Effective Date: 29 June 2026 | Data Controller: TechSlide IT Solutions Pvt Ltd, Thanjavur, Tamil Nadu, India | Grievance Officer: privacy@restopos.in
1. Data Controller Information
This Privacy Policy is issued by TechSlide IT Solutions Pvt Ltd ("Company," "we," "us," or "our"), the operator of RestoPOS — a cloud-based restaurant point-of-sale platform available at restopos.in. The Company acts as the "Data Fiduciary" (as defined under the Digital Personal Data Protection Act, 2023) with respect to the personal data you provide when using our Service.
This policy applies to all personal data collected through:
- The RestoPOS website (restopos.in) and all subdomains;
- The RestoPOS web application and admin dashboard;
- RestoPOS mobile applications (Android/iOS);
- Any communication channels (email, WhatsApp, phone) through which you interact with us.
This policy does not apply to third-party websites, apps, or services linked from our platform. Please review the privacy policies of any third-party services you use in connection with RestoPOS.
2. Data We Collect
We collect the following categories of data when you register, subscribe, or use RestoPOS:
Account & Identity Data:
- Full name of account holder and authorised users;
- Business name, type, and address;
- Email address and phone number;
- GSTIN (if provided for billing purposes).
Billing & Payment Data:
- Subscription plan, billing cycle, and payment history;
- Invoice details and tax information;
- Payment method metadata (we do not store full card numbers — payment processing is handled by third-party gateways).
Restaurant & Operational Data (User Data):
- Menu items, categories, and pricing;
- Table layout and seating configurations;
- Customer orders, bills, and transaction records;
- Inventory records and supplier information;
- Customer names, contact numbers, and loyalty data (entered by you);
- Staff profiles and role assignments (entered by you).
Usage & Technical Data:
- Log data including IP address, browser type, device information, and access timestamps;
- Pages visited, features used, and session duration;
- Error logs and performance diagnostics;
- Location data (city/region level, derived from IP address).
Communication Data:
- Contents of support tickets, emails, and chat messages sent to us;
- Feedback, survey responses, and review submissions.
3. Purpose of Collection
We collect and use your data for the following purposes:
- Service Delivery: To create and manage your account, process subscriptions, and provide the RestoPOS platform to you;
- Billing: To process payments, issue invoices, and manage subscription renewals;
- Customer Support: To respond to your queries, troubleshoot issues, and provide technical assistance;
- Service Improvement: To analyse usage patterns, identify bugs, and develop new features;
- Security: To detect, prevent, and respond to fraud, abuse, and security incidents;
- Legal Compliance: To comply with applicable laws, regulations, and court orders, including the IT Act, 2000, DPDP Act, 2023, and GST laws;
- Communications: To send service-related notifications, product updates, and important account information. We do not send marketing communications without your explicit consent.
We do not use your data for purposes other than those stated above without your consent.
4. Legal Basis for Processing
The Company processes your personal data on the following legal grounds under applicable Indian law:
- Contractual Necessity (Indian Contract Act, 1872): Processing your account data, billing information, and User Data is necessary to perform the subscription agreement between you and the Company;
- Legitimate Interests: Processing usage logs and technical data is necessary for our legitimate interests in securing and improving the Service, provided such interests are not overridden by your rights;
- Legal Obligation (IT Act, 2000; DPDP Act, 2023; GST Act): Certain data must be retained or shared to comply with mandatory legal requirements;
- Consent: Where we seek to process your data for purposes beyond those above (e.g., marketing), we will obtain your explicit, informed, and freely given consent. You may withdraw such consent at any time.
5. Data Sharing
We do not sell your personal data to any third party under any circumstances.
We share your data only in the following limited circumstances:
- Service Providers: With third-party vendors who assist us in operating the Service, including cloud hosting providers, payment gateways (e.g., Razorpay), email delivery services (e.g., SMTP providers), and SMS gateways. These providers are contractually bound to process your data only on our instructions and in accordance with applicable law;
- Payment Gateways: When you make payments, your transaction data is processed by our payment gateway partners. We do not receive or store full card details. Please review the privacy policy of the relevant payment gateway;
- Legal Requirements: With government authorities, law enforcement agencies, or courts where required by law, court order, or to protect the legal rights of the Company or others;
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred to the successor entity, subject to equivalent privacy protections;
- Your Authorised Third Parties: If you integrate RestoPOS with third-party platforms (e.g., Zomato, Swiggy, WhatsApp Business API), data relevant to those integrations will be shared with those platforms as directed by you.
6. Cookies & Tracking
The RestoPOS website and application use cookies and similar tracking technologies to enhance your experience and collect usage data.
Types of cookies we use:
- Essential Cookies: Required for the application to function, including session management and authentication. These cannot be disabled;
- Analytical Cookies: Used to understand how users interact with the platform, identify popular features, and diagnose errors. Data collected is aggregated and anonymised where possible;
- Preference Cookies: Used to remember your settings and preferences (e.g., language, timezone).
We do not use cookies for advertising or cross-site tracking. You may control cookie behaviour through your browser settings, though disabling essential cookies will impair the functionality of the Service.
We may also use server-side logging and analytics tools that record IP addresses, referrer URLs, and device fingerprints for security and diagnostic purposes.
7. Data Security
The Company implements appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission using TLS/SSL for all web traffic;
- Encryption of sensitive data at rest;
- Role-based access controls limiting employee access to your data;
- Regular security audits and vulnerability assessments;
- Secure backup procedures and disaster recovery planning;
- Intrusion detection systems and firewall protection.
Despite these measures, no method of electronic transmission or storage is 100% secure. The Company cannot guarantee the absolute security of your data and shall not be liable for security incidents caused by events beyond its reasonable control, including sophisticated cyberattacks, Force Majeure events, or vulnerabilities in third-party infrastructure. In the event of a personal data breach that is likely to result in risk to your rights or interests, we will notify affected users as required by applicable law.
8. Data Retention
We retain your data for as long as necessary to fulfil the purposes described in this policy and to comply with our legal obligations:
- Active Subscription: All User Data and account data is retained for the full duration of your active subscription;
- Post-Termination: For 30 days after subscription termination or account closure, your data remains accessible to you for export. After 30 days, operational data is deleted from production systems;
- Backup Retention: Backup copies of data (for disaster recovery and legal compliance purposes) may be retained for up to 2 years post-termination, after which they are securely deleted;
- Financial Records: Billing records, invoices, and transaction history are retained for a minimum of 7 years as required by Indian tax and accounting laws (GST Act, Companies Act);
- Security Logs: Access logs and security event records are retained for up to 12 months.
When data is no longer required, it is securely deleted or anonymised in accordance with applicable law.
9. Your Rights
As a data subject under applicable Indian law (including the DPDP Act, 2023), you have the following rights with respect to your personal data:
- Right to Access: You may request a copy of the personal data we hold about you;
- Right to Correction: You may request correction of inaccurate or incomplete personal data;
- Right to Erasure: You may request deletion of your personal data, subject to our retention obligations under applicable law;
- Right to Data Portability: You may request your User Data in a machine-readable format;
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal;
- Right to Nominate: Under the DPDP Act, 2023, you may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, please contact our Grievance Officer at privacy@restopos.in. We will respond to verified requests within 30 days. We may require you to verify your identity before processing a request. Note that certain data cannot be deleted where retention is required by law or is necessary to fulfil our contractual obligations to you.
10. Third-Party Integrations
RestoPOS integrates with various third-party platforms to enhance your restaurant operations. When you enable these integrations, certain data is shared with or received from those platforms:
- Food Aggregators (Zomato, Swiggy, etc.): Order data, menu information, and sales metrics may be exchanged with these platforms as part of the integration. These platforms have their own privacy policies and data handling practices, for which the Company is not responsible;
- Payment Gateways (Razorpay, PayU, etc.): Payment transaction data is processed directly by these gateways. Their privacy policies govern the handling of your payment information;
- SMS & WhatsApp Providers: Customer communication data (phone numbers, message content) is processed by these providers to deliver messages to your customers on your behalf;
- Cloud Hosting Providers: Our infrastructure partners host the servers on which your data is stored. These providers maintain their own security certifications and compliance frameworks.
The Company does not control and is not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies before enabling any integration.
11. Changes to This Policy
The Company may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated policy on this page with a revised effective date.
For material changes that significantly affect your rights or our data handling practices, we will provide prominent notice through the Platform or by email to your registered address, at least 14 days before the changes take effect.
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the Company has appointed a Grievance Officer to address complaints and queries regarding this Privacy Policy.
Grievance Officer:
TechSlide IT Solutions Pvt Ltd
Thanjavur, Tamil Nadu — 613 001, India
Email: privacy@restopos.in
Phone: +91 9789893722
We will acknowledge your grievance within 72 hours and endeavour to resolve it within 30 days of receipt. If you are not satisfied with the resolution, you may approach the relevant regulatory authority under the DPDP Act, 2023, or the competent courts in Thanjavur, Tamil Nadu.
For general support enquiries: support@restopos.in