Updated 10 August 2026.
Comandera is a point of sale for restaurants. This document says what data we keep, why, and how you get it out of here. It is written to be understood without a lawyer.
When you sign in from the browser, the phone screen is protected by Google's reCAPTCHA. That is not our decision: Google will not send the SMS without that check. It exists so nobody can request thousands of messages at your expense.
Normally you never see it. A puzzle appears only when Google is unsure you are a person, for example from a new browser or a connection it does not recognise. Google receives browser data for that check, subject to its privacy policy and terms. None of this happens in the phone app.
Nobody. We do not sell data, we do not run advertising and there are no third party trackers in the app. We use Google Firebase to store the information and Cloudflare to serve this page and the email; they are infrastructure providers, not customers for your data.
On Google servers. Restaurants in the Americas sit in the Querétaro region, Mexico. European ones stay in the European Union. The country you pick when you create the restaurant decides which, and it does not move afterwards.
One exception, and we say it because it is the truth: your phone number lives in Google's account system, which cannot be pinned to a region. It leaves the European Union under Google's data processing agreement and its standard contractual clauses. Everything else about the restaurant stays where it says above.
From the app: Settings, at the bottom, Delete my account. Your account and your number are deleted, and after that you cannot sign in.
Your restaurants are archived with their sales and their till counts. That is deliberate: they are the books of the business, several countries require them to be kept, and deleting a sale is exactly what this product exists to detect. They are closed and nobody can reopen them.
If you want that deleted too, write to hello@comandera.com from the number or the email on the account and we will do it.
Comandera stores each person's name next to what they did: what they cancelled, what they charged, what discount they applied. That is what makes the record worth anything.
It also means you have to tell your team. In several countries, and across the European Union, the law requires that whoever works knows what is recorded about their work and what for. We hold the data on your instructions; telling them is yours, and it is in any case how a record gets respected rather than felt as a trap.
If someone on your team asks us to delete their name, write to us. We remove the name and leave the record standing: the books still balance and the person is no longer singled out.
You can ask us for a copy of your data, for corrections, or for deletion. Write to hello@comandera.com. We answer within 30 days. If you are in the European Union or Brazil, this is what the GDPR and the LGPD give you; we give it to you wherever you are.
Comandera is a work tool. It is not for people under 16 and we do not direct it at them.
If this changes in a material way, we tell you inside the app before it applies.
The rules of use and the data processing agreement the GDPR requires between your restaurant and us are in Terms. This document and that one are the same deal told in two parts.
Comandera · hello@comandera.com