Privacy Policy

1. Who we are

Servd (“Servd,” “we,” “us”) provides a restaurant operating system — QR ordering, kitchen displays, payments, and analytics. This policy explains how we handle personal data for two groups: our customers (restaurant owners and staff) and their diners (people who place orders through a Servd-powered menu).

For restaurant data, the restaurant is the data controller and Servd is a processor acting on its instructions. For account and billing data of restaurant owners, Servd is the controller.

2. What we collect

From restaurants

• Account details — name, business name, email, phone, country.
• Menu, pricing, branch, and staff configuration you enter.
• Billing identifiers and invoices (card data is held by our payment providers, not by us).
• Usage and device logs to keep the service secure and reliable.

From diners

• Order contents, table or branch, and order timestamps.
• Contact details when provided for takeaway or delivery (name, phone, address).
• Payment confirmation status — never full card numbers.

3. How we use it

We process data to:

• Operate the ordering, kitchen, payment, and analytics features you use.
• Route orders to the correct branch, station, and rider.
• Process payments and produce daily settlement reports.
• Provide support, prevent fraud, and secure the platform.
• Improve the product in aggregate. We do not sell personal data.

4. Sharing

We share data only with processors that help us run Servd — cloud hosting, payment providers, messaging (WhatsApp Business API), and analytics — each bound by contract to use it solely on our instructions. We may disclose data when required by law.

5. Payments & card data

Card payments are handled by PCI-DSS Level 1 certified providers (such as Paymob, Fawry, PayTabs, Kashier, and Stripe). Servd never stores full card numbers or CVV codes; we receive only tokenized references and the result of each transaction.

6. Data retention

We keep account and transaction records for as long as your restaurant uses Servd and for the period required by tax and accounting law afterward. Diner order data is retained per your restaurant's configuration. You can request deletion at any time, subject to legal retention duties.

7. Your rights

Depending on your jurisdiction, you may request access, correction, deletion, or export of your personal data, and object to certain processing. Diners should contact the restaurant they ordered from; we will assist that restaurant in responding.

8. Contact

Questions or requests? Email servdme@gmail.com. We aim to respond within 30 days.