Privacy Policy

Restaurants are the data fiduciary for guest data.When a guest orders at a restaurant using eRestro, the restaurant determines the purpose and means of collecting that guest’s data. Under the DPDP Act, the restaurant is the “data fiduciary” (equivalent to a data controller) for guest personal data. NexG acts as a “data processor” — we store and process that data solely to provide the Service to the restaurant.

NexG is the data fiduciary for restaurant-account data.For personal data relating to the restaurant’s own users (owners, managers, staff) and NexG’s direct relationship with the restaurant, NexG is the data fiduciary and this Policy governs NexG’s processing of that data.

Depending on how the Service is accessed and used, we may collect and process the following categories of personal data:

• Guest order data: a guest's phone number (where the restaurant collects it for ordering or receipts), optional name and email address, table and session identifiers, order history, payment status and method, tips, split-bill details, and any notes or feedback the guest provides.
• Restaurant-account data: names, email addresses, and phone numbers of restaurant owners, managers, and staff; login credentials (stored in hashed form); the restaurant's business profile, GSTIN (where provided), outlet details, menu content, pricing, and platform settings.
• Payment metadata: payment method type (UPI, card, cash, wallet), transaction reference identifiers, payment status (pending, successful, failed, refunded), and amounts. We do not store full card numbers, CVVs, bank account credentials, or UPI PINs — these are handled directly by third-party payment processors.
• Usage and technical data: server log data, IP addresses, device type, browser or app version, operating system, session identifiers, page views, feature usage, error reports, and timestamps — collected automatically when you access the Service.
• Communications data: the content of emails, support tickets, or other messages you send us.

We collect personal data directly from you (when you register, configure settings, or use features), automatically through the Service (usage and technical data), and — in the case of guest data — from guests who interact with a restaurant’s eRestro deployment.

We use personal data for the following purposes and on the following legal bases:

• Providing the Service — taking and routing orders, managing kitchen workflows, generating bills and receipts from restaurant-configured settings, recording payment workflow data, and managing tables. Legal basis: performance of a contract / legitimate interest to provide the Service.
• Account management — creating and maintaining restaurant accounts, authenticating users, and managing subscriptions and billing. Legal basis: performance of a contract.
• Transactional communications — sending order confirmations, digital receipts, or booking notifications to guests (e.g., via WhatsApp), where the restaurant has configured and authorised such messages. Legal basis: legitimate interest of the restaurant as fiduciary; guest consent where required.
• Security, fraud prevention, and abuse detection — monitoring for unauthorised access, detecting fraudulent transactions, and investigating misuse. Legal basis: legitimate interest in protecting the Service and its users.
• Improving the Service — analysing aggregated and anonymised usage patterns to fix bugs and develop new features. Legal basis: legitimate interest.
• Legal and compliance obligations — maintaining records for GST, accounting, and audit purposes, and responding to lawful requests from government authorities. Legal basis: compliance with applicable Indian law.

We do not sell personal data to third parties. We do not use guest data for marketing purposes without the restaurant’s authorisation and, where required, the guest’s consent.

We share personal data only in the following circumstances:

• Sub-processors and service providers: We engage third-party vendors — including cloud infrastructure providers, database hosts, messaging platforms (e.g., WhatsApp Business API providers), error-monitoring tools, and payment processors — who access data only as needed to perform services on our behalf and under appropriate data-processing agreements.
• Restaurant's authorised users: Within a restaurant's account, data is accessible to the restaurant's own authorised owners, managers, and staff as required for the Service.
• Payment processors: Where integrated, transactional payment data is shared with third-party UPI platforms, card networks, or payment gateway providers, subject to their own terms and privacy policies.
• Legal requirements: We may disclose data if required by law, court order, government or regulatory authority, or to protect the rights, property, or safety of NexG, our users, or the public.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to a successor entity, provided such entity agrees to handle data consistently with this Policy.

We do not share one restaurant’s guest data with any other restaurant or unaffiliated third party for their own commercial purposes.

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, and thereafter as required by applicable law:

• Restaurant-account data is retained for the duration of the subscription and for a period thereafter as required for legal, tax, or accounting obligations (typically 7 years for financial records under Indian law), after which it is deleted or anonymised.
• Guest order data is retained as configured by the restaurant (as data fiduciary), subject to applicable legal requirements. Restaurants may request deletion of guest data they control.
• Usage and technical logs are retained for a limited period for security and debugging purposes (typically 90 days), unless a longer period is required for an ongoing investigation.

Subject to the DPDP Act, 2023 and other applicable Indian law, individuals (“data principals”) may have the following rights with respect to their personal data:

• Right of access: to obtain a summary of personal data being processed and the purposes of processing.
• Right to correction and erasure: to seek correction of inaccurate or incomplete data, and to seek erasure where processing is no longer necessary or lawful.
• Right to withdraw consent: to withdraw consent (where processing is based on consent), without affecting the lawfulness of prior processing.
• Right to grievance redressal: to raise a grievance with us (and ultimately with the Data Protection Board of India, once operational).
• Right to nominate: to nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

Because the restaurant is the data fiduciary for guest data, requests from guests regarding their order data are generally to be directed to the restaurant where the order was placed. We will assist the restaurant in responding as required by law.

Requests relating to restaurant-account data (i.e., data about a restaurant’s own staff or business) should be directed to us at connect@erestro.in. We will respond within the timeframes required by applicable law.

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• encryption of data in transit (TLS/HTTPS);
• role-based access controls limiting data access to authorised personnel;
• hashed storage of passwords and sensitive credentials; and
• security monitoring and logging to detect and respond to anomalies.

No system is completely secure. In the event of a personal data breach, we will notify affected parties and relevant authorities as required under the DPDP Act and applicable law.

We use cookies and similar browser-storage technologies to operate and secure the Service. These include:

• Essential cookies: required to keep you signed in, maintain your session state (e.g., a guest's active table session), and protect the Service from attacks (e.g., CSRF protection). These cannot be disabled without breaking the Service.
• Functional cookies: remember your preferences (e.g., language or display settings) to improve your experience.
• Analytics: Google Analytics may load on production web experiences with privacy-safe defaults and Consent Mode. The “Privacy choices” control on our marketing pages lets you opt out of analytics and clear analytics cookies. Optional advertising technologies (Google Tag Manager, Meta Pixel, LinkedIn Insight Tag) load on marketing pages only after you choose Allow. None of these are required to order food, manage a restaurant, or use the core Service.

You can control or delete cookies through your browser settings. Disabling essential cookies may prevent parts of the Service from functioning correctly.

The Service is primarily operated from India. Where we use sub-processors or cloud infrastructure that may process data outside India, we take reasonable steps to ensure that such transfers comply with applicable Indian data-protection law, including restrictions on cross-border data transfers under the DPDP Act and its rules.

The Service is not directed at children, and NexG does not knowingly collect personal data from individuals under the age of 18 in connection with restaurant-account use. Restaurants that deploy eRestro to serve guests are responsible for ensuring their use of guest data (including any data incidentally involving minors) complies with the DPDP Act’s requirements regarding personal data of children, including obtaining verifiable parental or guardian consent where required.

We may update this Privacy Policy from time to time to reflect changes in the Service, applicable law, or our data practices. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice by email or in-app notification. Continued use of the Service after the updated Policy takes effect constitutes your acceptance of the changes.

For privacy-related questions, requests to exercise your rights, or to raise a grievance, please contact our grievance officer at:

NexG — eRestro Privacy / Grievances
Email: connect@erestro.in

We will acknowledge your request promptly and endeavour to resolve it within the timeframe required by applicable law. This Policy is governed by the laws of India. The courts at Bhopal, Madhya Pradesh have jurisdiction over disputes relating to this Policy.