Privacy Policy

Version 2026-10

1. Who is who

For your account data (name, email, service usage) we are the data controller. For the data of your restaurant's end customers (name, phone, orders, points), you are the controller and we act as a processor on your behalf and under your instructions.

2. What data we process

Account data, business data (menu, sales, inventory), data of your customers that you record or that they enter when ordering via QR, and minimal technical data (access and security logs).

3. Why

To provide the service, keep it secure, offer support and meet legal obligations. We do not sell personal data.

4. Marketing

Promotional messages to your customers are sent only to those who gave consent, and they can opt out at any time using the link in each message.

5. Providers

We use infrastructure providers (hosting and database), email and, if you enable it, artificial intelligence to read menus. Data may be processed outside your country with appropriate contractual safeguards.

6. Retention and rights

We keep data while you have an account and as long as the law requires. You can request access, rectification, export or deletion by writing to the contact above.

7. Security

We isolate each restaurant's data, encrypt communications and restrict access by role. No system is infallible: we will notify relevant incidents as required by applicable law.

Contact to exercise your rights: veitiastudios@gmail.com