Terms of service

1. Parties and acceptance

The service is provided by the company that operates the Mezenta platform, referred to as “Mezenta” or “we”. The “customer” or “you” is the business that creates a restaurant account and uses the service.

Anyone who signs up or accepts these terms on behalf of a business confirms that they have authority to bind it. The contract is concluded electronically when you sign up; you can save or print these terms from this page.

2. Businesses only

The service is offered only to businesses acting in the course of their trade or profession, not to consumers. Consumer provisions of Greek Law 2251/1994 therefore do not apply, in particular the right to withdraw from a distance contract.

3. The service

Depending on the plan and add-ons you choose, Mezenta provides a digital menu with QR codes and automatic translation, reservation requests and their management, a guest list, review collection, a rewards card, analytics, a restaurant website and team management. The features of each plan are shown on the billing page.

We keep improving the service and may change or replace features. If a change materially reduces a feature you pay for, we will tell you at least 30 days in advance, and you may terminate the contract before the change takes effect.

4. Account, security and team members

You give true and up-to-date details when you sign up and for billing.

You are responsible for keeping your sign-in details secure and for everything done from your account. We recommend a strong password and two-step verification, especially for owners and admins. If you suspect unauthorised access, tell us immediately through our contact form.

You can invite team members and assign them roles. You are responsible for the people you invite, the permissions you give them and removing access promptly when someone leaves.

For support, at your request or where the security of the service requires it, authorised Mezenta staff may access your account; every such access is logged.

5. Your content

Content you upload or enter (restaurant details, menus, prices, images, logos, text) remains yours or its rights holders'. You grant us a non-exclusive, royalty-free licence, for the term of the contract and as long as needed to wind it down, to host, reproduce, technically adapt (for example resizing images or translating) and publicly display it, solely to provide the service.

You warrant that you hold the necessary rights in your content and that it is lawful, accurate and up to date, particularly prices, ingredients and allergens. You are solely responsible for the content you publish.

6. Mezenta's intellectual property

The software, design, templates, the Mezenta name and marks belong to us or our licensors. We grant you a non-exclusive, non-transferable right to use the service for your business for as long as your subscription lasts.

You may not copy, modify, decompile or resell the service, except where the law expressly allows it. If you send us suggestions or feedback, we may use them freely to improve the service.

7. Acceptable use

You may not:

• publish unlawful, misleading or offensive content, or content that infringes the rights of others;
• send marketing messages to guests without their prior consent;
• create fake reservations, reviews or points, or manipulate reviews or statistics;
• abuse the service's public endpoints (reservations, reviews, rewards card, statistics), scrape data or circumvent limits and security measures;
• upload malicious code, or do anything that puts the service or other users at risk.

We may remove content or suspend access that breaks these rules, as set out in section 14.

8. Automatic menu translation

Menu translations are generated automatically by artificial intelligence (Google Gemini) and may contain errors. You must check them and correct them where needed, particularly ingredients and allergens, for which you are responsible under Regulation (EU) 1169/2011.

If versions differ, the text in the language in which you entered the menu prevails.

9. Rewards card

The rewards programme is run and offered by the restaurant. You set the points, rewards and rules, and you must honour the rewards your guests have earned under them. Mezenta provides only the technical tool and is not a party to the programme or to your relationship with your guests.

You must publish clear rules for your programme: who offers it, that the card is free, how points are earned and redeemed, whether and when they expire, and how you can change or end the programme with reasonable notice (we recommend at least 30 days). Your restaurant's privacy policy on the platform (/privacy/<restaurant>/) includes template card terms; review them, and if your rules differ or add to them (for example points expiry), publish them yourself, for example in your venue or on your website.

On the platform, cards and points do not expire automatically. If you stop the programme or the related subscription ends, existing cards are shown to guests read-only and guests can always delete their card; you remain responsible to your guests for points already earned.

10. Reservations and reviews

Reservation requests concern your relationship with your guests. You decide whether to accept or decline them, keep guests informed and honour the reservations you confirm. Mezenta is not a party to the reservation and is not responsible for cancellations, no-shows or disputes between you.

Reviews collected through the service are anonymous. You may not present them in a misleading way, post or commission fake reviews, or reward guests for positive reviews. If you use the Google review link, Google's rules also apply.

11. Data protection

For accounts, billing, security and our website, Mezenta is the controller, as described in the Privacy policy.

For your guests' data (reservations, profiles and tags, emails to guests, reviews, rewards cards, newsletter lists, guest sign-in with Google or Facebook), the restaurant is the controller and Mezenta acts as a processor on your behalf. The data-processing terms in section 12 form part of these terms and are the contract required by GDPR Article 28.

As controller you are responsible for:

• the legal basis of each processing operation and for informing your guests; the platform publishes a privacy policy for each restaurant, whose content you must review;
• newsletters and marketing messages, which you send only to guests who have given prior consent (Article 11 of Greek Law 3471/2006), with an unsubscribe option in every message;
• special categories of data: dietary information and tags such as nut allergy, lactose intolerant, gluten-free or halal can reveal health data or religious beliefs (GDPR Article 9); we recommend recording them only with the guest's explicit consent and only where needed to serve them;
• your staff's notes and tags, which must be objective, necessary and not offensive, since guests have a right of access to them;
• retaining and deleting your guests' data and answering their requests.

12. Data-processing terms (GDPR Article 28)

This section governs the processing Mezenta carries out on your behalf as processor.

• Subject matter and duration: processing guest data to provide the service, for the term of the contract and until the data is deleted or returned after it ends.
• Nature and purpose: hosting, storage, organisation, display, search, sending email on your behalf, export and deletion, only to run reservations, the guest list, reviews, the rewards card and newsletters.
• Types of data: identification and contact details (name, email, phone, profile photo), reservation and visit details, notes, occasions, dietary information and tags (which may include health or religious-belief data), language and consent preferences, rewards-card data (points, history, hashed device identifiers), anonymous reviews and the content of emails to guests.
• Data subjects: the restaurant's guests and customers, rewards-card members and newsletter recipients.
• Instructions: we process the data only on your documented instructions, namely these terms, your settings and actions in the platform and your written requests, including with regard to transfers to third countries, unless EU or Member State law requires otherwise, in which case we tell you before processing where the law allows. If we believe an instruction infringes the law, we tell you immediately.
• We do not use the data for our own purposes. We may produce anonymised, aggregated statistics to run and improve the service, from which no guest or restaurant can be identified.
• Confidentiality: everyone who accesses the data on our behalf is bound by a duty of confidentiality and has access only as far as needed.
• Security: we apply the GDPR Article 32 measures described in the Privacy policy (section “Security”), including encrypted connections, hashed passwords, two-step verification, role-based access with an activity log, separate storage per restaurant, rate limiting and form protection.
• Sub-processors: you give us general authorisation to use the sub-processors listed in the Privacy policy (section “Recipients and processors”). We notify you by email at least 30 days before we add or replace a sub-processor, and you may object on reasonable grounds within that period; if we cannot find a solution, you may terminate the contract before the change. We impose the same data-protection obligations on each sub-processor and remain liable to you for their performance.
• Guests' rights: we help you answer guests' requests with the platform's tools (for example deleting a guest or a card) and, where they are not enough, on your request. If we receive a request directly, we pass it to you without delay.
• Assistance: taking into account the nature of the processing and the information available to us, we help you meet your obligations under GDPR Articles 32 to 36 (security, breach notification, impact assessments, prior consultation).
• Breaches: we notify you of any breach affecting guest data without undue delay and within 48 hours of becoming aware of it, with the information we have and what you need to notify the Authority and your guests.
• End of the service: within 90 days after your account ends, we delete guest data or, if you ask, return it to you (see section 15) and then delete it, unless EU or Member State law requires us to keep it. Data in backups or in database restore history is deleted as those cycles expire.
• Audits: we give you all information necessary to demonstrate our compliance with GDPR Article 28 and answer reasonable written questions. Inspections by you, or by an auditor you appoint who is bound by confidentiality, take place on reasonable notice (at least 30 days), at your cost and, as a rule, no more than once a year, unless a breach has occurred or a supervisory authority requires it.
• We keep a record of the processing activities we carry out on your behalf (GDPR Article 30(2)).

13. Subscriptions, free trial and payment

Plans, add-ons, prices and billing periods (monthly or yearly) are shown on the billing page. Payments run through Stripe, and you authorise us to charge the payment method you provided for each period.

Each restaurant's first subscription starts with a 30-day free trial, and each add-on has its own trial of the same length. Your card is saved at Stripe Checkout and, unless you cancel before the trial ends, the subscription converts automatically to a paid one and is charged for the plan and billing period you chose. If you cancel during the trial, it ends on its last day without a charge.

The subscription renews automatically at the end of each billing period for the same period until you cancel it.

We may change prices with at least 30 days' notice; the new price applies from the first renewal after the notice, and you may cancel before then.

VAT and other taxes apply as required by law; the final amount is shown in Stripe Checkout before you confirm. Invoices are issued electronically through Stripe and are available in the billing portal.

Amounts paid for a period that has already started are not refunded, unless these terms or the law provide otherwise. If a payment fails, we may limit or suspend subscription features until it is paid.

14. Cancellation, grace period, suspension and termination

You can cancel your subscription at any time in Stripe's billing portal. Cancellation takes effect at the end of the period you have paid for.

When the subscription ends, its features lock and the restaurant's public site stays available for a 7-day grace period, after which it is suspended. Ending or downgrading a subscription does not delete data; you can reactivate the subscription or ask us to close your account through our contact form.

We may suspend access, in whole or in part, if amounts due are unpaid, if you seriously breach these terms, if there is a risk to the security of the service or of others, or if an authority or court requires it. Where reasonable we tell you in advance, and we restore access once the reason no longer applies.

We may terminate the contract for good cause, in particular for a serious or repeated breach that you do not remedy within 14 days of our notice. Whenever the contract ends, sections 12 and 15 apply to returning and deleting data.

15. Switching provider and exporting your data

Under Regulation (EU) 2023/2854 (the Data Act), you may at any time ask to move your data to another provider or to your own infrastructure, or simply to export it and have us delete it. To make a request, contact us through our contact form.

The notice period is at most 2 months, and you may set a shorter one in your request. A transition period of up to 30 days follows, during which we keep providing the service and help you with the move. If the move is technically unfeasible within that period, we tell you within 14 working days of your request, explain why, and set an alternative period of up to 7 months.

We export, in a structured, commonly used and machine-readable format (for example JSON or CSV, with images as image files): menus in every language, images, restaurant details and settings, reservations, guest profiles and tags, the rewards programme, cards and their history, and reviews. Exporting and switching are free of charge.

After the transition period your data remains available for retrieval for at least 30 days. When the switch is complete the contract ends, and we then delete your data under section 12, except what the law requires us to keep (for example invoices).

The service runs on Cloudflare's infrastructure, in data centres inside and outside the EU; see the Privacy policy for details.

16. Availability

We make every reasonable effort to keep the service available and working correctly, but we do not guarantee uninterrupted or error-free operation and offer no service-level agreement (SLA).

The service relies on third-party providers, in particular Cloudflare and Stripe. Interruptions for maintenance or upgrades may be needed; where possible we schedule them at quiet times and announce them in advance. For support, contact us through our contact form.

17. Liability

We are liable without limit for intent and gross negligence, and wherever the law does not allow liability to be limited (Article 332 of the Greek Civil Code).

For slight negligence, our total liability under the contract is limited to the amount you paid for the service in the 12 months before the event that caused the damage, and we are not liable for indirect or consequential loss, such as lost profits, loss of customers or reputational harm.

Subject to the first paragraph, we are not liable for content you publish, for translations you did not check, for your relationship with your guests (reservations, the rewards programme, newsletters) or for interruptions caused by force majeure.

18. Indemnity

You indemnify Mezenta against any third-party claim and any reasonable cost, including legal costs, arising from your content or from your breach of these terms or of the law, in particular data-protection law as controller and the rules on marketing messages. We will tell you promptly about any such claim.

19. Changes to these terms

We may amend these terms for a valid reason, such as new features or changes in the law or in security requirements. We tell you by email or in the platform at least 30 days before the changes take effect. If you do not agree, you may terminate the contract before that date; otherwise, continuing to use the service means you accept the changes. Changes required by law may take effect sooner.

20. Governing law and jurisdiction

These terms are governed by Greek law. The courts of Mezenta's registered seat have exclusive jurisdiction over any dispute arising from them, subject to mandatory provisions of law.

21. General provisions

If any term is held invalid, the rest remain in force. Not exercising a right does not waive it. You may not transfer the contract without our consent; we may transfer it to a successor of our business, with notice to you. Notices to you are sent to your account email.

22. Contact

For questions about these terms or the service, contact us through our contact form. For data-protection matters, contact us through our contact form.