Privacy Policy

At Restomas, we collect the following personal data to provide and improve our services:

• Identity: Name, surname, email address, phone number
• Business: Restaurant name, branch addresses, tax ID
• Account: Username, password (hashed), login records
• Usage Data: IP address, browser info, page views, session durations
• Site Analytics: Pages viewed, time on page, scroll depth, referring source and campaign tags, device type, browser, language, and country. Your IP address is shortened before it is stored, so it identifies a network area rather than a person.
• Order Data: Menu interactions, order details, payment amounts
• Cookie Data: Session cookies, preference cookies, analytics cookies

Collected data is processed for the following purposes:

• Providing, managing, and improving our services
• Creating and securing user accounts
• Managing and reporting order processes
• Handling customer support requests
• Fulfilling legal obligations
• Marketing communications (with consent)
• Statistical analyses and improving service quality

Your data may only be shared in the following cases:

• Payment Processors: PCI-DSS compliant providers (Stripe etc.)
• Infrastructure: Server hosting and cloud service partners
• Legal Requirement: Court orders or authorized public authority requests

Your data is never sold or rented for advertising purposes.

• Essential: Required for session management and security
• Preference: Remembers settings like language and theme
• Analytics: Collects anonymous usage statistics
• Our own analytics: We keep two of our own cookies (rms_vid and rms_sid) that hold only random numbers, never your name or email. They let us tell one visit apart from the next so we can measure which pages help and which do not. The data stays on our own servers and is not sold or shared for advertising.

You can disable cookies through your browser settings.

If your browser sends a "Do Not Track" signal, our own analytics turns itself off for that visit.

• Account Data: While account active + 30 days after deletion
• Order Data: Legal accounting requirements — 10 years
• Usage Logs: 12 months
• Site Analytics: 6 months for visit records; after that only daily totals remain, and those carry no visitor identifier.
• Marketing Data: Until consent is withdrawn

• SSL/TLS encryption for all data transfers
• Passwords stored hashed using bcrypt
• Regular security audits and penetration testing
• Access control and authorization mechanisms
• Backup and disaster recovery procedures

• Right to know whether your data is being processed
• Right to request information about processing
• Right to learn the purpose of processing
• Right to know third parties data is transferred to
• Right to request correction of inaccurate data
• Right to request deletion when conditions are met
• Right to object to automated analysis outcomes
• Right to data portability (GDPR)

When you create an account, verify your phone number or sign in, Restomas may contact you by email and SMS. This section explains what we process for those messages and how you can stop them.

• Communication data: phone number, email address, language preference, consent and opt-out records, and the delivery status of the messages we send you.
• Purpose: we use SMS to deliver one-time verification codes for account login and phone number verification, and to send security notices about your account. We do not send marketing SMS.
• Messaging providers: SMS messages are delivered through Telnyx LLC and email through our email infrastructure provider. These providers process the data only to deliver the message on our behalf.

SMS opt-in data and consent records are never sold, rented or shared with third parties for marketing purposes. They are shared only with the service providers needed to deliver the message, and where the law requires it.

We will not share or sell your mobile information with third parties for promotional purposes.

You can withdraw your consent at any time by removing your phone number in your account settings, by replying STOP to a message received from our US number, or by writing to support@restomas.com. Once the number is removed, we stop sending SMS to it.

Message and data rates may apply. Message frequency varies and depends on your own activity, such as how often you sign in.

For questions about our privacy policy or to exercise your rights: