Resto Platform
Privacy Policy
Resto Platform ("we") provides software that restaurants, shops, pharmacies, salons and rental businesses ("businesses") use to run their menu, orders, bookings, point of sale and reports, and that their customers use to order and book. This policy explains what data the platform handles and why.
1. Who is responsible
For customer orders and bookings, the business you order from decides how your data is used, and we process it on their behalf. For business accounts (owners and staff), we are responsible. Contact us on WhatsApp at +968 9335 9117 or by email at admin@restoplatform.app.
2. Data we handle
- Business accounts: name, email, phone, business name, address and settings, staff accounts and their roles, subscription and payment records.
- Free demo sign-up: the details you give when you start the free demo (your name, email, phone if you add it, and your business name and type) are stored with your account and also emailed to Resto Platform, so we can help you with setup.
- Customers: phone number (verified by SMS when you log in), name, delivery address and car plate if you give them, your orders and bookings, and loyalty points if the business uses them.
- Prescriptions (pharmacies only): the prescription photo you upload and the pharmacy's prescription record (patient and doctor name, medicines), visible only to that pharmacy's staff.
- Identity documents (rental businesses only): the document number and photos you upload, so you do not need to upload them again next time.
- Payments: online card payments are handled by the payment provider (for example Thawani). We never see or store your card number; we only store whether the payment succeeded and its reference.
- Technical data: error reports from the web pages (the error message, page address and browser type) so we can fix crashes, security logs of sign-in attempts, and a hashed form of your IP address used only to stop abuse (kept for about an hour).
- Notification tokens for the staff mobile app, used to alert staff about new orders.
3. Why we use it
- To take, prepare, deliver and bill your order or booking.
- To let businesses see their sales, expenses and reports.
- To prevent fraud and abuse (SMS verification, reCAPTCHA, rate limits, audit logs of refunds and cancellations).
- To keep the service working and fix errors.
We do not sell personal data and we do not use it for advertising. Our own marketing website and sign-up pages use Google Ads cookies to measure which of our ads bring businesses to sign up; these are never used on a business's pages for its customers (menus, shops, bookings).
4. AI features
Businesses on the Gold plan (including the free demo) can use AI tools (menu translation, reading invoices, sales insights). For these, menu text, invoice photos the business uploads, or totals of sales and expenses are sent to OpenAI for processing; customer names, phone numbers and addresses are never sent for these tools.
Pharmacies on the Gold plan can also have AI read prescriptions and delivery photos. Then the prescription photo a customer uploads, which can show the patient's and doctor's names, or the photos of a delivery the pharmacy takes, are sent to OpenAI to read the medicines, batches and expiry dates.
5. Service providers
- Google Firebase / Google Cloud (United States): hosting, database, sign-in, SMS verification, file storage, backups.
- Google reCAPTCHA: protection against automated orders.
- Google Ads: measuring our own advertising, on our marketing and sign-up pages only.
- Payment providers chosen by the business, such as Thawani.
- OpenAI: only for the AI features described above.
- PayPal: monthly subscription billing for businesses that subscribe online. We store the subscription status and payment records, never card details.
- Email delivery (Resend): order confirmations for shops that turn them on; account emails to the business owner (demo ready, a reminder before the demo ends, demo or subscription ended, subscription active, failed payment); and the new-account notice with your sign-up details to Resto Platform.
6. How long we keep data
Order, bill and audit records are kept while the business account is active, because businesses need them for accounting and tax. Error reports are deleted 30 days after they were last seen. Daily database backups are kept for up to 30 days. When a business account is closed, its data is deleted. If a free demo or a self-serve subscription ends and is not renewed, its business data and login are deleted automatically 30 days after it ends.
7. Security
Data is encrypted in transit and at rest. Each business can only access its own data, staff access depends on their role, and refunds, cancellations and price changes are recorded in a log that cannot be edited.
8. Your rights
You can ask to see, correct or delete your personal data, or withdraw consent. Customers can ask the business they ordered from, or contact us and we will pass the request on. Some records (paid bills) may need to be kept for legal or tax reasons.
Deleting your Resto Platform account
Owners and staff of a business (including users of the Resto Platform Android and iPhone apps) can delete their account themselves: in the admin panel or the app, open the account menu (top right) and choose Delete account. An owner's account is deleted together with the business and all its branches. You can also ask us to delete it: send a WhatsApp message to +968 9335 9117 from the phone number on the account, with the account's email address, or email admin@restoplatform.app from the account's email address. We confirm the request and delete the account within 30 days. Your login, profile and device notification tokens are deleted. When the business owner closes the business, its menu, orders, bookings and settings are deleted too; paid bills and their audit log may be kept for up to the period required by tax law, and backups expire within 30 days.
9. Changes
If we change this policy we will update the date above. Important changes will be shown in the admin panel.