Legal

Privacy Policy

Last updated: January 1, 2025 · We respect your data and your privacy.

1. Introduction

Welcome to digiRestau ("we", "our", "us"). digiRestau is a digital menu and restaurant order management platform operated as a SaaS product. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform at digirestau.com — whether you are a restaurant owner (our customer) or a customer of a restaurant using our platform. By using digiRestau, you agree to the collection and use of information as described in this policy.

2. Who We Are

digiRestau is an independent SaaS product built for restaurant owners to create digital menus, manage table-wise QR codes, and handle real-time orders. We serve both Indian and international restaurant businesses.

3. Information We Collect

A. From Restaurant Owners: Full name and email address, Restaurant name, slug, and logo, Subscription and billing information, Theme preferences and UI settings, Device, browser, and IP address (for security), Login timestamps and session data.

B. From End Customers (restaurant visitors): Customer first name (entered at order placement), Order details (items, quantities, total), Table ID and restaurant ID, Timestamp of order, Device type and browser.

We do NOT collect: Aadhaar/PAN or government IDs, Financial or card details of customers, Sensitive personal data (religion, health, biometrics), Children's data.

4. How We Use Your Information

To create and manage your account, display your digital menu, process real-time orders, send service announcements, improve platform performance, prevent fraud, and comply with applicable laws. We do NOT sell or rent your data to any third party.

5. Data Storage and Security

All data stored using Supabase (PostgreSQL with Row-Level Security). Hosted on AWS, SOC 2 Type II compliant. All transmission encrypted via HTTPS/TLS. Passwords hashed, never stored plain text. Restaurant data isolated via RLS policies.

6. Data Sharing

Recipient	Purpose	Data Shared
Supabase	Database and auth hosting	All stored data
Vercel	Platform hosting	Request logs
Razorpay (future)	Payment processing	Billing info only
ipapi.co	Country detection for pricing	IP address only

We do not share with advertisers, data brokers, or commercial third parties.

7. Customer Data Belonging to Restaurants

Restaurant owners are data controllers for their customers' information. digiRestau acts as data processor on their behalf. Restaurant owners are responsible for informing customers about data collection and using customer data only for order fulfilment.

8. Cookies and Local Storage

We use localStorage to save language, theme, and currency preferences. Session cookies managed by Supabase Auth. No third-party advertising or tracking cookies used.

9. Your Rights

Access, correct, delete, export your data. For Indian users: Digital Personal Data Protection Act 2023 (DPDPA). For EU/EEA users: GDPR applies. Contact: privacy@digirestau.com

10. Data Retention

Active data retained while account exists. Account deletion: all data permanently deleted within 30 days. Order history older than 12 months may be archived.

11. Children's Privacy

Platform not intended for under 18. We do not knowingly collect minors' data. Contact privacy@digirestau.com to report any such case.

12. International Users

Data may be processed in India or AWS-operated locations. By using the platform, international users consent to this transfer.

13. Changes to This Policy

We will notify via email or in-app notice on significant changes. Continued use after changes = acceptance.

14. Contact Us

Email: privacy@digirestau.com · Response within 7 business days.