Privacy Policy

1.Who we are

RestroAI is a restaurant technology platform and food marketplace operated by Muhammad Tahir Jamil, trading as RestroAI, from a business address at 13-D, Commercial Block D, Valencia, Lahore 54784, Pakistan. Where this policy says "we", "us" or "our", it means Muhammad Tahir Jamil, trading as RestroAI.

This policy is governed by the law of Pakistan. It explains what personal information we handle, why, who we share it with, and what you can ask us to do about it.

Two different roles — please read this part

We handle personal information in two distinct capacities, and your rights differ depending on which applies to you.

The marketplace, specifically

When you create an account on the RestroAI marketplace, you are our customer, not a restaurant's. We decide what we collect, why, and how long we keep it, and every right described in this policy you can exercise against us directly at privacy@restroai.io.

When you place a marketplace order we pass the vendor what it needs to prepare and deliver it — your name, phone number, delivery address, order contents and any notes. From that point the vendor is also a controller of those details, for fulfilling your order and for its own record-keeping, and it is responsible for what it does with them. We require every vendor by contract to use them only for your order and to keep them secure.

2.What this policy covers

This policy covers the following products. Where a product is operated for a restaurant rather than for ourselves, that is stated.

• This marketing website, including demo bookings and contact enquiries.
• The RestroAI marketplace, our own multi-vendor ordering website and app — as the controller, because it is our product. Where we say "the marketplace" below, we mean this.
• The merchant admin dashboard and point-of-sale system.
• Restaurant storefronts that run on our platform, including those on the restaurant's own domain — as a processor for that restaurant.
• Restaurant-branded mobile apps on iOS and Android. We build and publish these under our own developer accounts, so RestroAI is the listed publisher and this policy is the one shown on each app's store listing. Each app is branded for a single restaurant and connects only to that restaurant's menu and orders.
• Our rider tools.
• Marketing Hub and IntentFlow, our merchant marketing and visitor-analytics products.

It does not cover third-party sites or apps we link to, or the payment apps and banking services you pay through, which have their own policies.

3.What we collect

Information you give us

Information collected automatically

Some of this is collected without a prompt, because it arrives as part of how the internet works or is needed to keep your session and basket working. We list all of it rather than only the parts that require a permission dialog.

Information we work out

• Order history, total spend, purchase count and loyalty points.
• Basket value and whether a basket was abandoned.
• Behavioural segments and interest scores, used to decide which messages or offers you see.
• Intent detected from your chat messages by automated language analysis, used to route your question.

4.Permissions we ask your device for

This is the complete list. Anything not listed here, we do not request.

You can withdraw any permission at any time in your device or browser settings. The service keeps working; you will just need to enter an address manually or miss order updates.

5.What we store on your device, and cookies

This marketing website runs no advertising or analytics trackers of any kind. It sets one cookie, named NEXT_LOCALE, which remembers the language you chose so we can show you the right one next time. It lasts a year, contains nothing but a language code, and is not used to identify or track you.

That cookie is strictly necessary to make the site work in your language, so there is no consent banner for it. You can delete it in your browser settings at any time; the site will simply default to English until you pick a language again.

Our storefronts and apps store a small amount of data on your device using browser local storage, or the secure keychain on mobile. This is not used for advertising. It consists of:

Clearing your browser data or reinstalling the app removes all of it. Doing so also empties your basket and signs you out.

6.Why we use your information

Below is why we use your information and, for each purpose, the legal basis we rely on. We apply these bases as our own standard, whether or not the law where we operate currently requires us to state one.

Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and you can object at any time using the contact details below.

7.Behavioural analytics, and how to switch it off

Restaurant storefronts on our platform include our own analytics technology, IntentFlow. We are telling you about it in detail because it observes more than a simple page counter, and because you can turn it off.

What it records

• Pages you view, in what order, and how long you spend on each.
• How far down a page you scroll, and when you stop interacting.
• Links, buttons and calls to action you click, including the visible text of what you clicked.
• Repeated rapid clicks on the same element, which usually indicate something is broken.
• Which products you look at and for how long, and whether you interact with them.
• When you start filling in a form, which field you stopped at, and how many fields you had completed — but not what you typed, unless you submit the form.
• When you move to another browser tab and when you come back.
• Signals that you are about to leave, including during checkout.
• Your device type, browser, language, time zone, referring page and campaign parameters.

This is linked to your visitor identifier, and to your account once you sign in, so that a message triggered by your behaviour can actually reach you. It is used to improve storefronts and to show relevant on-site messages or offers.

How to switch it off

• Turn on "Do Not Track" in your browser settings. We honour it: when it is set, our analytics does not run and records nothing at all. Many sites ignore this signal; we do not.
• Where a restaurant has enabled a consent banner, decline it — nothing is recorded or stored until you agree.
• Use your browser's private browsing mode, or clear site data, to reset your visitor identifier.
• Contact us using the details below and ask us to stop.

8.Who we share your information with

We share personal information only as set out below. Every company listed is bound by contract to use it solely for the purpose we specify.

Restaurants, vendors and riders

When you place an order, the restaurant or marketplace vendor receives your name, contact details, order and delivery address. The rider assigned to you receives your name, phone number, delivery address and any delivery notes, so they can find you.

On the marketplace, vendors arrange their own delivery, so the rider who brings your order works for the vendor rather than for us. We pass your delivery details to the vendor, and the vendor passes them to whoever it sends. We require vendors by contract to use those details only for your order, but we do not control their riders directly.

Service providers

Other disclosures

• Professional advisers — lawyers, accountants and auditors — where needed.
• Law enforcement or regulators, where we are legally required to, or to establish or defend legal claims.
• A buyer or successor, if the business is sold or reorganised. We will tell you before your information becomes subject to a different policy.

9.Where your information goes

Our database and servers are in Germany. Several providers above are based in the United States and process data there, including Anthropic, OneSignal, Cloudflare, Google, Meta, Resend and Vercel. Your payment stays in Pakistan: JazzCash and Easypaisa are Pakistani providers processing it locally.

Where information leaves your territory, we rely on the receiving company's own approved transfer mechanism — for most of those listed, the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. You can ask us for details of the safeguards applying to a specific provider.

10.How long we keep it

We keep personal information only as long as we need it for the purpose we collected it for, or as long as the law requires. These are the periods we work to.

When we delete an account we may keep a minimal record of the order and payment for as long as tax and accounting law requires, and a note that the account was deleted so we do not recreate it.

11.Your rights, and how to use them

Depending on where you live, you may have the right to ask us to: give you a copy of your information; correct it; delete it; restrict or stop a particular use; send it to another provider; or object to processing we base on legitimate interests. Where we rely on your consent, you can withdraw it at any time, and withdrawing it does not affect anything done beforehand.

How to make a request

Email privacy@restroai.io, or write to us at 13-D, Commercial Block D, Valencia, Lahore 54784, Pakistan. Tell us what you want and which email address or phone number you used with us. We will respond within 30 days. We may need to verify your identity first, so that nobody else can obtain or delete your data.

If you ordered on the RestroAI marketplace, bring the request to us — we are the controller and we will deal with it ourselves, though we may need to keep the order record for the tax period described above and will ask the vendor to delete its copy.

If you ordered from a restaurant on its own website or branded app, that restaurant decides what happens to your order data. Send the request to it, or to us and we will forward it and help carry it out.

To stop marketing without closing your account: use the unsubscribe link in any marketing email, turn off notifications in your device settings, or email us.

If you are unhappy with how we have handled your information, please tell us first — we would like the chance to put it right. You may also complain to the data protection authority in the country where you live, where one exists.

12.How we protect it

We take security seriously, and we describe only measures we actually have.

• All traffic between you and us is encrypted using HTTPS/TLS.
• Passwords are stored only as salted cryptographic hashes and cannot be read back, by us or anyone else.
• We store no payment credentials at all. We do not accept card payments, and wallet payments are authorised inside the provider's own app or page, so your wallet PIN never reaches us.
• Sign-in tokens are held in your device's secure keychain on mobile.
• Access to production systems is restricted to named administrators using key-based authentication.
• Each restaurant's data is isolated, and access is checked on every request.
• Administrative actions are recorded in an audit log.

No service can promise perfect security. If a breach affects your information and the law requires it, we will notify you and the relevant regulator within the required timeframe.

13.Children

The service is not intended for children. You must be at least 16 years old to create an account. We do not knowingly collect information from children below that age; if we learn that we have, we will delete it. If you believe a child has given us their information, contact us and we will remove it promptly.

14.Changes to this policy

We update this policy when what we do changes. The effective date at the top always reflects the current version. If a change materially affects how we use your information, we will tell you by email or in the app before it takes effect, and where the law requires it we will ask for your consent again rather than assume it.

15.Contact us

For anything in this policy, including a rights request or a complaint, email privacy@restroai.io or write to Muhammad Tahir Jamil, trading as RestroAI, 13-D, Commercial Block D, Valencia, Lahore 54784, Pakistan.

Business address: 13-D, Commercial Block D, Valencia, Lahore 54784, Pakistan. RestroAI is a trading name of a sole proprietorship in Pakistan and is not a registered company; the controller is Muhammad Tahir Jamil, trading as RestroAI.