Privacy Policy

1. Information We Collect

When you use RESTROY, we collect information that you provide directly and information generated through your use of the platform:

• Account Information: Name, email, phone, restaurant name, and address when you create an account.
• Payment Information: Billing details for subscriptions. Card details are processed by our payment partners and never stored on our servers.
• Restaurant Data: Menu items, orders, inventory, and financial transactions entered through the platform.
• Device Information: Browser type, device type, OS, and IP address for security and performance.
• Usage Data: Pages visited, features used, time spent, and interaction patterns to improve the platform.

2. How We Use Your Information

We use collected information for the following purposes:

• To provide, maintain, and improve the RESTROY platform and its features.
• To process transactions and send billing-related communications.
• To send product updates and promotional messages (opt-out available).
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations under Nepal law.
• To generate anonymized, aggregated analytics for product improvement.

3. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: Trusted partners (hosting, payments, analytics) under strict data protection agreements.
• Legal Requirements: When required by law, court order, or government regulation in Nepal.
• Business Transfers: In a merger or acquisition, data may transfer with prior notice.
• With Your Consent: When you explicitly authorize sharing with specific third parties.

4. Data Security

We implement industry-standard security measures to protect your data:

• All data encrypted in transit (TLS 1.3) and at rest (AES-256).
• Regular security audits and penetration testing.
• Role-based access controls for all platform features.
• Automatic backups with geographically redundant storage.
• Staff access limited on a need-to-know basis with audit logging.

5. Cookies & Tracking

RESTROY uses cookies for essential platform functionality and analytics:

• Essential: Required for login, sessions, and security. Cannot be disabled.
• Analytics: Help us understand platform usage. Can be disabled in settings.
• Marketing: Targeted advertising. Opt-in only — not set by default.

6. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email and in-app notification at least 30 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.