Privacy Policy

This Privacy Policy explains how Tosio ("Tosio", "we", "us") collects, uses, shares, and protects information when a restaurant ("you", the "Restaurant"), its staff, or its customers use the Tosio platform — the website, the reception desktop application, and the waiter mobile application (together, the "Service").

1. Information We Collect

Account and Restaurant Information

When you sign up, we collect your name, email address, phone number, restaurant name, and business details you provide (such as GST registration status and branch addresses).

Staff Information

Restaurant owners may create staff accounts. We store staff names, roles, and login credentials as provided by the Restaurant. The Restaurant is responsible for having the appropriate basis to provide this information to us.

Order and Menu Data

We store menu items, prices, and order history (including items ordered, table assignments, and order timestamps) needed to operate POS, kitchen display, billing, and reporting features.

Customer Information (Diners)

When a diner orders via QR/online ordering, we collect what's needed to fulfil the order — typically a name and phone number, and payment details processed by our payment partners (see Section 3). We do not require a diner account to place an order.

Payment Information

We do not store full card numbers. Payments are processed by Razorpay and/or Stripe, who handle and store payment instrument details under their own privacy and security policies.

Device and Usage Data

The reception desktop app and waiter app collect device identifiers, app version, and diagnostic logs to keep printing and order sync reliable. Our website uses cookies as described in Section 6.

2. How We Use Information

• To provide and operate the Service — taking orders, routing them to the kitchen, printing receipts, and billing.
• To send order status updates and account-related notifications by email, SMS, or push notification.
• To process payments and generate GST-compliant invoices.
• To detect, prevent, and address fraud, abuse, or technical issues.
• To improve the Service, including generating 3D previews of menu items where requested.

3. Sharing With Third Parties

We share information with service providers strictly to operate the Service, including:

• Razorpay and Stripe — payment processing.
• Amazon Web Services (AWS) — hosting and file storage.
• Pusher — real-time order and table status updates.
• Resend — transactional email delivery.
• MSG91 — SMS delivery.
• Meshy AI — generating 3D previews of menu items you submit for that feature.

We do not sell personal information. We may disclose information if required by law or to protect the rights, property, or safety of Tosio, our users, or the public.

4. Data Retention

We retain order and billing records for as long as your account is active and as needed to meet tax and accounting obligations under Indian law. You may request deletion of account data that we are not legally required to retain.

5. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us using the details in Section 8. Restaurant owners can access and export most of their own data directly from the admin dashboard.

6. Cookies

Our website uses essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

7. Data Security

We use encryption in transit (HTTPS) and at rest for sensitive fields, role-based access controls, and scoped device credentials for the desktop and mobile apps. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of the Grievance Officer are:

Name: [GRIEVANCE OFFICER NAME — TO BE ADDED]
Email: [GRIEVANCE OFFICER EMAIL — TO BE ADDED]

We aim to acknowledge grievances within 24 hours and resolve them within 15 days, as required by law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a revised "Last updated" date.

10. Governing Law

This Privacy Policy is governed by the laws of India.