RestroPod

Data Processing Terms

Last Updated:

This document explains, in clear terms, who is legally responsible for what data, across RestroPod. It works alongside our Privacy Policy — the Privacy Policy tells people what data is collected; this document says who is accountable for it.

1. The Two Layers of Data in RestroPod

There are two separate relationships in RestroPod, and they work differently:

Layer 1 — Between you (the owner of the restaurant or shop) and RestroPod

This covers your account, your billing details, your device information, your license, and, if your plan includes them, your Cloud Reporting sync data and E-Bill delivery logs. Here, RestroPod is the Data Fiduciary — the party responsible for how this data is collected, used, and protected. You are the Data Principal.

Layer 2 — Between you (the owner of the restaurant or shop) and your own customers

This covers anything you choose to store about the people who eat at your restaurant or buy from your shop — their name, phone number, loyalty points, udhaar balance, and so on. Here, you are the Data Fiduciary for your customers' data. RestroPod is only the tool you use to store it — the same way a notebook or a spreadsheet would be a tool. This data stays on your device, inside your own encrypted local database, and is not synced to us in any readable form. The only exceptions are narrow and irreversible: if you use E-Bill, we briefly pass a raw phone number or email to your chosen delivery gateway (Section 2 below) and keep only a one-way hash of it, never the original; and if you use Cloud Reporting, only aggregated totals (not individual customer records) are synced.

This distinction matters because it decides who is answerable if something goes wrong. If a diner asks what data you hold about them, that's your responsibility to answer, not RestroPod's — because we genuinely don't have access to their underlying record.

2. What This Means in Practice

For your account and device data (Layer 1):

  • We only use it for the purposes listed in the Privacy Policy — running your account, activating your license, processing payments, fraud detection, support, Cloud Reporting, and E-Bill delivery where applicable.
  • We don't use it for anything else, and we don't sell it.
  • We use a small number of outside services to help run RestroPod — Razorpay for payments, ipapi.co for rough location lookups, our email provider for account emails, and, if you enable E-Bill, whichever of MSG91, Twilio, Fast2SMS, or Gupshup you've connected. Each only receives the specific data it needs to do its job, listed in the Privacy Policy.

For your customers' data (Layer 2):

  • Individual customer records (name, phone, address, loyalty history) never leave your device unless you personally choose to back them up somewhere.
  • We cannot read, search, or hand over an individual customer's record, because we don't have it.
  • If you enable E-Bill, a customer's raw phone number or email is used only for that one message and is not kept by us — only a non-reversible hash remains, for your own audit log. The PDF receipt, which shows what is printed on the bill, is deleted soon after its 48-hour link expires.
  • If you enable Cloud Reporting, your customers' individual records never sync — only your business's own aggregated totals do. For Store POS, those totals include an udhaar summary that lists the customers who owe you, with the name and the amount each owes (see Privacy Policy, Section 2(H)).
  • If you back up your local database and restore it, that backup and its contents remain entirely under your control.
  • You are responsible for deciding why you collect this data, how long you keep it, and how you respond if a customer asks about it — the same responsibility you'd have with any other business record you keep.

3. The Recovery Phrase — A Special Case

Your local database is protected by a recovery phrase. A copy of it is stored on our servers, but in encrypted form, and only you can unlock it — using your account password.

We are not able to decrypt or view your recovery phrase ourselves. This means: even though a copy technically exists on our servers, we do not have practical access to your local data through it. It exists only so that you don't lose access to your own database if you forget your phrase.

4. If You Stop Using RestroPod

If you close your account, Layer 1 data (your account, billing, device records, Cloud Reporting history) is handled as described in the Privacy Policy's retention section.

Layer 2 data (your customers' individual records) was never on our servers, so closing your account has no effect on it — it remains on your device, under your control, exactly as it was.

5. Governing Law

This document is governed by the laws of India, in line with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Any disputes will be handled in the courts of Indore, Madhya Pradesh.

6. Contact Us

If you have any questions about this document, please contact us via our Contact Page.