Privacy Policy

1. Who we are

Restaurant OS is operated by Sinsajo Creators LLC. For any question or request about your data, write to sales@sinsajocreators.com.

Each menu belongs to the restaurant that publishes it. The restaurant decides what it shows (dishes, prices, photos, allergens) and receives the orders you send it on WhatsApp. We provide the tool.

2. Restaurant and Sinsajo: who is responsible for what

• The restaurant is responsible for its Club data (your WhatsApp number, your name and your consent): it decides whether to message you, what to send and how often, and it must honor your opt-out. In the Club form you will see the restaurant’s name and how to contact it.
• Sinsajo stores that data on the restaurant’s behalf and only to provide it the service. We do not use it for our own marketing, do not sell it and do not share it with other restaurants.
• Reviews and orders: the restaurant receives and moderates them; we store them. To ask for access to or deletion of your data you can contact the restaurant or us (sales@sinsajocreators.com); we coordinate with it.
• Restaurant account and usage counters: here Sinsajo is the responsible party.

3. If you open a menu

You do not have to give us any data or create an account to read a menu. This is what happens while you use it:

• Usage counts, without identifying you. When you open the menu, open a dish, share a dish, add a dish to your order, open your order, arrive through the printed QR code, or tap WhatsApp, Call, Directions, Reviews or the Kids’ Corner, we add 1 to one of the restaurant’s counters. Each counter stores only the day, the local hour on your phone, the type of action, the dish (for dish views, shares and items added to the order) and the menu language. It does not store your IP address, your browser or any identifier of yours.
• Ordering on WhatsApp. “Send order” opens WhatsApp with a message already written: the dishes, quantities, whether it is to go or dine-in, the total and any note you typed. You send that message yourself, from your own WhatsApp, to the restaurant’s number; WhatsApp (Meta) and the restaurant receive it together with your phone number and handle it under their own practices. We also store a copy of the order for the restaurant’s statistics: which dishes and how many (with their price), the total, whether it was to go or dine-in, the language, and the date and time. We do not store your name, your phone number or the note.
• Dish reviews. If you rate a dish we store the stars, the text (up to 280 characters), the name you choose to add (optional, up to 40 characters), the language and the date. It is not published when you send it: the restaurant reviews it and decides whether to show, reject or delete it. If approved, anyone who opens that dish will see what you wrote, with your name if you gave one. So please do not write personal data about yourself or others. The review is not stored together with your IP address.
• The restaurant’s Club (if you join). Some restaurants invite you to join their Club at the end of the menu. If you join, we store your WhatsApp number, the name you choose to add (optional), the menu language, the date and the exact consent text you accepted. It is stored only if you tick the box. That restaurant sees your number in its dashboard and may text you offers from its own WhatsApp; we do not send messages or share your number with anyone else. To stop receiving them, reply STOP to any of its messages; to have your number deleted, ask the restaurant or write to us.
• Abuse protection. To stop spam and attacks, each notice the menu sends (opening it, opening a dish, tapping a button) and each order or review you submit is counted against your IP address over a short window of time (for example, a maximum of 6 reviews per hour). That IP is stored with the type of action and a timestamp, in a separate table that is not linked to your orders, reviews or counters. It is deleted automatically once it is more than a day old; the cleanup runs periodically while there is traffic, so a record may stay a little longer.
• Hosting provider logs. Vercel, where the service runs, may log technical data about each request on its own (such as the IP address, browser and page requested) to operate and protect its platform. Vercel manages those logs under its own policy.
• No cookies; browser storage. The menu does not set cookies. It uses your browser’s storage for three practical things: your order in progress (kept for up to 12 hours so you do not lose it if you leave the page, and deleted when you send or empty it), your choice to pause videos (deleted when you close the tab), and the list of dishes you already rated on that device, so you do not rate twice by accident (kept until you clear the site’s data). None of this is sent to our servers by itself.
• Kids’ Corner. It has no forms, cookies, browser storage or analytics. The drawings that get colored and the games never leave the device.
• No third parties on the page. The menu does not load advertising, analytics or social-media scripts, and the fonts are served from our own domain.
• Links to other services. WhatsApp, Instagram and Google (Maps and reviews) are third-party services. Their policies apply when you open them, not this one.

4. If you have a restaurant account

We store what you upload and what is needed for you to sign in:

• Your name, email, role and password. The password is stored as a hash (scrypt, with salt), not as readable text.
• Your business details: name, address, phone, WhatsApp, Instagram, hours, review link, description, colors and logo.
• Your menu: categories, dishes, prices, allergens, translations, and the photos and videos you upload or generate, which are stored in our database.
• Menus you import (PDF, photo or text): they are read to extract the dishes. We keep the result of the reading and the file name, not the file.
• What you record in the dashboard (goals, figures, notes) and a log of dashboard actions (for example, that a menu was imported or a suggestion was applied) so you can review what happened.
• A session cookie (rs_session), only for people who sign in to the dashboard: it is httpOnly, lasts 30 days and is deleted when you sign out.
• Your plan details: plan and price, end of the free trial, paid-through date, payments (amount, date and invoice reference) and, if you pay with Stripe, your Stripe customer ID. Card details go to Stripe; we never see or store them. We also store the date you last signed in to the dashboard.
• Support: the Sinsajo Creators team can enter your dashboard to help you load or fix your menu. Every entry is recorded in your dashboard log.
• The reviews, orders, figures and Club contacts from your diners, as explained above, are visible in your dashboard. Club contacts are for sending YOUR offers with their consent: do not sell or share them, and honor every opt-out.

Artificial intelligence. To import a menu, translate it, improve descriptions or answer in the assistant, we send an AI provider (today OpenRouter, which in turn uses third-party models; the provider may change) what that feature needs: the menu file or text, dish names, descriptions and prices, and business data you record, such as figures and goals. We do not send diners’ orders or reviews. Some free models may keep and use the text they receive, so do not upload personal data to these features.

5. Who we share data with

We do not sell personal data or share it for advertising. We use these providers to run the service:

• Vercel: hosting and running the site.
• Neon: PostgreSQL database, with servers in the United States.
• Stripe: billing for restaurants’ plans. Card details go straight to Stripe; we never see them.
• OpenRouter and the AI models it routes to: only for the AI features in the restaurants’ dashboard.
• Meta (WhatsApp): only when you decide to send an order or share a dish on WhatsApp.
• Google (Maps and reviews) and Instagram: only when you open those links.

We may also disclose data if a law or legal order requires it, or to protect the security of the service.

6. Where and for how long

• The database is on servers in the United States. If you use the service from another country, your data is handled there.
• Club contacts: until you ask to opt out and be deleted, or until the restaurant’s account is closed.
• Usage counters, order copies and reviews: kept while the restaurant’s account exists and deleted when it is closed. The restaurant can delete reviews at any time from its dashboard.
• Abuse-protection records (with IP): deleted automatically once they are more than a day old.
• Dashboard sessions: expire after 30 days, and each user’s expired sessions are deleted when that user signs in again.
• Restaurant account: until you close it. Closing it from the dashboard (Settings → Close my account) immediately deletes its menu, photos and videos, orders, reviews, figures and Club contacts. Backups kept by our database provider may persist for a limited period before they disappear; payment records we are legally required to keep are retained only for that period.

7. Security

Passwords are stored as hashes, the dashboard session uses an httpOnly cookie, each restaurant’s data is kept separate from the others’, and the connection to the site in production is over HTTPS. The dashboard supports two-step verification (authenticator app), which is required for the Sinsajo team members who enter restaurants’ dashboards. No system is completely secure: if you notice a problem, write to sales@sinsajocreators.com.

8. Your rights and choices

You can ask us for access to your data, ask us to correct it or ask us to delete it by writing to sales@sinsajocreators.com. We reply within 45 days at most (or sooner if the applicable law sets a shorter deadline).

• Diners: usage counters are not tied to you and we cannot find them. If you left a review, tell us the dish, the date and what you wrote so we can locate it; the restaurant can also delete it from its dashboard.
• Restaurants: from Settings in the dashboard you can download a copy of your data (JSON file), correct it, and close your account to delete everything, without asking our permission.
• Browser: you can clear the site’s data whenever you like from your browser settings.

9. Children

The service is not directed to children under 13 and we do not knowingly collect data from children. The Kids’ Corner collects no data. If you believe a child sent us data (for example, a review), write to us and we will delete it.

10. Changes to this policy

If what we store or how we use it changes, we will update this page and its date. If the change is important, we will let restaurants with an account know.

11. Contact

Sinsajo Creators LLC · sales@sinsajocreators.com. See also the Terms of Use and the Accessibility Statement.