Privacy Policy
Last updated: 2026-09-19
Overview
Plain-language summary first. The full legal version is on file at our registered office.
What we collect
For shop owners: email, hashed password (Argon2id), restaurant name, menu items, order history, and payment metadata (we don't store full card numbers). For diners: a session cookie, language preference, and the items they ordered.
What we don't do
We don't sell aggregate data. We don't claim rights to your menu content. We don't track diners across sites.
Your rights
Export your data via CSV any time. Delete your account from /owner/brand/settings; we purge within 30 days.
Contact
Privacy questions: privacy@aroi.app