Your figures are yours. Here's exactly what happens to them.

If you just read the website

Nothing that identifies you, unless you accept the cookie banner. The site counts page views with Cloudflare Web Analytics, which sets no cookie and does not identify you. If you accept, the Meta pixel loads and reports to Meta Platforms Ireland Ltd: the page you are on, the page you came from, your IP address and your browser’s user agent, and then a page view, plus three things if you do them — clicking “Book a demo call”, clicking “Start free” (or “Start my free month”), and booking a call with us. Meta is told that each one happened, not your name, your email or when your call is. If you accepted and then create a Telvo account, our app tells Meta that an account was created, with your email address and mobile number scrambled (hashed) first, so Meta can match the signup to an ad you saw. They are never sent in readable form. With them go your browser’s user agent, and the ad click id and Meta’s browser id (_fbp) if there are any. We use this only to measure our ads. If you rejected or ignored the banner, the app tells Meta nothing. Meta sets its own cookies at that point, _fbp among them. Its automatic collection — reading form fields, button clicks and price-shaped text off the page — is switched off before it loads, so nothing you type here is measured. If you reject or ignore the banner, none of it runs. Your choice is stored in your own browser, not on any server of ours, and you can change it any time on the cookie notice.

If you book a call

Bookings run through Calendly, which collects your name, email and what you write in the booking form, and holds it under its own privacy policy. We use it to prepare for the call and to follow up. If you would rather not use Calendly, email us and we’ll arrange it directly.

If you use the software

Your account: name, email, mobile number, business name and billing details. Your working data: photographs of supplier invoices and the lines read off them, ingredient prices, your recipes and portions, your menu and its prices, your sales and platform figures, your compliance checklists, and the margins calculated from all of it.

Your bank statements, which include payee names — some of those are your staff and your suppliers. They are used only to categorise your costs. No person outside Telvo is shown your figures; the companies whose systems process them are listed below.

Your mobile number is asked for when you sign up, and it is there so we can help you by phone or WhatsApp if you get stuck. It is not passed to anyone else, and nothing is sent to it automatically.

All of it is used only for the three jobs you are paying for: cost the menu, produce the P&L, and run the checks. The five commitments above apply to every part of it.

If your staff use the software

The compliance module holds a record for each of your team: their name, the email or PIN they sign in with, which checks they completed and the time the server recorded it, and the photographs they take of your kitchen for checks that ask for one. It also holds clock-in and clock-out times.

You are the controller of that data, not us. It is your staff, your kitchen and your records; we process it on your instructions. So telling your team it is being collected is your job: a photograph with a name and a time against it is a record about a person.

Photos are kept for twelve months, then deleted. If a member turns on notifications on their phone, the app stores that device’s notification token — nothing else about the device — and deletes it when you remove the member from the account.

If we do consultancy work with you

Whatever you send us to do the job — bank statements, platform statements, supplier invoices, sales reports, rotas — plus our own notes from the day on site and the action plan written from them.

Where our notes touch individual staff, they are about roles, workload and process, not people's personal lives, and the written plan does not name staff.