Privacy Policy

1. Who we are

Restro (“Restro Management”) is restaurant back-office software provided by Lattice Nepal (“we”, “us”) through the website restro.latticenepal.com and the Restro mobile app for Android and iOS. This policy explains what we collect, why, who we share it with, and the choices you have. Contact: restro@latticenepal.com.

Restro is used by restaurant businesses. For the records a restaurant enters (orders, customers, staff), that restaurant decides what is recorded and is responsible for it; we process those records on its behalf to run the service.

2. What we collect

• Account details of people who sign in: name, email, phone number if given, password (stored only as a one-way hash), restaurant and role.
• Restaurant records your staff enter: orders, bills, payments and their method (cash, eSewa, Khalti, Fonepay, khata), menu, stock, purchases, suppliers, expenses, cash counts and an audit log of who did what.
• Customer details a restaurant records for credit (khata): customer name, phone number and balance.
• Device push token (mobile app only): an identifier issued by Google Firebase so we can send notifications such as “new order” or “dish ready” to your phone. It is deleted when you sign out.
• Technical data: sign-in times, IP address, browser or app type, and server error logs, used for security and troubleshooting.
• Uploaded images, such as menu photos, payment QR codes and payment proof photos, when you choose to upload them.

We do not collect payment card numbers, your location, contacts, photos you have not chosen to upload, or advertising identifiers. The app contains no ads and no third-party analytics or tracking.

3. Why we use it

• To provide the features you use: orders, kitchen tickets, bills, payments, stock and reports.
• To send notifications you have switched on, by email, in the app and as push notifications.
• To keep one restaurant’s records separate from another’s and to secure accounts, for example by limiting repeated failed sign-ins.
• To provide support when you ask for it, and to meet legal and accounting obligations.

We do not sell personal data or use it for advertising.

4. App permissions

The mobile app asks for notifications (to alert you to new orders, ready dishes and other events you choose) and uses the internet to reach our servers. You can turn notifications off at any time in your phone’s settings or in Restro’s notification preferences; the app keeps working without them.

5. Who can see what

Each restaurant’s records are visible only within that restaurant, and only as far as each person’s role allows: a waiter does not see cost or margin, kitchen staff do not see money, and so on. This separation is enforced in the database itself. Our staff access a restaurant’s data only to provide support or where the law requires it, and that access is logged.

6. Service providers

We use a small number of providers to run Restro, each only for its stated purpose:

• Oracle Cloud (Frankfurt, Germany): servers, database and image storage.
• Google Firebase Cloud Messaging: delivering push notifications to the app. It receives the device token and the notification text.
• Email delivery provider: invitations, password resets and notifications.
• Cloudflare Turnstile, when enabled: telling people from bots at sign-in and on the enquiry form.

We may also disclose data where the law requires it.

7. Security

All traffic is encrypted in transit (HTTPS). Passwords and sign-in tokens are stored only as hashes, sessions expire, and every restaurant’s data is isolated by database-level access rules. No system is perfectly secure, but we work to protect your data and will notify affected restaurants of a breach as the law requires.

8. Retention

Restaurant and financial records are kept while the account is active and afterwards for as long as accounting and tax law requires. Push tokens are deleted on sign-out or when Google reports them invalid. Server logs are kept for a limited period and then deleted.

9. Deleting your account and data

To delete your Restro account, email restro@latticenepal.com from the address you sign in with, with the subject “Delete my Restro account”. A restaurant owner can also remove a staff member’s access from Owner → Staff.

Within 30 days we delete your name, email, phone, password, sign-in sessions and push tokens. Financial records your restaurant must keep by law (bills, payments and their audit trail) are retained with your name removed, for the period the law requires. A restaurant owner can ask us to delete the whole restaurant’s data the same way, after exporting anything they need.

10. Your rights

You can ask us for a copy of your personal data, to correct it, or to delete it as described above. Restaurant owners, managers and accountants can export their restaurant’s records to Excel at any time.

11. Children

Restro is a business tool for adults. It is not directed at children under 18 and we do not knowingly collect their data.

12. Changes

We will update the date above when this policy changes, and notify restaurant owners of material changes in the app or by email.

13. Contact

Lattice Nepal · restro@latticenepal.com