Data Protection

Privacy Policy

Last Updated: September 20, 2026 • Version 1.0

1. Introduction

Resto ("we", "our", or "platform") provides software enabling contactless table ordering, digital menu management, kitchen display systems, and billing for restaurants. This Privacy Policy outlines what personal information we collect, how it is used, and how we safeguard it.

2. Information We Collect from Diners

When customers scan a table QR code and place orders, we collect only the minimal data strictly necessary to fulfill the dining transaction:

Customer Name — used by waitstaff to identify your table and deliver your order accurately.
Mobile Phone Number — used exclusively to deliver a 6-digit OTP to prevent order spoofing.
Order & Item Selections — dishes, quantities, options, and special dietary instructions.
Reviews & Ratings — star ratings and optional feedback voluntarily submitted after the meal.

We do not require diners to create persistent accounts or passwords, nor do we track your location beyond the table QR code scanned.

3. Information We Collect from Restaurant Staff

For restaurant administrative users, kitchen staff, and managers:

Account Credentials — work email address and bcrypt-hashed passwords.
Audit Log Records — timestamped status transitions for operational audit integrity.

4. Ephemeral OTP & Session Handling

One-Time Passwords expire automatically within 5 minutes. Once verified, an ephemeral session token with a 30-minute validity window is granted strictly to finalize the pending order. We never sell customer telephone numbers to third-party advertisers.

5. Payment Data Security

Resto records offline settlement confirmations (Cash, Card, or UPI) handled by restaurant staff. We do not store raw credit card numbers or banking passwords on our servers.

6. Data Retention & Your Rights

Transaction logs and order histories are retained to satisfy statutory tax and auditing requirements. Customers wishing to review or request deletion of their data may contact the dining establishment or reach our privacy team at privacy@resto.local.

7. Contact Us

For questions regarding this policy, please contact:

Resto Privacy & Compliance Office
Email: privacy@resto.local
Address: Level 4, Tech Park, Indiranagar, Bengaluru 560038

2. Information We Collect from Diners

When customers scan a table QR code and place orders, we collect only the minimal data strictly necessary to fulfill the dining transaction:

Customer Name — used by waitstaff to identify your table and deliver your order accurately.

Mobile Phone Number — used exclusively to deliver a 6-digit OTP to prevent order spoofing.

Order & Item Selections — dishes, quantities, options, and special dietary instructions.

Reviews & Ratings — star ratings and optional feedback voluntarily submitted after the meal.

We do not require diners to create persistent accounts or passwords, nor do we track your location beyond the table QR code scanned.