Privacy Policy

RestoQR is a restaurant platform operated by Arcaisys Private Limited(“RestoQR”, “we”). This policy covers this website, the RestoQR apps restaurants and their guests use (including table ordering, table bookings and the restaurant's management apps), and the WhatsApp booking messages RestoQR sends for restaurants.

Restaurants use RestoQR to serve their own guests. For guests' information, the restaurant decides what is collected and why, and RestoQR handles it on the restaurant's behalf. Guests can ask the restaurant, or us, about their information at any time.

Information we collect

Website enquiries. If you submit the demo form or contact us, we receive the details you choose to share — such as your name, restaurant name, phone number and city — to respond to you.

Restaurants and their staff.The owner's email address and password (stored only as a secure hash); the restaurant's profile (name, address, phone, logo, payment QR); menus, orders, bills and bookings; and staff names, phone numbers and PINs (stored as hashes) where the restaurant adds staff.

Guests. The name and mobile number a guest gives at the table or when booking; their orders; and, for a table booking, the date, time, number of guests, any occasion or note, the WhatsApp number to message (if different) and whether they agreed to hear from the restaurant; and, at the table, whether they asked for their bill on WhatsApp.

WhatsApp booking messages and bills

A restaurant can connect its own WhatsApp Business number to RestoQR through Meta. RestoQR then sends that restaurant's guests messages about their own bookings from that number — for example a confirmation, a reminder with On Time, Running Late and Cancel buttons, and notice of a change or cancellation. A guest who ticks Send my bill on WhatsApp at the table is also sent their bill once it is paid, with a link to the itemised bill that opens that bill only.

• From the restaurant's WhatsApp accountwe store the identifiers Meta gives us (business, WhatsApp Business account and phone number IDs), the access Meta grants RestoQR (stored encrypted), the wording of the restaurant's messages and Meta's approval of them, and the account status Meta reports (such as number quality).
• For each messagewe keep a log the restaurant can see: which booking or table bill it was about, the message text, its delivery status, and the guest's number in protected form (a one-way code plus the last four digits).
• Guest replies(button taps or a typed “cancel”, “on time” or “late”) are received from Meta and used only to update that guest's booking with that restaurant, for example to mark it on time or to cancel it.
• Restaurants that keep using the WhatsApp Business app on the same number: Meta also notifies RestoQR of messages sent from the app, chat history and contacts. RestoQR keeps only counts and sync progress — never the conversations or the contacts.

We use information received from Meta and WhatsApp only to provide these booking messages and bills to the restaurant that connected the number. We do not use it for advertising, we do not sell it, we do not send promotional messages, and we do not combine one restaurant's WhatsApp data with another's.

How we use information

To run the service for the restaurant — taking orders and bookings, billing, sending booking messages and showing the restaurant its own reports — to keep accounts secure, to provide support, and to respond to enquiries. We do not sell personal information.

Who we share it with

Only the service providers that run RestoQR, each for its own part:

• Google Cloud — hosting, database and file storage (United States region).
• Vercel — hosting of the RestoQR web apps.
• Meta (WhatsApp) — delivering booking messages and guests' replies, for restaurants that connect a number.
• Resend — account emails such as sign-in codes and password resets.
• Google (Gemini) and Anthropic (Claude)— reading supplier bills a restaurant chooses to upload, and wording the restaurant's own operational summaries. Guest contact details are not sent to them.

We may also disclose information where the law requires it.

Security

Information travels encrypted (HTTPS). Phone numbers and WhatsApp access details are additionally encrypted in our database, passwords and PINs are stored only as hashes, each restaurant can see only its own data, and personal details are removed from our system logs.

How long we keep it

For as long as the restaurant uses RestoQR. When a restaurant's workspace is deleted, its data — including its guests' data and WhatsApp records — is deleted with it. A restaurant can disconnect WhatsApp at any time, which removes the WhatsApp access details and message wording straight away. Records the law requires us to keep, such as invoices, are kept only as long as required.

Your choices and deletion

You can ask to see or delete your information, or ask a restaurant to stop sending you WhatsApp messages. See Data Deletion for how, or email pm.team@arcaisys.com.

Changes

We will update this page if this policy changes, and change the date at the top.

Contact

Arcaisys Private Limited — email pm.team@arcaisys.com or call +91 91378 15600.