Privacy Policy

This policy explains exactly what Parosa stores, why we store it, who can see it and how to get rid of it. No hidden clauses — if something here worries you, email support.parosa@gmail.com and ask.

1. What we collect

Three kinds of information, and nothing else:

• What you tell us. Your name, email, phone number, restaurant name, address, city, and — only if you choose to add them — your GSTIN and FSSAI numbers and documents.
• What you create in the app. Categories, dishes, prices, photos, table count, staff records (name, phone, and optionally email, date of birth and Aadhaar number), orders, bills and payment status.
• What the system records. Ordinary technical logs — when a request was made and whether it worked — which we need to keep the Service running and secure.

We do not track you across other websites, we do not run advertising pixels, and we do not buy information about you from anyone.

2. Your customers' information

When a diner orders, we store the items, table number and amount. If they give a phone number or name for the bill, that is stored too, against your restaurant only.

You are the one who decides how that is used. Use it to send the bill or to recognise a regular — not to send marketing they did not ask for. Under Indian data-protection law you are the data fiduciary for your customers; Parosa only processes it on your instructions.

3. Why we hold it

• To run your workspace: show the menu, take orders, print bills, draw your analytics.
• To keep your account secure and keep every restaurant's records separate.
• To answer you when you write to support.
• To fix bugs and decide what to build next, using totals rather than individual records wherever we can.

4. What we will never do

• We will never sell your data or your customers' data.
• We will never show your orders, revenue or customer list to another restaurant.
• We will never email your customers on our own behalf.

Your menu is deliberately public — anyone with your QR code or link can read it. Everything behind your login is private.

5. Where it is stored, and who can reach it

Your data lives in a PostgreSQL database run by Supabase, our infrastructure provider, and photos sit in their secured storage. Every table has row-level security switched on, which means the database itself refuses to return a row that does not belong to the account asking for it. It is not a filter in our code that could be forgotten — it is a rule in the database.

On our side, access is limited to the few people who need it to run the Service, and only for support or debugging.

6. Who else sees it

We share data only with companies that help us run Parosa, and only as much as they need:

• Supabase — database, authentication and file storage.
• Vercel — hosting the website itself.
• A payment processor (such as Razorpay) if and when online subscription billing is switched on.

We will also hand over information if a valid legal order requires it. If that ever happens and we are permitted to tell you, we will.

UPI scan-to-pay is a direct transfer from your customer's app to your UPI ID. No card number, UPI PIN or bank detail ever reaches Parosa.

7. How long we keep it

• While your account is open, we keep your data so the app works and your history stays intact.
• Delete your restaurant in Settings and its menu, photos, tables, QR codes, staff and orders are removed permanently, normally within 30 days including backups.
• We may keep a minimal billing record where tax law requires it.

8. Your rights

You can ask us at any time to:

• show you a copy of everything we hold about you;
• correct anything that is wrong;
• delete your account and its data;
• export your menu and orders so you can take them elsewhere.

Email support.parosa@gmail.com from the address on your account and we will action it within 30 days, free of charge.

9. Security

Connections are encrypted (HTTPS). Passwords are hashed, never stored as text, and no one at Parosa can read yours. Access to your records is enforced by the database, per owner. Staff codes expire the same day they are made.

No system is perfect. If a breach ever affects your data, we will tell you what happened, what it affected and what we did about it — promptly, not quietly.

10. Children

Parosa is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

11. Changes

If we update this policy we will change the date at the top and, for anything significant, tell you in the app or by email.

12. Contact us

Any question or request about your data goes to support.parosa@gmail.com. A real person reads it, and we aim to reply within two working days.