Legal

Privacy Policy

Last updated: June 8, 2026

RestroLab (“we”, “us”, or “our”) operates a multi-tenant SaaS platform for restaurant and hospitality management. This Privacy Policy explains what information we collect, how we use and disclose it, and how we protect it when you visit our website or use our services.

By accessing or using RestroLab, you agree to the practices described in this policy.


1. Information We Collect

Account Data
When you sign up, we collect your name, business name, and email address.

Business & Operational Data
We process data you enter into the platform including orders, menu items, staff details, table configurations, reservation records, and customer information on your behalf. This data belongs to you; we process it only to deliver the Service.

Usage Data
Pages visited, time spent, referring URLs, browser type, device type, and IP address collected automatically when you use the website.

Cookies & Local Storage
Small files stored on your device to keep you signed in, remember your preferences, and improve your experience.

Payment Data
When you subscribe, payment is processed by our payment gateway providers eSewa or Khalti for customers in Nepal, and Stripe for international customers. We do not store your full card or payment details on our servers your payment information is handled directly by the respective payment processor under their own security standards.


2. Third-Party Analytics & Monitoring Tools

We use third-party services to understand how visitors interact with our website and to improve its performance. These services may collect data on our behalf:

  • Google Analytics collects anonymized usage data such as page views, session duration, browser and device type, and traffic sources. See Google’s Privacy Policy.
  • Microsoft Clarity records anonymized session replays, heatmaps, and interaction data to help us identify usability issues. See Microsoft’s Privacy Statement.

These tools may set their own cookies and collect data subject to their own privacy policies. We do not sell or share personally identifiable information with these providers beyond what is necessary for the services described above.


3. Embedded Third-Party Content

Some pages may include content embedded from third-party platforms, such as video embeds, maps, or widgets. When you interact with embedded content, the respective platform may collect data about you as if you visited their site directly. We recommend reviewing the privacy policies of those platforms.


4. How We Use Your Information

We use the information we collect to:

  • Provide and operate the Service, including order management, kitchen display, menu, reservations, and analytics features.
  • Manage your account and subscription.
  • Process payments and issue invoices.
  • Understand user behaviour and improve the platform through anonymized usage analysis.
  • Provide customer support and respond to your requests.
  • Detect and prevent fraud or abuse.
  • Comply with legal obligations and enforce our agreements.

We do not sell your personal data to third parties.


5. Cookies

We use cookies to keep you signed in, for analytics, and to remember your preferences. You can control or disable cookies through your browser settings; however, some features of the Service may not function correctly without them.


6. Multi-Tenant Data Isolation

RestroLab is a multi-tenant platform. Each customer’s data is logically isolated, and we maintain strict access controls to ensure one customer’s data is never accessible to another.


7. Data Sharing

We may share your information only in these limited cases:

  • Service Providers cloud infrastructure and payment processors acting on our behalf, bound by confidentiality obligations.
  • Legal Authorities when required by law, court order, or to protect rights, safety, or property.
  • Business Transfers in the event of a merger or acquisition, your data may transfer to the successor entity. We will notify you in advance.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account termination, data is retained for up to 90 days before deletion, unless a longer period is required by law.


9. Your Rights

Depending on your location, you have the right to access, correct, or request deletion of your personal data, or to object to certain processing activities. To exercise these rights, reach us through the contact form.


10. Children’s Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us immediately.


11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Continued use of the Service after any changes constitutes acceptance of the updated policy.


12. Contact Us

For privacy-related questions or requests:

RestroLab
Website: restrolab.com
Contact: Contact form