Tafel processes venue account data to provide the service, under a data processing agreement with each venue. Guest passports belong to the guest. Preferences stay on the phone until the guest verifies a phone number. Venues see only aggregate numbers unless the guest consents to share details with that venue. Guests can export or delete a verified passport from the menu. Servers are in the EU. Payments are taken by the payment provider; card numbers are not stored here.