.

A venue or booth customer can request earlier deletion at any time — see Section 7.

7. Your rights

Under the PDPA, you may ask us to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete the personal data we hold about you, except where we're required to keep it to meet legal, accounting, or contractual obligations.
• Withdraw consent to how we use your data (this may limit our ability to provide the service to you).

To exercise any of these, contact us at [email protected]. We aim to respond to any request, including a deletion request, within 30 days.

8. Security

We take reasonable technical and organisational steps to protect your data, but no method of transmission or storage is 100% secure.

9. Children's privacy

TableCade is intended for use by venue staff and their adult customers. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the latest revision.

11. Contact us

Questions about this policy or your data? Reach us at [email protected] or WhatsApp.