Privacy policy

1Who this policy covers

EMenuScan is operated by Manditi Tech Solutions. This policy covers two different sets of people, and the difference matters.

The first is you — the restaurant, café, tiffin centre or kitchen that subscribes, and the people you give a login to. For that information we decide how it is handled, and this policy is our promise to you about it.

The second is your guests. When somebody scans a table, orders a delivery or goes on your credit ledger, that information belongs to your restaurant. We hold it and process it on your behalf and under your instructions — we do not decide what to do with it. A guest who wants their details corrected or removed should start with the restaurant they ordered from, and we will help that restaurant do it.

2What we hold

Only what the job needs. In practice that is:

• Your account: business name, branch names and addresses, and the name, mobile number and role of each person you give a login to.
• Guest details, but only where they are actually given: a name and mobile number for a home delivery, a credit ledger entry or a bill; a delivery address where you deliver. An ordinary dine-in scan needs none of it — there is no account, no login and no sign-up for a guest.
• What was ordered and what was paid: orders, bills, discounts, refunds and credit settlements.
• Delivery proof: where a rider collects cash at the door, the photograph taken as proof of that payment.
• Team records, if you use the staff and payroll add-on: employment details, attendance, leave and pay.
• Technical records: a log of changes made in the portal — who changed what, and when — and the ordinary server logs any website keeps in order to stay up and stay secure.

3What we never do with it

This is the part most people actually want to read, so it is stated plainly.

The only outside parties involved at all are the ones needed to keep the service running — the company that hosts the servers, and the map provider whose tiles load when somebody opens a location picker. Each of those sees only what that job requires, and none of them is given your data to use for their own purposes.

The one other exception is the law. If we were ever served a valid, lawful demand for information we would have to comply with it, and we would tell you unless we were forbidden from doing so.

• We do not sell your information, or your guests', to anybody. Not to a data broker, not to a marketplace, not to an aggregator.
• We do not share it with another restaurant. One restaurant's data is never visible to another, and that is enforced by the software rather than by a policy somebody has to remember.
• We do not use it to advertise to you or to your guests, and we do not build a profile of a guest that follows them from one restaurant to another.
• We do not run advertising trackers, analytics companies or social-network pixels inside the product — not on your portal, and not on the page your guests see when they scan a table or order a delivery.
• We do not read your data to train anything, or to work out what to sell you next.

4Cookies

Every cookie the product sets is one it needs in order to work. There are no advertising cookies and nothing that tracks anybody across other websites.

• A sign-in cookie, so a member of your staff stays signed in to the portal.
• A dining-session cookie, so a guest's table and cart survive a page refresh or a dropped signal.
• A cookie remembering which branch a delivery order is being placed with.

5Money and payment details

We never see your guests' payment credentials, because the product has no payment gateway in it. A UPI payment at the table or at the door goes straight to your own account, and cash stays in your till — all the software does is record that the payment happened, and who recorded it.

No card number, UPI PIN or banking credential is stored anywhere in the product.

6How long we keep it

Delivery proof photographs are destroyed automatically ten days after they are taken. The record that the payment happened stays; the image does not, because after ten days it has done its job.

Your business records — orders, bills, credit, salary — are kept for as long as your account is open, because they are your accounting records and deleting them would be doing you harm rather than good.

If you close your account, ask and we will give you an export of everything and then remove the rest.

7How it is kept safe

No system anywhere is perfectly secure, and any company that tells you otherwise is selling something. What we can tell you is what is actually in place:

• Everything travels over an encrypted connection.
• Passwords are stored in hashed form and cannot be read back — not by us either.
• Each restaurant's data is separated from every other restaurant's, and a branch user only ever works inside their own branch.
• Every change made in the portal is written to an audit log with the person and the time against it.
• You can restrict the back office to your restaurant's own network addresses, so it cannot be opened from anywhere else.
• Passwords, one-time codes and access tokens are never written to logs.

8Your rights

You can ask what we hold about you, ask us to correct it, ask for a copy of it, or ask us to delete it. Every report in the portal also exports to CSV at any time, so a copy of your own business data never requires asking anybody.

A guest who wants their information corrected or removed should ask the restaurant they ordered from; that restaurant can act on it directly, and can ask us for help. A restaurant can reach us on WhatsApp using the contact on the EMenuScan website.

9Children

The product is sold to businesses and is not directed at children. We do not knowingly collect information from a child, and there is nothing in the guest experience aimed at one.

10Changes to this policy

If this wording changes, the new version appears here with a new date at the top. Where a change materially affects how your information is handled, we will tell the people who administer your account rather than leave you to notice it.