Privacy Policy

1. Introduction

DINORO ("we", "our", or "us") is a Restaurant Operating System developed and operated by CodeCraft Studios, Visakhapatnam, India. This Privacy Policy explains how we collect, use, disclose, and safeguard information when restaurants use our platform and when their customers interact with our services, including through WhatsApp Business API integration.

2. Information We Collect

From Restaurant Owners and Staff

• Name, email address, and phone number
• Restaurant name, address, and business information
• Payment information (processed securely via Razorpay)
• Menu items, pricing, and operational data
• Staff details and access credentials

From Restaurant Customers

• Name and mobile phone number (for queue management and order updates)
• Order history and dining preferences
• Feedback and ratings
• WhatsApp messages initiated by the customer (when customer opts in)
• Table session data and visit history

3. WhatsApp Integration

DINORO uses the WhatsApp Business API (provided by Meta Platforms, Inc.) to send transactional notifications to restaurant customers. These notifications include:

• Queue position updates and table ready notifications
• Order confirmation and kitchen status updates
• Payment confirmation and invoice details
• Reservation reminders

Customers initiate WhatsApp communication by sending a message to the restaurant's WhatsApp Business number. By doing so, customers consent to receive automated responses and transactional messages related to their dining experience. We do not send marketing messages without explicit consent. WhatsApp message data is governed by Meta's Privacy Policy in addition to this policy.

4. How We Use Information

• To provide and operate the DINORO platform for restaurants
• To send transactional notifications to customers via WhatsApp and SMS
• To manage queue positions, table assignments, and reservations
• To process payments and generate invoices
• To generate analytics and reports for restaurant owners
• To improve our services and fix technical issues
• To comply with legal obligations

5. Data Sharing and Disclosure

We do not sell personal information. We share data only with:

• Restaurants: Customer data is shared with the restaurant the customer is interacting with
• Payment processors: Razorpay processes payments in compliance with PCI DSS
• Meta Platforms: WhatsApp Business API for message delivery
• Infrastructure providers: Vercel, Railway, Neon (PostgreSQL), Upstash (Redis), AWS S3 — for platform operation
• Legal authorities: When required by law or to protect rights and safety

6. Data Retention

Restaurant account data is retained for the duration of the subscription and up to 90 days after account termination. Customer session data is retained for 12 months for analytics purposes. WhatsApp conversation logs are retained for 30 days. You may request deletion of your data by contacting us at sayhi@dinoro.in.

7. Data Security

We implement industry-standard security measures including encryption at rest and in transit, JWT-based authentication, rate limiting, tenant isolation (each restaurant's data is isolated), and regular security audits. Payment credentials are encrypted using AES-256 encryption.

8. Your Rights

Under applicable Indian law (IT Act 2000, DPDP Act 2023) and GDPR where applicable, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of WhatsApp notifications at any time by sending "STOP" to our WhatsApp number
• File a complaint with the relevant data protection authority

9. Children's Privacy

DINORO is not directed at children under 13 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify restaurant owners of material changes via email. Continued use of DINORO after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, data requests, or concerns: