Privacy Policy

This policy explains how the Tefrit Menu System collects and uses data when you use a restaurant/hotel’s digital menu, ordering, reservations, waiter-calling, and related features.

Important: We do not read data from other websites, your browser cache for other sites, or “secretly” access your cookies. Any analytics in this system is limited to this application and is enabled only with your consent where required.

1) Data we collect

• Device/session identifiers: a first‑party cookie (e.g., tefrit_sid) to keep your order/reservation linked to your device session.
• Network data: your IP address (used for security, fraud prevention, and network restrictions like IP allowlists).
• Order & reservation details: items, quantity, special instructions, accessibility notes, time stamps, table number (if provided), and status updates.
• Waiter call requests: reason/message and time stamp (if you use the feature).
• Optional analytics events: on-site interactions (e.g., page view, meal view) when you explicitly consent in the menu.

2) How we use data

• Provide menu viewing, ordering, reservations, waiter calling, and order status/ETA countdown.
• Operate kitchen and admin dashboards (e.g., accepting orders, setting ready time, responding to messages).
• Protect the system (rate limiting, abuse detection, IP restrictions, auditability).
• Improve the experience using consent-based analytics (when enabled by you).

3) Cookies

The menu uses a first‑party cookie to maintain a stable session so your orders and updates show on your device.

You can block cookies in your browser settings, but some features (like “My Orders” and chat) may not work reliably.

4) Consent-based analytics

If you accept analytics in the menu, the system may store on-site interaction events in the database for the restaurant.

• Analytics is disabled by default until you choose.
• Location is collected only if you explicitly share it (where supported).

5) Sharing

Restaurants/hotels using Tefrit can access the data needed to fulfill your orders and reservations. We do not sell personal data.

6) Security

We use access controls for staff/admin features. Admin passwords are stored as salted hashes. Always use strong passwords and keep devices secure.