Greek hospitality software from Heraklion, Crete. Support 24/7. +30 697 030 5072

Privacy policy

How contact details and application data are used.

Last updated: October 2026

1. This website

The efaeto.gr and efaeto.com websites present Efaeto. They do not use tracking cookies or third-party analytics. Fonts and page files are hosted on our own server.

The Greek edition is at efaeto.gr and the English edition at efaeto.com. Choosing a language opens the corresponding page on the other website.

The server keeps technical access logs (IP address, time, page, browser type) for security and troubleshooting. They rotate automatically and are not combined with anything else.

2. The demo form

When you submit the form, your details are sent to the Efaeto platform and stored to manage your request. They include your name, phone number and any optional fields you complete. The date, language, source page and IP address are also recorded.

The request appears in the management dashboard and may be sent as a support email notification. If submission fails, the page attempts to open your email application with the request filled in. We use these details to respond to your request.

3. The software in your venue

Once Efaeto is installed at your venue, you are the controller of your customers’ and staff data. For optional support and cloud services, we process only the data needed to provide the service, protect the system or comply with a legal obligation.

  • Stay in your venue: orders, amounts, customer names and phone numbers, staff records, working hours, drawers, stock, reports.
  • Platform communication, depending on settings: licence checks (installation ID, version and timestamp), filtered technical errors when enabled, and encrypted backups when off-site storage is enabled.
  • Backups are encrypted inside the venue before leaving. They are encrypted for the configured recovery keys, which include a platform recovery key and, when configured, an independent owner recovery key. Because the platform holds its own recovery key, it has the technical ability to decrypt a backup for an authenticated venue restore, authorised support and restore testing. Downloads and restore tests initiated from the owner dashboard are recorded in the audit trail.
  • Admin assistant, optional and off by default: when the admin turns it on, their question and only the aggregate data the answer needs (sales totals, product names, prices and availability, stock quantities, staff hours and takings, reservation counts) are sent through the platform to Anthropic, the provider of the Claude model, as our sub-processor. Staff are referred to by number (for example staff#1) and names stay in the venue. The assistant does not read customer details, notes or passwords. Anthropic may process the data in the United States, under the safeguards the General Data Protection Regulation requires for transfers outside the European Economic Area. The assistant changes nothing in the venue without the admin’s approval.

Disclosure to AADE: where and when tax law requires it for a feature used by the business, the necessary business, installation and technical-support data may be transmitted to the Greek Independent Authority for Public Revenue, AADE, to comply with the relevant legal obligation. The current non-fiscal version of Efaeto tracks operational orders and does not issue fiscal documents. The venue issues its fiscal documents through its own lawful fiscal device or provider.

4. Retention periods

  • Operational orders: kept according to the venue's configuration, contract and applicable obligations. The current non-fiscal Efaeto order record is not a fiscal document. The venue is responsible for retaining the lawful fiscal and accounting records in the system through which it issues them.
  • Audit log: 730 days, with a controlled purge that writes a checkpoint before removing anything.
  • User activity: 90 days.
  • Licence heartbeats: 90 days. Technical errors: 180 days.
  • Assistant conversations on the platform: deleted six hours after the last question and together with the venue’s account. At Anthropic they are kept under its commercial terms and are not used to train models.

5. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection under the General Data Protection Regulation. Because the data lives on your own machine, you exercise most of these directly inside the application. For anything concerning us, write to support@efaeto.com and we answer within thirty days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority.

6. Loyalty points and customer phone numbers

When released and enabled, the loyalty feature links points to the customer’s phone number, which is personal data. It is disabled by default. The venue informs the customer and obtains consent before enrolment, with deletion of their details on request.

7. Contact

For questions about your data, email support@efaeto.com.