Privacy Policy

DELISH.IS ("DELISH.IS", "we", "us", or "our") provides an online platform that lets restaurants, cafes, bars, and food trucks build digital menus, generate QR codes, accept online orders, and get discovered by nearby diners (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using the Service, you agree to the collection and use of information as described here.

1. Information We Collect

Account & Business Information

When a restaurant owner registers for an account, we collect information such as business name, username, email address, password (stored in hashed form), phone number, and business address.

Order & Customer Information

When you place an order through a menu hosted on DELISH.IS, we collect information needed to fulfill it, such as your name, phone number, delivery address, and order details. This information is shared with the restaurant you are ordering from so they can prepare, deliver, and communicate with you about your order.

Location Information

With your permission, we use your device's location (or an address you provide) to show nearby restaurants on the map and search results, and to estimate delivery distance and fees. You can decline location access in your browser and enter an address manually instead.

Menu Content & Uploaded Images

Restaurant owners may upload menu photos, item images, and logos. If you use our AI Menu Scanner feature, the uploaded menu image or document is sent to our AI processing provider (OpenAI) solely to extract menu items, descriptions, and prices; it is not used to train third-party models beyond what our provider's own policies permit.

Payment Information

Subscription and payment processing is handled by Stripe, our payment processor. We do not store full credit card numbers on our servers — Stripe collects and processes this information directly under its own privacy policy.

Communications

If a restaurant enables WhatsApp order notifications, order details are relayed through the WhatsApp Business API to notify the restaurant and, where applicable, the customer, about order status. We may also send you transactional emails (e.g., order confirmations, password resets) through our email provider.

Device & Usage Information

We automatically collect certain technical information, including IP address, browser type, device type, pages viewed, and timestamps, to operate, secure, and improve the Service.

2. How We Use Information

3. Cookies & Tracking Technologies

We use session cookies to keep you signed in and to remember your preferences (such as language). These cookies are necessary for the Service to function and do not track you across other websites. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some features of the Service may not work correctly without them.

4. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

5. Third-Party Services

We rely on trusted third parties to provide parts of the Service, including:

These providers process data under their own privacy policies, and we encourage you to review them.

6. Data Retention

We retain account and order information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time, subject to records we are legally required to keep (e.g., transaction records for tax purposes).

7. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights & Choices

Depending on your location, you may have the right to:

You can update most account information directly from your account settings, or contact us using the details below to exercise these rights.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States, where our servers and service providers operate. We take steps to ensure appropriate safeguards are in place for such transfers, as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us