Privacy Policy

Last updated: September 9, 2026

1. Introduction

QRslice ("we," "us," or "our") operates the QRslice platform, including our website, mobile application, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, and password when you create an account.
  • Business Information: Restaurant/cafe name, address, GST number, and menu details during onboarding.
  • Payment Information: Billing details processed through Razorpay. We do not store credit/debit card numbers on our servers.
  • Staff Information: Names, roles, and contact details for staff management features.
  • Customer Orders: Customer names, phone numbers, and order details placed through QR menus.
  • Communications: Any messages you send to us through the Service or support channels.

2.2 Information Collected Automatically

  • Device Information: Browser type, operating system, device type, and screen resolution.
  • Usage Data: Pages visited, features used, time spent, and interaction patterns.
  • Log Data: IP address, access times, and error logs.
  • Cookies and Similar Technologies: See our Cookie Policy for details.

3. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To process transactions and send related information (receipts, order confirmations).
  • To send administrative notifications (service updates, security alerts).
  • To provide customer support and respond to your requests.
  • To generate analytics and insights about cafe performance and menu optimization.
  • To detect, prevent, and address technical issues and fraud.
  • To comply with legal obligations under Indian law.

4. How We Share Your Information

We do not sell your personal information. We may share your data only in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics).
  • Legal Requirements: When required by law, court order, or governmental regulation under Indian law.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (we will notify you before your data becomes subject to a different privacy policy).
  • With Your Consent: When you explicitly authorize sharing.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We will also retain your data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will remove your personal data within 30 days, except where we are required to retain certain records for legal or compliance purposes.

6. Data Security

We implement industry-standard security measures including SSL/TLS encryption, Supabase Row Level Security (RLS), and access controls. However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

7. Your Rights

Under Indian data protection laws, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your personal data.
  • Object to processing of your personal data.
  • Withdraw consent at any time.

To exercise these rights, contact us at privacy@qrslice.app.

8. Third-Party Services

Our Service integrates with the following third-party services:

  • Supabase: Database, authentication, and real-time data sync.
  • Razorpay: Payment processing.
  • Vercel: Application hosting and deployment.
  • WhatsApp (via Baileys): Order notifications and customer communication.

Each third-party service has its own privacy policy. We encourage you to review their policies.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us: