Privacy Policy

To run the Service, we store:

• Business details you provide at signup (café name, café code, owner name).
• Staff records your admins create (name, role) — staff PINs are stored as one-way bcrypt hashes, never in plain text; we cannot recover a lost PIN, only reset it.
• Orders, menu, inventory, and payment records your staff enter while using the Service.
• Customer records you choose to add (name, phone number) for loyalty and order history — only if you or your staff enter them.

We don't sell your data or your customers' data to advertisers or data brokers. We don't currently run any analytics or ad-tracking scripts on the Service.

Data you enter is used solely to provide the Service back to you — running your café's orders, bills, reports, and staff management. Platform staff may access account data to provide support or investigate abuse, not for any other purpose.

Data is stored on Neon (managed PostgreSQL) and served via Vercel. Both are reputable infrastructure providers used to host the Service; we don't separately share your data with them beyond what's needed to host it.

We use a single session cookie to keep staff logged in. It's required for the Service to function and isn't used for tracking or advertising.

We retain your data for as long as your account is active. If you close your account, contact us and we'll delete your organization's data within a reasonable period, except where we're required to retain records for legal or accounting reasons.

Under India's Digital Personal Data Protection Act, 2023, individuals whose personal data we process can request access to, correction of, or erasure of that data. Café owners are the primary data controller for their own customers' data (names/phone numbers entered for loyalty); we act as the processor hosting that data on their behalf.

The Service is intended for business use by adults operating a café or restaurant, not for children.

We may update this policy from time to time; material changes will be posted here with an updated date.

Privacy questions or data requests: support@paymentdilse.com.