Updated 10 August 2026.
Two things in one document, because they go together: the rules of using Comandera, and the data processing agreement the GDPR requires between your restaurant and us. It is written to be understood without a lawyer. Where the law requires something said a particular way, we say it that way and then explain it.
A point of sale for restaurants. You open checks, send orders to the kitchen, take payment, run the till count, and it is recorded who did what. We sell it per location.
We do not process your customers' payments, we are not your accounting, and we do not issue tax invoices today: no CFDI in Mexico, no AT certified fatura in Portugal, no Veri*Factu record in Spain. Certification and compliance work is under way in Europe, and until each one exists and is declared, this document says we do not have it. The receipt you share is a record for your customer, not a fiscal document. If you need to invoice, keep doing it where you do it today.
You sign in with your phone number. Whatever happens from your account counts as yours, so your team's PINs are yours to look after. A six digit PIN says who is standing at the device; it is not a password and should not be treated as one.
You can cancel whenever you like, with no contract and no minimum term. The free plan is one location, complete, with no expiry.
This part exists because article 28 of the GDPR requires it in writing. In short:
Comandera stores each person's name next to what they did: what they cancelled, what discount they applied, what they charged. That record is the product and makes no sense without names.
That makes your restaurant responsible for an obligation that is yours and not ours: telling your team it exists. In the European Union, and in Portugal in particular, whoever works has the right to know what is recorded about their work and what for. It does not take a solemn document; it takes them knowing.
We ask for two reasons. The first is that the law requires it and the failure would be yours. The second is practical: a record the team knows about is respected, and one they discover by accident feels like a trap, which is exactly what makes people stop trusting the system.
If someone on your team asks us to delete their data, we delete it. In the European Union that right is theirs, it cannot be signed away by you or by us, and we honour it whoever asks and wherever they are.
What we remove is the name; what happened stays. A cancellation is still counted and the till count still balances, only with nobody singled out. We do it that way for two reasons pointing at the same place: deleting the whole sale would leave the restaurant's books out of balance, and a deleted sale is exactly what this product exists to detect. The person disappears from the record, the money does not.
Comandera is offered as it is. We do what we can to keep it up and the numbers right, and there will still be outages and mistakes. Keep counting your till.
The product helps you see what happens in your restaurant. It accuses nobody, and no figure in it is proof of anything on its own. What you decide to do about a person based on what you see here is your decision and your responsibility.
As far as the law allows, our liability is limited to what you have paid us in the last twelve months.
If this changes in a material way, we tell you inside the app before it applies.
Comandera · hello@comandera.com