Privacy Policy

1. Data we collect

Restaurant owners and staff: work email address (used for sign-in with a one-time code), restaurant profile and settings you enter (name, address, hours), and the menu content you create (dishes, prices, photos, videos).

Guests: orders placed (items, quantities, notes, table), cart contents, and order status. A random device identifier is stored in a cookie so the cart survives a page reload; no account, name, or phone number is required to order.

Payment data: card details are entered into Stripe's payment form and are collected and stored by Stripe. We never see, process, or store full card numbers.

Usage analytics: server-side product events such as QR scans, menu views, and orders placed. We use these to operate and improve the Service. We do not run third-party advertising trackers.

2. How we use data

We use the data to provide the Service (sign you in, serve menus, route orders to the restaurant, process payments), to bill subscriptions and add-ons, to provide support, to keep the Service secure, and to improve the product. We do not sell personal data.

3. Cookies

We use technical cookies only: a device identifier that keeps a guest's cart, and a language preference. They are required for the Service to work and are not used for advertising.

4. Where data is stored

Data is stored on servers located in the European Union. Payment card data is stored by Stripe under its own certifications and policies.

5. Who we share data with

We share data only with the providers needed to run the Service: Stripe (payment processing) and our infrastructure providers (hosting). Each processes data on our instructions and for the purposes described above. We may also disclose data where required by law.

6. Retention

We keep account and restaurant data while the account is active. Order history is kept as needed for the restaurant's records and legal obligations. We delete or anonymize data when it is no longer needed or when you ask us to, subject to legal retention requirements.

7. Your rights

You can request access to your data, a copy (export) of it, correction of inaccurate data, or deletion of it. To exercise any of these rights, email hello@dishmotion.com — we respond within 30 days.

If you are in the EU/EEA, you also have the right to lodge a complaint with your local data-protection authority.

8. Security

We protect data with encryption in transit and access controls limited to the people and systems that need it. No method of transmission or storage is perfectly secure; if a breach affects your data, we will notify you as required by law.

9. Changes and contact

We may update this Policy; material changes will be announced by email or inside the Service before they take effect. Privacy questions and requests: hello@dishmotion.com.