Privacy Policy

This Privacy Policy explains how Nahar AI Technologies ("we", "us") collects, uses and protects personal data when you use ResCafe-AI (website, dashboards, mobile app and QR menus). We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

1. Our role

• For Restaurant owners who sign up with us, we decide how their account data is used.
• For guests and staff of a Restaurant, the Restaurant decides what to collect and why. We process that data on the Restaurant's behalf, only to run the Service for it.

2. What we collect

• Restaurant / owner: business name, owner name, phone, email, address, GST number, login details.
• Staff: name, role, login PIN, attendance times and, if the Restaurant turns it on, attendance selfie photos and device approval.
• Guests: name and mobile number entered while ordering, order details, table or token number, feedback and ratings.
• Website enquiries: name, mobile number, email and business name you submit in the demo form.
• Technical: IP address, browser and device type, and login security logs, used to keep the Service safe.

3. Why we use it

• To run the Service: take orders, send them to the kitchen, print bills, show tokens and prepare reports for the Restaurant.
• To secure accounts: detect wrong logins, block misuse and alert owners.
• To give support and reply to enquiries.
• To meet legal, tax and accounting obligations.

We do not sell personal data, and we do not use guests' numbers for our own marketing.

4. Cookies

We use essential cookies only, to keep you logged in and remember settings such as language. We do not use advertising cookies.

5. Sharing

• With the Restaurant you ordered from or work for.
• With trusted service providers who help us run the Service, such as cloud hosting, DNS/security and email providers, under confidentiality obligations.
• With government authorities when required by law.

6. Where data is stored

Data is stored on secure cloud servers. These servers may be located inside or outside India (for example, Australia), as permitted under Indian law. Data is sent over encrypted HTTPS connections.

7. Security

Each Restaurant's data is kept separate. Login details are kept confidential, logins are rate-limited, access is role-based, and the server is protected by a firewall and daily backups. No system is 100% secure, but we take reasonable security practices and procedures to protect your data.

8. How long we keep it

We keep data while the Restaurant's account is active and as long as needed for legal, tax or dispute purposes. Backups are kept for a limited period (normally 14 days) and then deleted automatically.

9. Your rights

You can ask to access, correct or delete your personal data, or withdraw consent. Guests and staff should first contact the Restaurant concerned. You can also write to us and we will help or forward your request.

10. Children

The Service is not meant for children to hold accounts. Guests under 18 should order with a parent or guardian.

11. Changes

We may update this policy. The latest version will always be on this page with its effective date.

Liability of Nahar AI Technologies, the ResCafe-AI team and its founder is limited as set out in section 12 of our Terms & Conditions.