Privacy policy
This explains what RestaurantOS collects when a restaurant uses the platform, and when a guest scans a table QR code.
Last updated 9 September 2026
Template text. These terms have not been reviewed by a lawyer and are not a binding agreement — they exist so the page, its structure and its tone can be designed. Replace them before RestaurantOS takes a real customer.
What we collect
From a restaurant: the account holder’s name, email and phone, the restaurant’s address, its menu, and the orders placed through it. From a guest: the table scanned, the items ordered, and — only if given — a name and phone number for the order. Nothing else is asked for and nothing else is stored.
What we do not collect
No card numbers ever reach us; payments go to the payment provider directly. No location beyond the restaurant’s own address. No tracking of a guest across restaurants or across visits — a scan is a session, not a profile.
Who can see it
A restaurant sees its own data and nothing from any other restaurant. Our staff access customer data only to fix a reported fault, and every such access is recorded in the audit log the restaurant can read.
How long we keep it
Order records stay as long as the restaurant’s account does, because a restaurant needs its own history. A guest’s name and phone attached to an order are removed after ninety days.
Your choices
A restaurant can export everything it has and can ask for the account to be deleted; deletion removes the data rather than hiding it. A guest can order without giving a name at all.
Questions about this document? Write to privacy@restaurant-os.com.