Privacy Policy

Your privacy matters to us. This policy explains, in plain language, what personal data OnRestro collects, why we collect it, who can see it, how long we keep it and what choices you have. It applies to our website (onrestro.com), to enquiries you send us, and to the OnRestro application (app.onrestro.com).

1. Who we are

OnRestro is restaurant ordering, POS and management software owned and operated by Skyomi, Himmatnagar, Gujarat, India ("Skyomi", "OnRestro", "we", "us" or "our").

2. Two groups of people, two roles

OnRestro is used by restaurants, and restaurants serve guests. Our responsibilities differ depending on whose data it is.

Restaurant owners and staff (our customers). For the account and sign-up details of restaurant owners and their staff users, Skyomi decides why and how the data is used. We act as the data fiduciary (the party responsible for that data).

Guests who order at a restaurant. When a guest orders through a restaurant's QR menu or a restaurant's POS, the restaurant decides what is collected and why. In this case, OnRestro processes the information on the restaurant's behalf and under its instructions (as a data processor). If you are a guest and have a question or request about your order data, please contact the restaurant first. We will also help you where we can.

3. What information we collect

3.1 Visitors to our website

• Contact and enquiry details. The email address you enter in our enquiry or contact form, and anything else you choose to write in it.
• Usage information. We use Google Analytics to understand how visitors use the website. See section 6 for details.

3.2 Restaurant owners and staff using OnRestro

• Account details. Name, email address, password, GST number and restaurant details (such as restaurant name and business information). Passwords are stored in a hashed form, which means they cannot be read by us or anyone else.
• Business data you enter or generate. Menus, prices, tables, orders, invoices, payment records, inventory, expenses, other income, reports, staff accounts you create and their permissions.
• Technical data. IP address, browser and device type, log records and session information needed to keep the service secure and working.

3.3 Guests ordering at a restaurant

• Optional details. A guest may choose to give a name and a phone number. These are optional.
• Anonymous ordering. Guests can place an order without giving any personal details. In that case, we do not collect a name or phone number for that order.
• Order information. The items ordered, table, time and order history linked to that restaurant.
• OnRestro does not ask guests for card or bank details through the QR menu.

We do not knowingly collect more personal data than is needed to run the service.

4. How we use information

We use personal data to:

• create and manage restaurant accounts and let you log in;
• provide the OnRestro service, including ordering, billing, kitchen display, inventory, expenses and reports;
• keep the service secure, prevent misuse and fix technical problems;
• respond to your enquiries and support emails;
• send service-related messages (such as account, billing or important policy notices);
• understand website usage so we can improve our content and product;
• keep records and comply with legal, tax and regulatory requirements.

We do not sell personal data. We do not use it to show you third-party advertising.

5. Our basis for using personal data

We process personal data based on your consent, for example when you submit an enquiry or create an account, and for the limited purposes the law permits without consent, such as providing a service you asked for, meeting legal obligations and keeping our systems secure. You can withdraw your consent at any time by contacting us, though this may mean we can no longer provide some or all of the service.

6. Cookies, analytics and similar technologies

Essential cookies. OnRestro uses essential cookies and similar storage that are needed for login, session handling, security and basic functioning. The service cannot work properly without them.

Google Analytics. Our website uses Google Analytics, a web analytics service provided by Google, to measure how visitors find and use the site.

• It uses cookies and similar identifiers to collect information such as the pages you view, how long you stay, the links you click, the type of device and browser you use, your approximate location (such as city or region) and the website that referred you.
• This information is used in aggregated form to understand traffic and improve our website. We do not use Google Analytics to collect your name, phone number or other directly identifying details, and we do not send those to Google through it.
• Google may process this data on servers outside India. How Google handles it is described in the Google Privacy Policy (policies.google.com/privacy) and on the page "How Google uses information from sites or apps that use our services" (policies.google.com/technologies/partner-sites).

Your choices. You can block or delete cookies in your browser settings. You can also stop Google Analytics from collecting data about your visits by installing the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). If you block essential cookies, parts of the OnRestro application may not work.

Advertising. We do not use cookies to run advertising campaigns for third parties.

7. Who we share information with

We do not sell or rent personal data. We share it only in the following situations:

• Service providers who help us run OnRestro. This includes our hosting provider (our servers are located in Mumbai, India), cloud backup services and Google Analytics. They may access data only as needed to provide their services.
• Services we may add in the future. As OnRestro grows, we may use email or SMS providers, WhatsApp messaging, and online payment gateways (such as Razorpay). If we start using them, we will update this policy before or when they begin to handle personal data.
• Within a restaurant's account. Information entered by a restaurant is visible to the owner and to staff users that the owner gives access to, according to the roles and permissions the owner sets.
• Legal and safety reasons. If required by law, court order or a lawful request from a government authority, or to protect the rights, safety and security of our users, the public or Skyomi.
• Business changes. If Skyomi or OnRestro is transferred to another owner, your information may be transferred as part of that change. We will make sure the new owner continues to protect it in line with this policy.

8. Where your data is stored

OnRestro's application data is hosted on servers located in Mumbai, India, and protected by daily backups. Some service providers, such as Google Analytics, may process limited data outside India.

9. How long we keep data

• While you are a customer. We keep your account and business data for as long as your subscription is active.
• After you stop using OnRestro. You can ask us to provide an export of your data. After cancellation or expiry, we delete your account and business data from our live systems within 180 days, unless the law requires us to keep certain records for longer.
• Backups. Copies in backups are removed when those backups are overwritten as part of our regular backup cycle.
• Enquiries. Emails and enquiry details are kept for as long as needed to respond to you and manage our business relationship, and then deleted or anonymised.
• Legal records. We may keep invoices, payment records and other information that tax, accounting or other laws require us to retain.

10. How we protect data

We use reasonable security practices and procedures, including hashed password storage, access controls, secured hosting and daily backups, to protect personal data against unauthorised access, loss or misuse. No online service can be guaranteed to be completely secure. You can help by choosing a strong password, keeping your login details private and removing access for staff who leave your business.

If a personal data breach occurs that affects you, we will notify the people and authorities we are required to notify, as the law requires.

11. Your rights

Under applicable Indian law, including the Digital Personal Data Protection Act, 2023, you may have the right to:

• ask for a summary of the personal data we process about you and how we use it;
• ask us to correct inaccurate or incomplete data;
• ask us to erase personal data we no longer need to keep;
• withdraw consent you have given;
• raise a grievance with us about how your data is handled;
• nominate another person to exercise your rights if you cannot.

To use any of these rights, email onrestroapp@gmail.com from the address linked to your account or enquiry. We may need to verify your identity first. We will respond within a reasonable time and in line with the timelines set by law.

If you are a guest whose data was collected by a restaurant, please also contact that restaurant, as it decides how your order data is used.

12. Children

OnRestro is a business service intended for restaurant owners and their staff. It is not meant for children under 18, and we do not knowingly collect personal data from children through our website or account sign-up. If you believe a child has given us personal data, please contact us and we will delete it.

13. Links to other websites

Our website may link to other websites, including skyomi.com. We are not responsible for the privacy practices of other sites, so please read their policies.

14. Changes to this policy

We may update this policy from time to time, for example when we add new features or services. The updated version will be posted on this page with a new "Last updated" date. For significant changes, we will make a reasonable effort to let account holders know.

15. Contact us

For questions, requests or complaints about privacy, write to us:

We will acknowledge and try to resolve your concern within a reasonable time. If you are not satisfied with our response, you may approach the Data Protection Board of India as provided under law.

Related policies: Terms of Service · Refund & Cancellation Policy