Privacy policy

This is a plain-language summary of what data Venditas handles, why, and what control you have. We are building our practices around India's Digital Personal Data Protection Act, 2023. As a young company, we will update this page as our setup changes, and change the date above when we do.

Who we serve

Venditas makes software for restaurants: a POS (billing, KOTs, kitchen screen, stock and reports) and a phone agent that answers the restaurant's calls. The restaurant is our customer. Its staff use our software at work, and its guests reach it when they order at the table, call, or give their details for a bill.

The restaurant decides what staff and guest details go into its account. We store and use those details on the restaurant's behalf, only to run the service for that restaurant.

What we collect

• From restaurant owners: name, email address and phone number for the login; business name, address, GSTIN, FSSAI number and UPI ID for bills; and the menu, prices, tables, timings and rules you add.
• From restaurant staff: the name, role, screen language and (if added) phone number the restaurant enters. Staff PINs are never stored as typed; we keep only a scrambled code that can check a PIN but can't be turned back into it. The POS records which staff member took each order, cancelled an item, gave a discount or changed a bill, and shows this to the restaurant's owner and managers.
• From guests, in the POS: whatever the restaurant enters or the guest gives at the table, such as name, phone number, birthday, notes, delivery address, the order, payments and any amount due.
• From guests who order with a table QR code: the order and any name or note they type. To stop misuse we keep a scrambled code made from their network address, not the address itself.
• From callers, for restaurants using the phone agent: phone number, name if given, and the details of the booking, order or question. This may include call audio and transcripts.
• From POS devices: when a POS screen hits an error, we record the error, the page, the browser type and a scrambled code made from the network address, so we can fix it.
• Phone alerts: if an owner or manager switches on alerts on their phone, we keep that phone's push address (a technical address given by the browser's push service, from Google, Apple or Mozilla) and send short alerts through it, such as "a paid bill was cancelled". Removing the phone in Setup → Alerts deletes it.
• Bills made while the internet is down: if a POS device keeps billing without internet, those bills stay in that device's browser until it can send them to Venditas.
• From this website: which pages are visited, which buttons are clicked (for example "WhatsApp us" or "Start free"), the site or AI assistant that sent the visit, and the browser and device type. We use PostHog for this. It keeps an anonymous ID in your browser's storage. We don't use advertising cookies, don't record screens, and don't send anything you type into our calculators. If your browser sends "Do Not Track", nothing is recorded.
• From partner and ad links: if you reach us through a link from a partner, a restaurant that recommended us, or one of our ads, your browser remembers which link it was for 60 days. If you then sign up, we save that with your restaurant so we can thank the partner or restaurant and see which ads work. It isn't sent anywhere else.

Why we use it

• To run the POS for the restaurant: orders, KOTs, bills, stock, customer dues and reports.
• To complete the booking, order or answer a caller asked for, and to send confirmations on WhatsApp to the caller and the restaurant.
• To sign people in securely and keep out bots.
• To count each restaurant's paid orders for its monthly Venditas bill, and to record what the restaurant has paid us (amount, date and payment reference).
• To fix faults, answer support requests and improve the product.
• To see which pages of this website help restaurant owners find us.

What we never do

• We do not sell personal data.
• We do not send marketing messages to a restaurant's guests or callers on our own behalf.
• We do not share one restaurant's staff or guest data with another restaurant.
• We do not use a restaurant's guest list for anything except running that restaurant's service.

Who can see a restaurant's data

The restaurant's owner, and its staff according to the role the owner gives them. Each restaurant's data is kept separate from every other restaurant's. The Venditas team opens a restaurant's POS only when the owner turns on setup or support access (the owner can turn it off at any time), when we need to fix a fault, or when the law requires it.

Who we share it with

We share data only with the restaurant it belongs to and with the service providers we need to run Venditas: hosting and database (Supabase, Vercel), login emails (Resend), the bot check on our login page (hCaptcha), phone calls and speech processing for the phone agent (our phone-line provider and ElevenLabs), WhatsApp messages (Meta), phone alerts (the push services of Google, Apple and Mozilla), and website analytics (PostHog). Each uses the data only to provide its part of the service, under its own privacy policy. Some of them process data outside India.

How long we keep it

We keep data only as long as we need it to provide the service, or as long as the law requires. While a restaurant uses Venditas, its bills and records stay in its account; GST rules may require the restaurant to keep bills for several years, so download them before leaving. When a restaurant leaves, it can download its data and ask us to delete it, and we will.

How we protect it

• Every connection to Venditas is encrypted (HTTPS).
• The database only lets each person see the restaurant and the parts of it their role allows.
• POS devices are paired by the owner or a manager, and each staff member signs in with their own PIN.
• Cancellations, discounts and bill changes are logged with who made them.

Your rights

You can ask to see, correct or delete personal data we hold about you. If you are a guest or staff member of a restaurant, you can ask the restaurant directly, or ask us and we will work with the restaurant on it. Message us on WhatsApp at +91 86899 49994, and we will respond within the time the law requires. You can also stop website analytics by turning on "Do Not Track" or blocking site data for venditas.in in your browser.

Contact and complaints

Venditas · Navi Mumbai, Maharashtra · venditas.in · WhatsApp +91 86899 49994. Send any privacy question or complaint to this number and we will reply.