Privacy Policy for Restrova Admin App

Effective Date: 02/02/2026

Introduction

Welcome to Restrova Admin App (the “App”), an administration and management application used by restaurants and authorized staff to manage menus, orders, customers, delivery operations, and business settings (collectively, the “Services”).

This Privacy Policy explains how information is collected, used, shared, and protected when you use the Restrova Admin App. In this policy, “we,” “us,” and “our” refer to the operator/publisher of the Restrova Admin App, and “you” refers to an authorized user (e.g., restaurant owner, manager, cashier, or delivery admin) using the App.

Summary: The Admin App processes business and operational data (orders, customers, menu items, staff accounts). We do not sell personal information. Access is role-based, and we use reasonable security controls to protect data.

Scope & Roles

The Restrova ecosystem may include a customer-facing ordering app and the Restrova Admin App. The Admin App is intended for business use by restaurant staff only.

• Business Data: restaurant profile, menus, pricing, taxes, operating hours, branches, promotions, and settings.
• Order & Customer Data: customer order history, delivery addresses, phone numbers, and order notes as submitted by customers in the ordering experience.
• Staff/User Data: admin user accounts, roles, permissions, and activity logs.

If your organization is subject to specific privacy laws (e.g., GDPR or local regulations), your organization may be considered the “controller” for certain customer data, and we may act as a “processor” when providing the App and hosting/processing that data on your behalf.

Information We Collect

We collect the following categories of information depending on the features enabled and how the Admin App is used:

1. Admin Account & Authentication Data — name, email, phone number, username, password (stored as a hashed/secured credential), role/permissions, and organization/restaurant association.
2. Restaurant & Business Information — restaurant name, branch details, address, location coverage areas, operating hours, menu items, item images, categories, pricing, taxes, service charges, and promotions.
3. Order, Delivery & Operations Data — incoming orders, order notes, statuses, preparation times, cancellations/refunds, delivery assignments, driver/rider status (if applicable), and fulfillment history.
4. Customer Information Visible to Admins — customer name, phone number, delivery address, and order history as provided by customers in the ordering flow. Admins can view this data to fulfill orders and handle support.
5. Payment & Settlement Data (If Enabled) — payment status, transaction references, refunds, and settlement reports. Card details are typically processed by third-party payment processors; we generally do not store full card numbers on our servers.
6. Support & Communications — messages, attachments, and metadata you provide when contacting support (e.g., issue details, screenshots, logs).
7. Device, Log & Usage Data — device model, OS version, app version, IP address, timestamps, crash reports, diagnostic data, and audit/activity logs (e.g., login time, menu edits, status updates) to maintain security and improve performance.

Information We Do Not Intentionally Collect

Unless required for an explicit feature, we do not intentionally collect:

• Personal contacts, call logs, or SMS content.
• Unrelated photos/files on your device (outside images you upload for menu or business content).
• Precise background location tracking (without clear notice and permission).

How We Use Information

We use information for the following purposes:

1. Provide and operate the Admin App (authenticate users, enable role-based access, maintain sessions).
2. Order management (view, accept, prepare, update, cancel, and fulfill orders; manage pickup/delivery flows).
3. Menu and content management (create/edit menu items, pricing, availability, and promotions).
4. Business operations (reports, analytics, settlement summaries, and operational insights).
5. Customer support (resolve issues, handle disputes, refunds, and service requests).
6. Security and fraud prevention (audit logs, abuse detection, access controls).
7. Improve performance and reliability (debugging, crash diagnostics, feature improvements).
8. Compliance (meet applicable legal, tax, accounting, and regulatory requirements).

Legal Bases (Where Applicable)

Depending on your jurisdiction, we may process information based on:

• Contract necessity (to provide the Services to the restaurant/business).
• Legitimate interests (security, fraud prevention, service improvement, business analytics).
• Consent (where required for optional features such as notifications or certain device permissions).
• Legal obligations (accounting, tax, compliance, responding to lawful requests).

Sharing of Information

We do not sell personal information. We may share information in limited circumstances:

1. Within the Restaurant/Organization — information is accessible to authorized staff based on roles and permissions (e.g., kitchen, cashier, manager).
2. Service Providers — hosting, databases, analytics, crash reporting, notification providers, and payment processors (if enabled). Providers may access information only to perform services for us under contractual obligations.
3. Payment Processing — transactions may be processed by third-party payment gateways. Their handling of payment information is governed by their own privacy and security policies.
4. Legal / Safety — to comply with law, enforce agreements, or protect rights, safety, and security of our users, customers, and the public.
5. Business Transfers — if we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

Data Retention

We retain information for as long as necessary to provide the Services, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements.

• Admin account data is retained while the account is active and as needed for security/audit purposes.
• Order and settlement records may be retained for accounting, tax, and operational continuity.
• Logs and diagnostics may be retained for security and reliability (typically for a limited period unless required for investigations/compliance).

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, such as access control, role-based permissions, and secure communications where applicable. However, no system is completely secure, and we cannot guarantee absolute security.

Admin Responsibilities

Because the Admin App can display customer data, admin users must:

• Use customer data only for order fulfillment, support, and lawful business purposes.
• Limit access to authorized staff and keep credentials confidential.
• Avoid exporting or sharing customer data unnecessarily.
• Report suspected unauthorized access or security incidents promptly.

Your Choices & Rights

Depending on your region and applicable law, you (as an admin user) may have rights to:

1. Access and update your admin profile information.
2. Request deletion/deactivation of your admin account (subject to organizational policy, legal retention, and audit requirements).
3. Object to or restrict certain processing where applicable.

Customer privacy requests (e.g., deletion of customer data) should be handled according to your organization’s policies and applicable law. If we act as a processor, we will support the controller (the restaurant/business) where required.

Permissions Required

The Admin App may request device permissions depending on enabled features:

1. Notifications (Optional): Used to alert admins about new orders, cancellations, and operational events. You can manage notification permissions in device settings.
2. Storage / Photos (Optional): Needed only if you upload images (e.g., menu item photos, banners, restaurant logo).
3. Camera (Optional): Needed only if you scan QR codes, barcodes, or capture images for menu/content directly in the App.
4. Location (Optional): Used only if a feature needs it (e.g., branch setup or delivery zone tools). The Admin App does not continuously track background location without explicit disclosure and permission.

Children’s Privacy

The Restrova Admin App is intended for business use by authorized staff and is not directed to children. We do not knowingly collect personal information from children through this Admin App.

International Data Transfers

If we or our service providers process information in countries other than your own, we take steps intended to ensure appropriate safeguards consistent with applicable laws (such as contractual protections and security measures).

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in features, operations, or legal requirements. Updates will be posted on this page, and the “Effective Date” will be revised accordingly.

Contact Us

If you have questions or requests regarding this Privacy Policy or data practices, contact us at:

Email: info@lancers.dev

App: Restrova Admin App

Address: Plot No. 70/5, Faizan Street, Range Road, Rawalpindi, Pakistan