Privacy Policy.

This Privacy Policy explains how Logicues ("we", "us", "our") collects, uses, shares, and protects information when you use our QR menu and in-store ordering platform (the "Service"). It applies to restaurant owners and staff ("Merchants") who run a storefront with us, and to diners who place orders through a Merchant's storefront.

Who operates the Service: Logicues is a sole proprietorship of Smruti Ratan Alone (trading as "Logicues"), at Saichatra, Lahanuji Maharaj Marg, Tapadia Nagar, Akola, Maharashtra, India. Contact: [email protected].

1.Information we collect

From Merchants

• Account details: business name, chosen subdomain, owner email and phone, and a securely hashed admin password.
• Storefront content: menus, item descriptions, photos, prices, themes, and settings you upload.
• Billing details: subscription plan, add-on purchases, and payment status. Card and bank details are handled by our payment processor (Razorpay) — we do not store full card numbers.

From diners

• Identity & contact: your name and the phone number used for WhatsApp one-time-password (OTP) login — to verify you and to send order updates.
• Order details: items ordered, table or order reference, order value, any kitchen notes you add, and timestamps — to process and fulfil your order.
• Precise location (GPS) — only if the Merchant uses the optional Geofence feature: when a Merchant enables on-premise ordering, the storefront asks your browser for your GPS location at the moment you place an order or call a waiter, solely to confirm you are physically at the venue. It is used for that one check and is not kept as a location history. You can decline the browser location prompt (the Merchant may then be unable to accept off-premise orders).

Automatically

• Technical & usage data: device and browser type, IP address, pages viewed, and basic analytics. We use strictly necessary cookies and session tokens to keep you signed in and to operate the Service. We do not place non-essential tracking cookies without choice.

2.How we use information

• To create and operate Merchant storefronts and process orders placed through them.
• To send order notifications and updates, including via WhatsApp, to the relevant Merchant and diner.
• To verify identity through WhatsApp OTP and to keep accounts secure.
• To take subscription payments, generate invoices, and provide support.
• To maintain, secure, debug, and improve the Service, and to detect and prevent fraud or abuse.
• To comply with legal obligations, including tax and record-keeping requirements.

3.Our role under the DPDP Act

Under India's Digital Personal Data Protection Act, 2023, Logicues is a Data Fiduciary for the personal data whose purposes and means we determine — Merchant account/billing data, and the platform-level handling of diner data (how it is stored, secured, messaged, and which infrastructure is used). For a Merchant's own customer-relationship purposes, Logicues also acts as a Data Processor handling diner data on that Merchant's instructions; the Merchant is itself a Data Fiduciary for those purposes and is responsible for lawful handling of, and its own notices to, its diners. You — the individual whose data is processed — are the Data Principal.

4.How we share information

We do not sell your personal data. We share information only as needed to run the Service:

• With service providers (sub-processors) that host and power the platform, under confidentiality and data-protection terms: Cloudflare (hosting, edge network and the database), Oracle Cloud (the server that runs WhatsApp notifications), Meta / WhatsApp (OTP and order messaging), Razorpay (subscription payments — we never store full card/bank details), and our email-delivery provider.
• Between a Merchant and its diners as required to fulfil an order (for example, an order alert showing the items and table).
• For legal reasons — to comply with the law, enforce our terms, or protect the rights and safety of our users and the public.
• In a business transfer — if Logicues is involved in a merger, acquisition, or sale of assets, subject to this Policy.

5.Data retention

We keep personal data for as long as your account is active or as needed to provide the Service, and thereafter only as required to meet legal, tax, accounting, or dispute-resolution obligations. Order and invoice records may be retained for the period required under applicable tax law. When data is no longer needed, we delete or anonymise it.

6.Security

We use reasonable technical and organisational measures to protect data, including encryption in transit, hashed passwords (PBKDF2), tenant isolation so one Merchant cannot access another's data, scoped access controls, and session expiry. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please use a strong, unique admin password and keep it confidential.

7.Your rights as a Data Principal

Under the DPDP Act you have the right to: (a) access a summary of the personal data we process about you and how; (b) correct, complete, update or erase it; (c) withdraw consent at any time — as easily as you gave it; (d) nominate another person to exercise your rights in the event of death or incapacity; and (e) grievance redressal. Merchants can edit most account and storefront data directly in the dashboard. To exercise any right or withdraw consent, email [email protected] stating your request and the phone number or account it relates to; we will respond within applicable timelines. Diners may also ask the Merchant they ordered from. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

8.Children

The Service is intended for businesses and adult users. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can remove it.

9.International transfers

Our providers may process data on servers located outside India. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this Policy and applicable law.

10.Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by reasonable means (such as email or an in-dashboard notice), and the "Last updated" date above will change. Continued use of the Service after an update means you accept the revised Policy.

11.Grievance Officer & contact

For any privacy request, consent withdrawal, or grievance under the DPDP Act, contact our Grievance Officer:

• Grievance Officer: Smruti Ratan Alone (Proprietor, Logicues)
• Email: [email protected]
• Address: Saichatra, Lahanuji Maharaj Marg, Tapadia Nagar, Akola, Maharashtra, India

We acknowledge grievances promptly and work to resolve them within the timelines required under applicable law; if you remain dissatisfied you may escalate to the Data Protection Board of India. See also our Terms of Service and Refund & Cancellation Policy.