Privacy Policy

At Restro Dost ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our restaurant management platform, including our web application, APIs, and related services (collectively, the "Service"). Please read this policy carefully to understand our practices regarding your personal data.

1. Information We Collect

We collect information that you provide directly to us when you create an account, set up your restaurant profile, or interact with our Service. This includes your name, email address, phone number, business name, business address, and payment information. When you register as a restaurant owner, we also collect details about your establishment such as the number of locations, menu categories, and staff members.

We automatically collect certain technical information when you access our Service. This includes your IP address, browser type and version, operating system, device identifiers, pages viewed, features used, timestamps of interactions, and referring URLs. We use this data to understand how our platform is being used and to improve performance and reliability.

Our Service also processes transactional data generated through your restaurant operations, including order details, sales records, inventory movements, and customer transaction histories. This operational data is stored securely within your tenant environment and is essential for delivering the core functionality of the platform.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our Service. This includes processing your restaurant orders, managing inventory, generating business analytics and reports, facilitating staff management, and delivering dashboard insights that help you make informed business decisions. Your data powers the features you rely on every day.

We may use your contact information to send you important service-related announcements, such as changes to our terms or policies, security alerts, and account notifications. We may also send promotional communications about new features, tips for improving your restaurant operations, or special offers. You can opt out of marketing communications at any time through your account settings.

We use aggregated and anonymized data to conduct research, analyze trends in the restaurant industry, and develop new features. This aggregated data does not identify any individual user or restaurant. We may also use your information to detect, prevent, and address fraud, abuse, and technical issues with the platform.

3. Data Storage and Security

Your data is stored on secure servers with industry-standard encryption both in transit (TLS 1.2+) and at rest (AES-256). Our multi-tenant architecture ensures that each restaurant's data is logically isolated from other tenants, meaning your business information is never accessible to other users of the platform. We implement strict access controls and audit logging to monitor and protect data access.

We perform regular security assessments, vulnerability scans, and penetration testing to identify and address potential risks. Our infrastructure is hosted in data centers that maintain SOC 2 Type II compliance and employ physical security measures including biometric access, 24/7 monitoring, and redundant power and network systems.

While we implement robust security measures to protect your data, no method of electronic transmission or storage is completely secure. We encourage you to use strong, unique passwords for your Restro Dost account and to enable two-factor authentication when available. If you believe your account has been compromised, please contact our security team immediately.

4. Third-Party Services

We may share your information with trusted third-party service providers who assist us in operating our platform, processing payments, sending communications, and analyzing usage data. These providers are contractually obligated to protect your information and are prohibited from using it for any purpose other than performing the services we have engaged them to provide.

Our Service may integrate with third-party tools and platforms at your request, such as payment processors, accounting software, and delivery services. When you enable these integrations, certain data may be shared with these third parties in accordance with their own privacy policies. We recommend reviewing the privacy practices of any third-party services you choose to connect with your Restro Dost account.

We will not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may disclose your information if required to do so by law, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Cookies

Our Service uses cookies and similar tracking technologies to enhance your experience, remember your preferences, and gather analytics about how the platform is used. Essential cookies are required for the Service to function properly, including authentication tokens and session management cookies. These cannot be disabled without affecting the core functionality of the platform.

We also use analytics cookies to understand usage patterns, identify popular features, and detect potential issues. These cookies help us make data-driven decisions about product improvements. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may limit your ability to use some features of our Service.

6. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data. These may include the right to access the personal information we hold about you, the right to request correction of inaccurate data, the right to request deletion of your data, and the right to data portability. You may also have the right to restrict or object to certain types of processing.

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA). We are committed to honoring these rights and will respond to verified requests within the legally required timeframes.

To exercise any of these rights, you can use the data management tools in your account settings or contact our privacy team at privacy@restrodost.com. We may need to verify your identity before processing your request. Please note that some requests may be subject to limitations, such as when deleting data would interfere with our legal obligations or legitimate business interests.

7. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website and updating the "Last Updated" date at the top of this page. For significant changes, we may also send you a notification via email or through the Service.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should discontinue use of the Service and contact us to request deletion of your account.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. Our dedicated privacy team is available to assist you and will respond to your inquiry as promptly as possible.

If you are not satisfied with our response or believe that your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.