Privacy Policy

Last updated: April 6, 2026

1. Who we are

RasoiOS provides cloud-based software for restaurants, including the RasoiOS POS mobile application and related web services.

In this Privacy Policy, “RasoiOS”, “we”, “us”, or “our” refers to the operator described in Section 12 (Business information).

This Privacy Policy describes how we collect, use, and protect information when you use our services. It applies to business users (such as restaurant owners and staff) who use RasoiOS.

In some cases, RasoiOS processes data on behalf of businesses (for example, customer orders). In such cases, the business using RasoiOS is responsible for the data they collect and manage, subject to applicable law and their own relationship with their customers.

2. What we collect

  • Account and authentication data: name, email address, or phone number if you provide them; business identifier where applicable; credentials you use to sign in; profile and role information associated with your account.
  • Operational and transaction data: orders, cart and billing actions, menu interactions, payment status indicators relevant to operations, and timestamps needed to run the POS and reconcile activity.
  • Local device storage (offline use): when you use features that work without a network connection, certain data (such as queued orders) may be stored on your device until it syncs with our servers.
  • Device and technical data: app version, browser or WebView environment, connectivity state, and identifiers needed for features such as printing, notifications, or session continuity.
  • Diagnostics (where enabled): error and performance data may be processed through our monitoring tools to fix crashes and improve stability. Where session replay or similar features are used, they are configured to reduce sensitive content exposure (e.g. masking).

3. How we use data

We use the information above to:

  • Provide app functionality and secure access to RasoiOS services;
  • Authenticate users and enforce access controls;
  • Process orders, billing, and business operations you initiate;
  • Enable offline workflows and sync data when connectivity is available;
  • Improve performance and reliability, detect abuse, and troubleshoot issues;
  • Comply with law and respond to lawful requests.

4. Payments and financial data

RasoiOS does not store full card numbers, CVV, or other sensitive payment card credentials. Where payments are collected or processed, they are handled by third-party payment providers or your chosen payment integrations. Those providers are subject to their own terms and privacy policies.

5. Legal bases (where applicable)

Where the GDPR applies, we rely on contract (providing the service), legitimate interests (security and improvement), and, where required, consent for specific optional processing.

6. Sharing and subprocessors

We do not sell your personal information. We may share data with trusted service providers (subprocessors) strictly as needed to operate the app—such as cloud hosting, databases, error monitoring, and payment partners when those features are used. They process data on our instructions and under appropriate agreements, not for their own marketing.

Depending on how your deployment is configured, subprocessors may include categories such as: cloud hosting / database providers (e.g. infrastructure on AWS, GCP, Railway, or similar), error and performance monitoring (e.g. Sentry), and email or notification delivery services. Payment processing is handled by payment partners when you use those features. We will update this page as our stack evolves; for a current list or Data Processing Agreement (DPA) requests, contact us at support@rasoios.com.

7. Data storage and transfers

Data is stored on secure servers operated by us or our hosting providers. Processing may occur in India and/or in other regions where our infrastructure providers operate, depending on configuration. Where data is transferred across borders, we use appropriate safeguards as required by applicable law.

8. Cookies and similar technologies (web)

Our websites may use cookies, local storage, or similar technologies that are necessary for security, session management, and basic functionality. We may also use limited analytics or preference storage where applicable. You can control cookies through your browser settings; disabling certain cookies may affect features.

9. Retention

We retain data as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods may depend on your subscription and business configuration.

10. Security

We use industry-standard safeguards including encryption in transit (HTTPS/TLS) for communication between the app and our services. No method of transmission or storage is 100% secure; we work to reduce risk continually.

11. Your rights

Depending on your region, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. To exercise rights, email support@rasoios.com or use the contact options on our website.

Businesses and end users: If you are an end customer of a restaurant or business using RasoiOS, that business may be responsible for certain customer-facing data (e.g. orders placed with them). Please contact the business first for requests related to your order information; we assist our business customers as required by law and contract.

12. Business information (operator)

RasoiOS products and services are operated from India. The legal name of the operating entity, registration or GST details (where applicable), and registered business address are available on request for customers, partners, and regulators—email support@rasoios.com.

13. Compliance (India)

We aim to comply with applicable Indian laws relating to data protection and electronic records, including the Information Technology Act, 2000 (and rules thereunder as applicable) and the Digital Personal Data Protection Act, 2023, where they apply to our processing activities.

14. Children

RasoiOS is not directed at children under 13, and we do not knowingly collect their personal data.

15. Changes

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date.

16. Contact

For privacy questions or requests: support@rasoios.com

You may also reach us via our contact page.