Terms of Use

These Terms of Use (“Terms”) govern the MesaFlow website and the MesaFlow tap-to-order platform (together, the “Service”). Not every section applies to you. Browsing our public website is a much lighter relationship than running a restaurant on the platform, so these Terms are split into a common part that binds everyone and three separate parts that bind only one audience each.

1. Who these Terms apply to

You can be more than one at different moments — a restaurant owner reading the landing page is a Visitor there and an Operator once signed in. Each part then applies to the corresponding activity.

By using any part of the Service you agree to Part A and to the part matching how you are using it. If you do not agree, stop using the Service.

Part A — Rules for everyone

A1. Acceptable use

Whichever audience you fall into, you agree not to:

• Use the Service for any unlawful purpose or in breach of these Terms;
• Interfere with, disrupt, probe, scrape at scale, or overload the Service or its infrastructure;
• Attempt to clone, forge, replay, tamper with, or bypass the cryptographic verification on NFC tags;
• Attempt to reach data, restaurants, tables, or accounts that are not yours;
• Reverse engineer or attempt to extract source code, except to the extent the law expressly permits; or
• Submit content that is illegal, infringing, deceptive, or that you have no right to use.

A2. Our intellectual property

The MesaFlow software, name, logo, interface design, and documentation belong to us and are licensed to you only as far as needed to use the Service as intended. Nothing here transfers ownership. Content uploaded by restaurants is dealt with separately in section C4.

A3. Availability and changes to the Service

We work to keep the Service available but do not guarantee uninterrupted operation. We may add, modify, suspend, or discontinue features. Where a change materially reduces what a paying Operator receives, section C3 applies.

A4. Disclaimers and limits on liability

The Service is provided “as is” and “as available”, without warranties of any kind, to the maximum extent permitted by law. To the extent permitted by law, MesaFlow is not liable for indirect, incidental, special, or consequential damages, nor for lost profits, revenue, goodwill, or data arising from your use of the Service. Nothing in these Terms excludes liability that cannot lawfully be excluded — including for fraud, or for death or personal injury caused by negligence.

A5. Changes to these Terms, and contact

We may update these Terms. Material changes are reflected in the “Last updated” date above, and continued use after they take effect is acceptance. For Operators, section C3 adds notice requirements. Questions: legal@mesaflow.app.

Part B — If you are a Visitor (public website only)

B1. What the website is

Our public website is marketing material. Browsing it creates no account, no subscription, and no obligation on either side. You may read it, link to it, and evaluate the product freely.

B2. The demo is illustrative

Any interactive demo, sample menu, sample restaurant, screenshot, or animated walkthrough on the website uses invented data for illustration. It is not a live restaurant, orders placed inside it reach no kitchen, and it is not a promise that the shipped product looks or behaves identically.

B3. Descriptions, pricing, and claims

Feature descriptions and any prices shown on the website are indicative and may change. A binding commercial arrangement exists only in an accepted subscription, which is where Part C begins.

B4. Enquiry and contact forms

If you send us an enquiry, you confirm the details you give are accurate and that you may share them. We use them to reply and to assess whether MesaFlow suits your business — see the Privacy Policy, Part B. Do not send confidential information you would rather we did not hold, and do not use the form for bulk or automated submissions.

B5. No service relationship

As a Visitor you are not granted access to the platform, and Parts C and D do not apply to you. Part A does — in particular, the website is offered without warranty and may not be probed or disrupted.

Part C — If you are an Operator (restaurants and their staff)

C1. Accounts and credentials

• Operator accounts are created by invitation and secured with a password. A session uses a short-lived access token refreshed from a longer-lived token; signing out ends that session family.
• You are responsible for keeping credentials confidential and for all activity under your account. Tell us promptly at security@mesaflow.app if you suspect unauthorised access.
• You must be authorised to act for the restaurant whose account you use, and old enough to enter a contract where you live.

C2. Staff roles and internal responsibility

Roles — owner, manager, waiter, kitchen, and any custom roles — determine what each user can see and do. The restaurant is responsible for assigning roles appropriately, for removing access when someone leaves, and for its staff’s actions in the Service. Where an owner or a provider administrator acts on behalf of another account, that action is logged.

C3. Subscription, suspension, and termination

• Access to the platform depends on the restaurant’s subscription being active. If it lapses, is suspended, or is terminated, staff access may be restricted or withdrawn.
• We may suspend or terminate an account immediately for a material breach of these Terms, for unlawful activity, or where the law requires it. Where practical we will tell you first.
• You may stop using the Service at any time. After termination we will keep your restaurant’s data available for export for a reasonable period before deleting it, as described in the Privacy Policy.

C4. Operator Content

Operators own the menus, item names, descriptions, photographs, branding, colours, fonts, floor layouts, and other material they upload (“Operator Content”) and grant MesaFlow a limited, worldwide, royalty-free licence to host, store, reproduce, adapt for display, and transmit it solely to run the Service for that restaurant and its Guests. Operators warrant they hold the rights to everything they upload — photographs and fonts included.

C5. What Operators owe their Guests

MesaFlow supplies the software. The restaurant remains solely responsible for:

• The accuracy of menu items, prices, taxes, service charges, portion sizes, and availability;
• Allergen, nutritional, and food safety information, and for meeting the food information law that applies to it — we neither supply nor verify this content;
• Accepting, preparing, and fulfilling orders, and handling refunds, complaints, and disputes with Guests;
• Its own consumer, tax, licensing, employment, and data protection obligations.

C6. NFC tags and hardware

Tags issued for the Service are programmed with cryptographic keys tied to your restaurant. Operators must keep tag keys and any programming tools secure, must not reprogram tags for use outside the Service, and should report lost or stolen tags so they can be revoked. Tags, phones, tablets, network, and readers are the Operator’s own equipment and its responsibility to maintain.

C7. Data protection roles

For Guest ordering activity at its tables, the restaurant is the data controller and MesaFlow processes that data on its behalf. Operators must have a lawful basis for that processing and their own privacy notice for their Guests. See the Privacy Policy, Part D.

Part D — If you are a Guest (ordering at a table)

D1. No account, no sign-up

Tapping a table’s tag opens that restaurant’s menu for that specific table. You do not create an account, and we do not ask for your name, email, or phone number to place an order.

D2. Your order is with the restaurant

The sale is between you and the restaurant. MesaFlow transmits your order to that restaurant’s kitchen and floor; it does not sell food, prepare it, set prices, or take payment for it, and it is not a party to the transaction. Questions about an order, a bill, a refund, or an item’s ingredients go to the restaurant.

D3. Allergens and dietary information

Allergen, dietary, and nutritional details in a menu are supplied by the restaurant and we do not verify them. If you have a food allergy or intolerance, speak to restaurant staff before ordering rather than relying on the on-screen menu alone.

D4. Your table session and your device

Your basket and chosen menu language are stored on your own device so the page survives a reload; the ordering session belongs to the table, not to you. Anyone else who taps the same tag at the same table can see and add to the same order — so do not put anything private into an order note.

D5. Fair use of tags

Tap the tag on the table you are actually seated at, and do not try to copy, emulate, or interfere with a tag, or to order against a table you are not using. Verification failures are rejected and logged.