Privacy Policy

Account data — name, email, phone, password (hashed), and restaurant details you provide.
Operational data — menus, orders, tables, inventory, staff, and tax/billing records you create.
Customer data — contact details and order history you record for your guests, and ratings guests submit.
Usage data — basic technical logs needed to run and secure the Service.

To provide and operate the Service, process payments through third-party gateways, generate reports and invoices, send transactional and digest emails you enable, provide support, and keep the Service secure. We do not sell your data.

We share data only with service providers that help us run the Service — for example our application host (Vercel), database host (Neon), email provider (Resend), AI provider (Anthropic) for optional AI features, subscription payment providers (Stripe or Razorpay), and payment or messaging providers used by the integrations you enable. They process data on our behalf or under their own terms for the payment you initiate. We may disclose data if required by law.

When you publish a surplus listing, eligible nearby restaurants can see the item details, quantity, price, expiry information you supply, your business name and approximate distance. Claiming an item also shares the buyer's restaurant name with the seller to help arrange collection.

When you use AI-assisted features, relevant inputs such as business summaries, prompts, uploaded images or imported data are sent to Anthropic to generate results. Only submit information you are authorised to share. The provider's processing is subject to its applicable service terms.

We retain data for as long as your account is active or as needed to provide the Service and meet legal obligations. We use reasonable technical measures, including encryption of sensitive credentials, to protect your data, though no system is perfectly secure.

You can access and update most data within the dashboard, disable optional emails, and request deletion of your account by contacting us. As a restaurant, you are the controller of your guests' personal data and are responsible for honouring their requests.

Privacy questions, account deletion or other data requests: Company.foodos@gmail.com.