Privacy
Privacy notice
Last updated 30 September 2026
Who this covers
This notice is issued by Girolle Ltd. It applies to Girolle on the web at girolleapp.com and to the Girolle iOS app. Girolle is a restaurant operations workspace: invoices, purchasing, daily reports, and team workflows for a restaurant that has been given access.
Information we collect
Account details you provide to sign in, typically an email address and password, and optional multi-factor authentication. Restaurant membership and role. Operational records the restaurant puts into Girolle, including invoices and original invoice files, supplier profiles, purchasing history, daily/service reports, and in-app messages such as feedback or support requests. If a restaurant uses employee features, employment records the restaurant or employee supplies, including encrypted personal, National Insurance, and bank details where those fields are completed. Device permissions: the iOS app may use the camera and photo library only when a manager scans or chooses an invoice image.
How we use it
We use this information to operate Girolle for the restaurant: authenticate people, store and review invoices, extract printed facts for human review, keep restaurant-scoped purchasing history, send transactional email such as sign-in, password reset, and employee invitations, and respond to support requests. Girolle Ltd operators may review and correct catalogue matching (product family names and supplier wordings) for service quality, and may add cleaned high-level family names to the shared catalogue template. We do not sell personal information. We do not use Girolle data for advertising.
Processors
Girolle uses hosted infrastructure for authentication, database, and private file storage; OpenAI to extract structured information from uploaded invoices, statements, and similar documents so a person can review it; and Resend to send transactional email. Card payments are processed by Stripe. Girolle does not store full card numbers. Those providers process information only as needed to provide those services.
Camera and photos
The Girolle iOS app asks for camera access so managers can scan paper invoices. Photo library access is used only if you choose an existing image to upload. Scanned pages become the restaurant’s original invoice file inside Girolle. Girolle does not save scans to your camera roll.
Retention
Original invoice files are retained for six years from the invoice date, or from the receipt date when an invoice date is unavailable, including while an invoice is in Trash. After that period, Girolle may permanently remove only the original storage object. The invoice record and related operational history remain. Other account and restaurant records are kept while the restaurant uses Girolle, and for as long as needed to restore access, meet legal duties, or resolve a support request.
Restaurant isolation
Operational records belong to the restaurant. Access follows restaurant membership, except that Girolle Ltd operators may access catalogue matching fields for support and template quality as described above. Invoice files, purchase prices, private supplier identity, and HR or payroll fields stay restaurant-internal. A client-supplied identifier is not enough on its own to read or change another restaurant’s data.
Cookies
Girolle uses essential cookies to keep you signed in and, on preview deployments, to remember a shared site-access password. We do not use advertising or analytics cookies on these public pages.
Your choices
You can ask us to access, correct, or delete personal information we hold about you, or to close an account, through the Support page. Restaurant owners control operational records for their restaurant. Some original invoice files cannot be erased during the six-year retention period described above. If you are in the UK or EEA, you may also have rights under UK GDPR / GDPR; contact us and we will handle the request.
Children
Girolle is built for restaurant operations. It is not directed at children under 16.
Contact
Questions about this notice, or requests about personal data, should be sent to Girolle Ltd (company number 17418013, registered in England and Wales; registered office: 286 Essex Road, London, N1 3AR, United Kingdom) through Support.