Data Retention Policy

Effective 13 August 2026

Active restaurant configuration and staff access remain while the account is active. Disabled staff lose application access, while attributable audit records may remain.

Financial records

Orders, bills, settlements, refunds, cash closings and tax records follow the restaurant's configured retention and applicable legal requirements. Personal fields may be anonymized while the transaction is preserved.

Customer information

Optional contact, address and note data should be kept only for fulfilment, support, fraud prevention or a documented legal obligation.

Diagnostics

Sanitized client errors and support diagnostics should normally be deleted within 90 days unless required for an active investigation. Credentials and payment secrets must never be included.

Backups

Backups use rolling retention and are deleted independently from live records. Account closure does not immediately remove copies still within a documented recovery or legal-hold period.

Closure and deletion

After identity and ownership verification, eligible live data is deleted or anonymized following a recovery period. Legally required financial, security and dispute records are restricted and retained only for their required purpose.

Requests

Contact [email protected]. Restaurant customers should identify the restaurant responsible for their order.