Privacy Policy & Data Processing Agreement

01Roles under the DPDP Act, 2023 (India)

Under the Digital Personal Data Protection (DPDP) Act, 2023 of India:

• The Restaurant is the Data Fiduciary: You determine the purpose of collecting customer details (e.g. for generating GST invoices, takeaway tokens, or table bookings).
• RestroSense is the Data Processor: We process data solely on your behalf to execute orders, route tickets to your kitchen display, calculate bills, and print thermal receipts.

02What We Collect vs What We NEVER Touch

03Multi-Tenant Cryptographic Data Isolation

Every restaurant on RestroSense operates within an isolated tenant partition identified by a unique, cryptographic restaurantId. Our database queries utilize discriminator indexing and strict row-level authorization on every transaction:

• Staff from Restaurant A are mathematically blocked by JWT middleware from reading or mutating data of Restaurant B.
• Customer ordering is scoped strictly to the verified restaurant URL slug.
• All in-transit network traffic is protected with TLS 1.3 / HTTPS encryption.

04Telemetry vs Private Surveillance

To maintain system stability, prevent server outages, and meter cloud AI usage, RestroSense collects automated telemetry:

• Meters aggregate counts (e.g. "12 menu card scans performed this month").
• Meters record total token counts consumed from Gemini APIs to manage quota caps.
• Telemetry never records confidential diner chats or private food recipes.

05Diner Privacy & Digital Receipt Generation

When end-diners interact with your QR menu, place live orders, or request digital bills:

• Zero Unsolicited Marketing: Diner phone numbers or names entered during table ordering or takeaway checkout are strictly utilized to display order progress, trigger optional digital invoice links, and calculate restaurant loyalty metrics.
• No Cross-Restaurant Pooling: Diner contacts collected at Restaurant A are never shared with or made visible to Restaurant B. RestroSense does not build centralized consumer profiles for ad targeting.
• Zero Spam Guarantee: RestroSense does not blast automated promotional WhatsApp messages or marketing spam to diners who scanned your QR menu.

06Cookies, LocalStorage & Zero Ad-Network Trackers

RestroSense is designed with a privacy-first frontend architecture:

• We use client-side localStorage and session tokens exclusively for authenticated staff sessions and active table cart state.
• We do NOT deploy invasive third-party ad-tracking pixels (such as Meta Pixel, TikTok tracking, or data-broker fingerprinters) inside your Manager Dashboard or your diner-facing QR menus.
• Your staff and diners can browse with full confidence that their device activity is not being profiled across the internet.

07Right to Data Erasure & Complete Purge

In accordance with Section 12 of the DPDP Act, 2023:

• You have the permanent right to request complete deletion of all records under your restaurant workspace.
• Upon written cancellation request, all active customer sessions, orders, table QR codes, and menu databases will be expunged within 30 business days, subject only to statutory tax retention mandates.