Privacy Policy

Rezara is a restaurant and venue discovery platform operating at rezara.co, based in Johannesburg, South Africa. We help diners discover and connect with the best restaurants and venues in their city.

This policy explains how we collect and handle personal information in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA).

Account information

When you create an account, we collect your email address and, optionally, a display name. This is managed via Supabase Auth.

Usage data

We log venue clicks — which venue you tapped through to and when. If you are signed in, your user ID is associated with the click. If you are browsing as a guest, clicks are recorded anonymously.

Venue partner enquiries

If you submit a venue interest form via /partners, we collect your name, venue details, email address, and phone number.

User-submitted content

If you submit photos or videos for a venue, we store the media and any associated caption. Submissions are reviewed before publication.

• To operate your account and personalise your experience
• To track referral clicks as proof of value for venue partners
• To follow up on venue partner enquiries
• To review and publish user-submitted content
• To understand how the platform is used and improve it

We do not sell your personal information to third parties. We do not use your data for third-party advertising.

We use the following third-party services to operate Rezara:

• Supabase — database, authentication, and file storage (servers in EU/US)
• Vercel — web hosting and content delivery
• Mux — video hosting and adaptive streaming for venue media

Each processor is bound by their own data processing agreements and privacy policies. No data is shared with any other party.

• Venue clicks — retained for 2 years for analytics and partner reporting
• Accounts — retained until you request deletion
• Venue interest enquiries — retained until the enquiry is resolved or you request deletion
• Submitted media — retained until removed by an administrator or at your request

Under POPIA, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent where processing is based on consent
• Object to processing based on legitimate interest
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at privacy@rezara.co.

We use session cookies set by Supabase Auth to keep you signed in. We do not use third-party tracking cookies or advertising cookies. No cookie consent banner is required as we only use strictly necessary cookies.

Rezara is not directed at children under 18. We do not knowingly collect personal information from children.

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of Rezara after changes constitutes acceptance of the revised policy.

Questions or requests relating to this policy should be directed to: privacy@rezara.co