Privacy Policy

Last updated: 17 August 2026

On this page Who we are What we collect How we use it Payments AI processing Cookies Sharing Retention Security Your rights Contact

1. Who we are

Dinetous ("Dinetous", "we", "us") operates the Dinetous restaurant platform at https://dinetous.com. This policy explains how we handle personal information for two groups of people: restaurant customers who subscribe to the platform, and diners who use a Dinetous QR menu or browse our public directory.

For information a restaurant collects about its own guests, the restaurant is the controller of that data and Dinetous processes it on their behalf.

2. Information we collect

From restaurant customers

Account details — restaurant name, owner name, email address, phone number, city, cuisine and password (stored in the account record).
Business content — your menu, categories, dish descriptions, prices, photos, 3D models, tables, opening hours and staff accounts.
Billing details — plan, billing cycle, payment status and the payment reference returned by our payment gateway. We do not receive or store your card number.
Operational data — orders placed at your restaurant, table requests, and the analytics derived from them.

From diners

Order information — the table you scanned, the items you ordered, any notes you added and the order total.
Contact details only where you provide them, for example a name or phone number attached to an order or a table request.
Nothing more. Browsing a public restaurant profile or the directory does not require an account.

Automatically

Technical data your browser sends — IP address, device and browser type, referring page and the pages you view.
Session cookies that keep you signed in, and a session identifier that links a diner's device to their open order at a table.

3. How we use information

To run the service — showing menus, routing orders to the kitchen, generating QR codes, rendering AR previews and producing analytics.
To bill subscriptions and issue receipts and invoices.
To generate the AI recommendations a restaurant sees in its dashboard, based on that restaurant's own sales data.
To provide support and respond to what you write to us.
To keep the platform secure — detecting abuse, fraud and failed or duplicated payments.
To publish a restaurant's public profile in our directory, where the restaurant has chosen to be listed.
To send service messages about your account. Marketing email is only sent where you have opted in, and every such message carries an unsubscribe link.

4. Payments

Subscription payments are processed by Razorpay. Card numbers, CVVs, UPI PINs and net-banking credentials are entered on Razorpay's own secure window and are never sent to, seen by or stored on Dinetous servers. We keep only the order and payment identifiers, the amount, the status and the timestamp, which is what lets us match a payment to your account and support a refund.

Razorpay processes that information as an independent controller under its own privacy policy.

5. AI processing

Parts of the platform use AI models to generate 3D dish models, menu copy and growth recommendations. Where a request is sent to a third-party model provider, we send the minimum needed — for example a dish name and description, or aggregated sales figures. We do not send diner contact details to model providers, and restaurant data is not used to train third-party models on our instruction.

6. Cookies

We use a small number of cookies and similar storage:

Essential — the PHP session cookie that keeps a restaurant owner, staff member or admin signed in, and the identifier that links a diner's device to their current table and order. The platform does not work without these.
Preference — remembering small choices such as a selected billing cycle.

You can block or delete cookies in your browser, but essential cookies must be allowed for signing in and ordering to work.

We do not sell personal information. We share it only in these cases:

With the restaurant you ordered from — an order and any details attached to it are visible to that restaurant's staff. That is the point of placing it.
With service providers who run parts of the platform on our behalf: our hosting and database provider, our payment gateway (Razorpay), our email delivery provider and our AI model providers. They may only use the data to perform that service.
Where the law requires it — a valid legal request, court order, or to establish or defend a legal claim.
On a business transfer — if Dinetous is acquired or merged, account data may transfer to the acquirer under this same policy.

8. How long we keep it

Account and menu data — for as long as the account is active, and up to 90 days after closure so it can be restored if you come back.
Orders and transaction records — retained for as long as required by Indian tax and accounting law, currently up to eight financial years.
Support correspondence — up to 24 months.
Server logs — up to 12 months.

9. Security

Access to production data is limited to the people who need it. Payments are handled entirely by our gateway, database queries are parameterised against injection, secrets are held outside the web root, and directory listing is disabled on the server. No system is perfectly secure, but if a breach affects your personal data we will notify affected accounts and the relevant authority without undue delay.

10. Your rights

Subject to applicable law, you may ask us to:

tell you what personal data we hold about you and give you a copy;
correct anything that is wrong or out of date;
delete your data, where we are not required to keep it;
stop sending you marketing messages;
restrict or object to a particular use.

Email support@dinetous.com and we will respond within 30 days. If you are a diner asking about an order, please contact the restaurant first — they control that record and can act faster.

11. Children

Dinetous is a business tool and is not directed at children under 13. We do not knowingly collect their personal information; if we learn we have, we delete it.

12. Changes to this policy

We may update this policy as the product changes. The "last updated" date at the top always reflects the current version, and material changes are announced by email or in your dashboard before they take effect.

13. Contact us

Dinetous
Dinetous, Bikaner, Rajasthan 334001, India
Email: support@dinetous.com
Phone: +91 90000 00000 (Monday – Saturday, 10:00 – 19:00 IST)