Privacy policy
How Dishventory handles your information, your restaurant's data and your customers' details.
Dishventory ("we", "us") provides restaurant management software at dishventory.com. This policy explains what we collect, why, who we share it with and what you can ask us to do. It covers our website and the Dishventory application.
1. Two different roles
It matters which kind of data we are talking about, because our responsibilities differ:
- Data we are responsible for. Information about website visitors, about the person who opens a Dishventory account, and about billing for that account.
- Data we handle for a restaurant. Everything a restaurant puts into Dishventory - its menu, recipes, stock, staff records, orders and its own customers' details. The restaurant decides what to collect and why; we hold and process it on their instructions. If you ordered food from a restaurant that uses Dishventory, please contact that restaurant about your information.
2. What we collect
When you open an account
- Your name, business name, email address and phone number.
- A password, which is stored only as a cryptographic hash. We never see it.
- Your plan, subscription dates and payments we have recorded for you.
When you use the application
- The business content you enter: branches, products, recipes, inventory, orders, staff, expenses and reports.
- An activity log of significant changes made in your account, including who made them and when. This is a security and accountability feature for you as the account owner.
- Technical records needed to run and secure the service, such as sign-in tokens, and error and access logs.
If you enable the online ordering page
- Your customers' names, phone numbers and delivery addresses, and the contents of their orders. This is the restaurant's data, held on the restaurant's behalf.
When you contact us or visit the website
- The details you put in our contact form or send us by email or WhatsApp.
- Analytics about your visit, as described in section 4.
- If you arrive from a link with campaign tags (for example from an advertisement), we keep those tags for your visit so we know which channel brought you, and we store them with a sign-up if you create an account.
Payments
We take payment by bank transfer, JazzCash or Easypaisa, recorded by hand by our team. There is no card payment on this website, so we do not hold card numbers. We keep the reference and amount of payments made to us.
3. Why we use it
- To provide the service, keep your account working and support you.
- To bill you, and to apply the limits and dates of your plan.
- To keep accounts secure, investigate abuse and prevent fraud.
- To understand how our website is used and improve it.
- To reply to your enquiries and, where you have asked us to, tell you about the product.
We do not sell your data, and we do not use your restaurant's business data to advertise to anyone.
4. Cookies and analytics
The application itself uses browser storage that it cannot work without:
| Purpose | What it holds |
|---|---|
| Signing in | Your session token and cached profile, so you stay signed in. |
| Preferences | Your language, page sizes and sidebar state. |
| Your cookie choice | Whether you accepted or opted out of analytics. |
On our public website we also use:
- Google Analytics 4 - how many people visit, which pages they read and which campaign brought them. Configured not to collect your full IP address.
- Meta pixel - so we can measure our Facebook and Instagram advertising and show ads to people who visited our website.
Analytics is not used inside the application. We do not track what restaurants and their staff do in the POS, the panels or the kitchen display.
Visitors in Europe and the UK are asked to accept analytics before it loads. Everywhere else it loads by default and the notice on the website lets you opt out at any time; opting out stops further collection in that browser. You can also use your browser's own cookie controls, or Google's opt-out add-on.
5. Who else receives data
- Our hosting provider, which stores the application and its database.
- Google - Analytics, reCAPTCHA (which protects our sign-in and forms from abuse) and the web fonts our pages load.
- Meta - the advertising pixel on our public website.
- Email delivery, for account emails such as password resets.
- SMS and WhatsApp providers, only if a restaurant switches on customer messaging in its own account. Those messages, and the phone numbers they go to, are then passed to the provider the restaurant has configured.
- Tax authorities (FBR / PRA), only if a restaurant enables fiscal invoicing. Invoice data is then reported to the authority it registered with, as the law requires.
- Authorities, where we are legally obliged to disclose something.
6. Support access to your account
Our platform administrators can sign in to a restaurant's account to investigate a problem or help with setup. Every such sign-in is time-limited and recorded in the audit log. We do this to support you, not to browse your data.
7. How long we keep it
- Account and business data: while your account exists. If a subscription ends, we keep your data rather than deleting it, so nothing is lost if you come back or renew.
- Billing records: as long as we need them for tax and accounting purposes.
- Logs and the activity trail: for a limited period, for security and troubleshooting.
- Analytics: as retained by Google under our property's settings.
Ask us to delete your account and we will remove your data, except anything we must keep by law.
8. Security
Passwords are hashed, access to the API requires a token, and what each user can see is limited by their role and the permissions their owner gives them. Accounts are separated so one restaurant cannot see another's data. No system is perfect: if a breach ever affects your data, we will tell you.
9. Your choices
- See and correct your details from the Profile and Settings pages in the application.
- Export your data - reports and lists can be exported to CSV and PDF from within Dishventory.
- Ask for a copy, a correction or deletion by emailing us.
- Opt out of analytics from the notice on our website.
- Unsubscribe from product emails at any time; we will still send messages your account needs, such as billing and password resets.
10. Children
Dishventory is a business tool and is not intended for anyone under 18.
11. Changes
If we change this policy we will update the date at the top, and tell account holders about anything significant.
12. Contact us
Email dishventory@gmail.com or message us on WhatsApp 0304-8588555. See also our terms of service.