Privacy Policy

This Privacy Policy explains how ScanToDine (“ScanToDine”, “we”, “us”), a business based in Gujarat, India, collects, uses, and protects information when you use our website and services at scantodine.com. We follow the Information Technology Act, 2000 and its rules, and apply widely recognised data-protection standards for our global customers.

Who this applies to

We serve two groups: restaurant owners who create an account, and diners who open a restaurant's menu by scanning a QR code. Diners do not create accounts and are not asked for personal details to view a menu.

Information we collect

From restaurant owners

• Account details: your email address and a securely hashed password.
• Restaurant content you add: name, location, hours, menu items, photos, staff names, and settings.
• Billing information: handled by our payment provider, Paddle. We receive your plan, billing status, and invoices, but we do not store your full card number.
• Security and audit data: IP address, browser type, and timestamps of key actions, kept to protect your account and meet our legal obligations.

From diners

• No account or login is required to view a menu.
• Aggregate, non-identifying usage data (for example, that a menu was opened) may be recorded to give owners basic activity counts.

From website visitors

• We use Google Analytics to understand, in aggregate, how our marketing website is used. This may set cookies and collect device and usage information. Where required by law (for example in the EU, UK, and other applicable regions) we ask for your consent before non-essential analytics cookies are set, through our cookie banner.

How we use information

• To provide the service: host menus, run the counter and floor systems, and process logins.
• To send essential emails: verification codes, password resets, billing notices, and support replies.
• To keep accounts secure: two-factor codes, trusted-device checks, rate limiting, and audit logs.
• To improve the product using aggregate, non-identifying analytics.

We do not sell your personal information, and we do not show third-party advertising in the product.

Cookies and similar technologies

We use a small number of cookies that are strictly necessary for signing in and keeping your session secure. Non-essential analytics cookies (Google Analytics) are only used where permitted, and where law requires, only after you consent through our cookie banner. You can change your choice at any time, and you can also control cookies in your browser settings.

Service providers we share data with

To keep ScanToDine running, we rely on a small number of trusted third-party services for things like hosting, payment processing, email delivery, and security. We share only the limited information each one needs to perform its function, and every provider processes that data solely on our instructions and under appropriate confidentiality and data-protection obligations. If you would like more detail about the categories of providers we use, you can contact us at the address below.

International transfers

Because our providers operate globally, your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for these transfers.

How long we keep data

We keep account and restaurant data for as long as your account is active. If an account is closed it enters a 30-day recovery window before deletion. Audit and billing records may be kept longer where the law requires.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent for analytics. To make a request, email us at hello@scantodine.com. Owners can also edit or delete most content directly in the dashboard.

Children

Our service is for businesses and is not directed at children. We do not knowingly collect personal information from children.

Security

We protect data with encryption in transit, hashed passwords, two-factor login, strict per-restaurant data isolation, and access controls. No system is perfectly secure, but we work hard to keep your data safe.

Changes

We may update this policy from time to time. We will post the new version here and update the date above.

Contact

Questions about privacy? Email hello@scantodine.com, or write to us at Gujarat, India.