Privacy Policy

• Where we decide how data is used: for visitors to our website, people who contact us, restaurants and businesses that register for RasoeeCloud, our subscription billing, and the security of our platform.
• Where we process data for restaurants: restaurants use RasoeeCloud to record information about their own guests, orders, invoices, staff, vendors and delivery riders. For this information, the restaurant decides what is collected and why, and we process it on the restaurant’s behalf to provide the service, where applicable.

Website, contact and demo requests

• Name, email address, phone number, restaurant or business name, the products you are interested in, and your message.
• If you subscribe to updates on our website, your email address.
• When you submit a form, we may also record the page you submitted it from, your IP address and your browser’s user-agent.

Accounts and organisations

• Name, email address, phone number and organisation name provided when an account is created.
• Sign-in information, including your password, which we store only in hashed form.
• Organisation information such as business address, GSTIN, branches, logos and settings.

Restaurant customer and guest data

• Information a restaurant records about its customers or guests, such as name, phone number, email address, address, loyalty points, visit and order history, and reservations.

Orders, payments, GST and accounting

• Orders, invoices, payment records, tax (including GST) information, inventory records and other accounting records created while using RasoeeCloud.

Staff, vendors and delivery riders

• Staff information that a restaurant records, such as name, contact details, attendance, shifts and payroll records.
• Vendor and supplier details, including contact persons, and delivery-rider details such as name, phone number and vehicle details.

Security and technical information

• Sign-in and session information such as IP address, browser or app details, device and platform information, and app version.
• Records of activity within an account, and server logs used to operate and secure the service.

Communications

• Support requests and messages you send us, and service emails we send you (for example verification codes, invoices and account notices).
• Where a restaurant enables WhatsApp notifications, the order-related messages sent to its guests.

Uploaded files

• Public branding and product files, such as logos and product images, which may be visible on menus, receipts and ordering pages.
• Private organisation and vendor documents, which are available only to authorised users.

Desktop, Android and offline data

• Our desktop and Android applications can store operational data on the device, such as orders, menu information and customer details needed for billing, so that billing can continue without an internet connection. This data is sent to our servers when the device reconnects.

• To provide and operate RasoeeCloud, including billing, orders, kitchen tickets, offline billing and sync, printing and reports.
• To keep the platform secure, including authenticating users, detecting suspicious activity and preventing fraud or misuse.
• To process subscription payments and issue our invoices.
• To respond to enquiries, demo requests and support requests.
• To send service messages such as verification codes, security alerts, invoices and subscription notices.
• To send product updates and news to people who have subscribed on our website. You can ask us to stop at any time by writing to support@rasoeecloud.com.
• To understand how our website is used and how our apps are downloaded, so we can improve our services.
• To comply with legal obligations, respond to lawful requests, and establish or defend legal claims.

• Google Analytics (Google) helps us measure page views and actions on our website, such as clicking “Book a demo” or submitting the contact form. It uses cookies.
• Microsoft Clarity (Microsoft) helps us understand how visitors interact with our pages, for example clicks and scrolling, including recordings of page sessions. It uses cookies.
• Google Fonts: our pages load fonts from Google, which receives technical information such as your IP address and browser details.

• Razorpay, for subscription payments. We do not store full card numbers in our own database. Restaurants may also connect their own Razorpay account to accept payments from their guests.
• Google services, including Google Analytics, Google Fonts and Firebase Cloud Messaging for app notifications, where applicable.
• Browser push-notification services, where web notifications are used.
• Microsoft Clarity, for website analytics.
• Meta’s WhatsApp Business Platform, for order notifications, where a restaurant has enabled them.
• Email service providers, for sending service emails.
• Hosting and infrastructure providers, for running our servers, databases and file storage.

• Encrypted (HTTPS) connections.
• Passwords stored in hashed form.
• Role-based access control within RasoeeCloud.
• Re-verification for certain sensitive administrative actions.
• Optional two-step verification by email one-time code.
• Encryption of stored integration credentials.
• Encrypted database backups.
• Encrypted local databases in our desktop and Android applications.

• Verify the identity of the person making the request.
• Determine whether we hold the data for our own purposes or on behalf of a restaurant. Where the data belongs to a restaurant, we refer the request to that restaurant and assist it.
• Assess the request against applicable legal, contractual, security and operational requirements.
• Let you know the outcome.

• Orders, invoices, GST and other tax information, payment records and accounting records, for applicable statutory, accounting, tax, audit or dispute requirements.
• Records needed to resolve disputes, prevent fraud or misuse, or establish, exercise or defend legal claims.
• Security and audit records.
• Backup and recovery copies, until they expire.

• Request information about the personal data we process about you.
• Request correction, completion or updating of your personal data.
• Request deletion of your personal data, as described in this policy.
• Withdraw consent where we rely on your consent, without affecting processing carried out before the withdrawal.
• Raise a grievance with us about how your personal data is handled.