Privacy Policy
1. Who We Are
This Privacy Policy explains how RestroPod collects, uses, and protects your information.
RestroPod is billing (POS) software for restaurants and shops, in two versions: Restaurant POS and Store POS. It is made up of a Windows application and an online service that supports them. It is built and operated by:
Aditya Joshi, an individual based in Indore, Madhya Pradesh, India. RestroPod is not currently a registered company — Aditya operates it independently.
If you run a restaurant or a shop and use RestroPod to bill your customers, this policy applies to you. If you are a customer of a restaurant that uses RestroPod, Section 2(G) below explains what happens to your data too.
Any question about this policy, or about your data, can be sent to: info@digiindian.com
2. Data We Collect
We collect different information depending on how you use RestroPod. Here's exactly what, and why.
A. When you sign up for RestroPod (SaaS account)
- Your name, restaurant or shop name, email, phone number
- Password (stored securely, never in plain readable form)
- If you add billing details: GSTIN, billing address, state
We need this to create your account, contact you, and generate valid invoices.
B. When you activate the POS on a device (Windows or Android)
- A unique ID generated from your device's hardware (on Windows: your processor and motherboard serial numbers, turned into a code; on Android: a code your phone's operating system already generates)
- Your device's IP address
- Rough location (city/region/country) worked out from that IP address, using a third-party service called ipapi.co
- The app version you're running
- Your device's clock time (used only to detect tampering, e.g. someone turning their clock back to bypass an expiry)
We need this to activate your license, stop the same license being used on unlimited devices, and detect fraud (like one device pretending to be another restaurant).
C. A recovery phrase for your local database
When you activate your POS, it generates a secret recovery phrase that protects your restaurant's local data on your device. A copy of this phrase is sent to us once, and we store it in encrypted form. You can view it in plain text yourself from your dashboard, using your password. We do not have a way to view it — only you can decrypt it.
D. Payment information
When you pay for a subscription, payment is handled entirely by Razorpay, a licensed Indian payment gateway. We never see or store your card, UPI, or bank details. We only receive confirmation that a payment succeeded or failed, and a transaction reference number.
E. Your restaurant's menu, if you use the QR menu feature
If you turn on the QR code menu feature, your menu (items, categories, prices) is uploaded to our servers so it can be shown on a public web page for your customers to scan and view. This stays on our servers even if you later turn the feature off, unless you ask us to delete it.
F. If you contact us
If you fill out a contact form, ask for support, or email us, we keep your name, contact details, and message, so we can reply and keep a record of the conversation.
G. Your customers' data (people who eat at your restaurant)
If you store your customers' details in RestroPod (name, phone, address, loyalty points, udhaar balance and bill history), that core CRM data is saved only on your own device, inside your encrypted local database. We do not sync your customer database to the cloud.
E-Bill Transient Processing: If you use the E-Bill feature to send receipts by SMS, WhatsApp or Email, your customer's contact details are used only to send that message, through the gateway you connected. We do not keep your customers' raw phone numbers or email addresses in our account database. We keep only a one-way cryptographic hash (SHA-256) of the contact, so you have an audit log of sent messages. The contact details may be held briefly while the message is being sent.
Auto-Destruction of Receipts: The PDF receipt we create for your customer's link shows what is printed on the bill. That can include the customer's name and phone number if you added them to the bill. The link works for 48 hours. The PDF is deleted from our servers soon after the link expires (the clean-up runs every hour). Receipt pages are kept out of search engines.
H. If your plan includes Cloud Reporting
Cloud Reporting is an optional module. If your plan does not include it, none of your business data is sent to our servers — your POS remains fully offline for daily operations. If your plan does include it, we receive a summary for each business day, updated through the day, containing:
- Aggregated sales totals, tax breakdowns, and payment method splits
- Top-selling items and category-wise sales
- Hourly sales patterns
- Current stock levels for your inventory items
- Staff names alongside their order count and sales generated (only if your plan includes Advanced Reports)
- Voided items and manager discounts, with the staff member and the reason (only if your plan includes Advanced Reports)
- Cost of goods, expenses and profit totals (only if your plan includes Advanced Reports)
- Tips by staff member (only if your plan includes Tips)
- Shift and cash-handling logs, including the staff member who opened/closed each shift
For Restaurant POS, this summary never includes individual customer bills, customer names, or customer contact details. For Store POS, the summary also covers returns, discounts, tax, expenses and udhaar given and received, as totals and by age. It never includes customer names, phone numbers or individual bills. Each time Cloud Reporting is switched on (when you first buy it, or when it comes back after it lapsed), the POS also sends your earlier days once, going back as far as we keep reports. If you cancel or downgrade out of Cloud Reporting, syncing stops immediately and nothing further is sent.
2A. Organizations and Franchises
If your business has several outlets, you can group them under one Organization account. This is what that means for your data.
- Your own outlets. The organization owner can switch between the outlets the organization owns, and see their Cloud Reporting summaries together (as described in Section 2(H)). Each outlet keeps its own plan, license and devices, and its data stays on its own computer.
- Franchise outlets. A franchisee's outlet joins an organization only when the franchisee accepts an invitation and agrees. The organization can then see that outlet's Cloud Reporting summary, read only. It cannot sign in to the franchisee's account, and cannot see its invoices, devices, keys or customer data. The franchisee can leave the network at any time from their Profile page, and the organization's access stops at once.
- Report viewers. The owner can create sign-ins for other people, such as an area manager, who can see the reports of the outlets the owner gives them. The owner is responsible for who they give access to.
- What we keep. The organization's name, legal name, GSTIN, address and billing email; the names and emails of the people the owner adds; who joined or left a network, and when; and a record of when franchise reports were viewed.
3. How We Use Your Data
We use the information above only for these reasons:
- To run your account and let you log in
- To activate and validate your POS license
- To process your subscription payments and generate invoices
- To detect fraud — like someone copying a license onto extra devices
- To send you emails about your account: OTPs, device activity, payment receipts, license status, security alerts
- To respond when you contact us for support
- To show your restaurant's QR menu publicly, if you've turned that feature on
- To generate your Cloud Reporting dashboard, if your plan includes it
- To fix bugs and improve RestroPod
We do not sell your data. We do not use it for advertising.
4. Who We Share Data With
We only share data with the services that help RestroPod actually work. Each one only gets the specific data it needs to do its job:
- Razorpay — to process your payments. They receive your payment details directly; we never do.
- ipapi.co — to work out the rough location (city/country) of a device from its IP address, for fraud detection.
- Google Analytics — on our website only, to count visits and see which pages are useful. It uses cookies, and only if you press Accept on the cookie notice (see the paragraph on cookies below).
- Our email provider — to send you account emails (OTPs, receipts, alerts).
- MSG91, Twilio, Fast2SMS, Gupshup — if you enable E-Bill via SMS or WhatsApp, we pass your customer's phone number to whichever of these gateways you've connected, only at the moment of sending, so they can deliver the message. We do not store this number ourselves — we keep only a one-way hash of it (Section 2.G).
We do not share your data with advertisers or data brokers. We may share information if required by Indian law — for example, a valid court order or a request from a government authority.
5. Security
We take reasonable steps to protect your data:
- Your account password is stored in a form that can't be reversed, even by us
- Your local POS database is encrypted on your device
- Your recovery phrase is encrypted on our server, and only you can unlock it — using your account password
- Your notification gateway credentials (SMS/WhatsApp/Email API keys you provide) are stored encrypted on our servers
- We monitor for suspicious activity, like a device pretending to belong to a different restaurant, or requests trying to tamper with license data
No system is 100% secure, and we can't guarantee absolute security. But we actively watch for and respond to threats.
6. Your Customers' Data — Your Responsibility
If you use RestroPod to store your own customers' details (name, phone, loyalty points, etc.), that data lives only on your device — we never receive it or see it, except for the items described in Section 2(G) above.
This means you are responsible for that data, the same way you would be if you kept it in a notebook or spreadsheet. If one of your customers asks you what data you hold on them, or asks you to delete it, that request is yours to handle — RestroPod gives you the tool to store and manage it, but the legal responsibility for how you collect and use it is yours, not ours.
7. How Long We Keep Your Data
We keep your account and billing data for as long as your account stays active with us.
Your account and billing data stay until you ask us to remove them. Three things are deleted automatically: a customer's e-bill PDF is deleted soon after its 48-hour link expires, e-bill log lines (which hold only a one-way hash, not the contact) are deleted after 90 days, and Cloud Reporting summaries are deleted after 395 days, or 7 days after your plan ends, whichever comes first. If you want your account and data permanently deleted, email us at info@digiindian.com. Once deletion is done, it cannot be undone.
8. Your Rights
You can:
- Ask us what data we hold about you
- Ask us to correct wrong information (most of this you can already edit yourself from your dashboard)
- Ask us to delete your account and data permanently (see Section 7)
- Withdraw from marketing emails at any time using the unsubscribe link in those emails
To use any of these rights, contact us at info@digiindian.com.
9. If There's Ever a Data Breach
If we discover a breach affecting your account or billing data, we will notify you without undue delay, by email, once we have enough information to do so responsibly. We will tell you what happened, what data was involved, and what steps we're taking.
This does not apply to your customers' data stored locally on your device (Layer 2, Section 6) — since we never hold that data, we cannot detect or report a breach of it. That responsibility remains yours.
10. Grievance Officer
If you have a complaint about how your data is handled, you can reach our Grievance Officer:
- Name: Aditya Joshi
- Email: info@digiindian.com
- Response time: We aim to acknowledge complaints within [X] days.
Full contact and process details are available on our Grievance Officer page.
11. Changes to This Policy
We may update this policy from time to time — for example, if we add a new feature that changes what data we collect. If we make a significant change, we'll let you know by email or by showing a notice in your dashboard.
12. Governing Law
This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Any disputes will be handled in the courts of Indore, Madhya Pradesh.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us via our Contact Page or at info@digiindian.com.