Privacy Policy

1. Information We Collect

• Restaurant Owners: Name, email address, hashed password, restaurant profile details, menu content, and table configuration.
• Billing Information: When you subscribe to a paid plan, payment card details are collected and processed directly by Stripe. Dishium does not store full card numbers on its servers.
• Dining Guests: When a guest places a table order via a QR menu, we store the selected items, table reference, and any optional kitchen note provided by the guest.

2. How We Use Information

We use collected data to operate your restaurant dashboard, render your public QR menus, route table orders to your kitchen, send transactional emails (welcome emails, password resets, and order notifications), and process subscription billing.

3. Data Isolation & Security

Dishium is multi-tenant and scopes all dashboard queries to your authenticated restaurant. Passwords are hashed using bcrypt, and sessions are protected with HTTP-only signed tokens.

4. Third-Party Services

We share data only with essential infrastructure providers required to deliver the service, such as cloud hosting, transactional email delivery, and payment processing (Stripe). We do not sell your personal data.

5. Your Rights

Depending on your jurisdiction (including the EU/EEA under GDPR), you may request access to, correction of, export of, or deletion of your personal data by reaching out through our contact page.