Privacy Policy
How Kashero handles account, business and guest information.
Effective date: 10 November 2026. Kashero is provided by Mehrez. Privacy contact: meliani.mehrez@gmail.com.
Information we process
- Account details such as your name, email, business information, staff roles and sign-in or verification records. Passwords are stored as secure hashes rather than readable passwords.
- Restaurant or retail content, including menus, categories, prices, logos, uploaded photos, tables, products and transaction records.
- Guest orders and service requests. Guest names and phone numbers are optional. A venue’s QR code identifies the table; it does not require a guest account.
- Technical and security information needed to operate and protect the service, including session identifiers, request activity and abuse-prevention records.
- Billing records such as the chosen plan, payment reference and subscription status. When enabled, Paddle handles checkout and card details under its own privacy policy. Kashero does not store full payment-card numbers.
Why information is used
We use information to provide accounts and menus, route orders and waiter requests, maintain business records, provide support, manage billing, prevent fraud and meet legal obligations. Depending on the processing and applicable law, the basis may be providing a contract, legitimate operational or security interests, legal obligations or consent.
A restaurant controls its guest data and is responsible for its own privacy notices and customer communications. Kashero processes that data to provide the restaurant’s service. An optional marketing checkbox does not mean Kashero automatically sends marketing messages. Guests can browse without providing contact details.
Service providers and sharing
Our hosting and infrastructure use OpenAI Sites and Cloudflare services. Email delivery may use Google/Gmail. Paddle processes payments and subscription information when its checkout is used. These providers receive the information necessary for their functions. Information may also be disclosed where legally required or necessary to protect the service. We do not sell personal information.
Infrastructure and providers may process information outside your country. Applicable safeguards depend on the provider and the processing involved. You can contact us for information about your specific use of Kashero.
Cookies and device storage
We use essential cookies and browser storage for authentication, business selection, language preferences, baskets and QR guest sessions. Browser notifications require your permission and can be disabled in your browser or the app. A payment provider’s checkout may use its own cookies and security technology.
Retention and security
Business setup is retained for at least 30 days after subscription expiry to allow reactivation. Some records may be kept longer for support, security, accounting or legal reasons. No automatic deletion after exactly 30 days is promised. Contact us if you want to request an export or deletion.
We use encrypted connections, access controls and tenant-based permissions to protect information. Access is limited according to account roles. Account holders should keep passwords private and remove staff access when it is no longer needed.
Your choices and requests
Depending on applicable law, you may have rights to access, correct, delete, restrict or obtain a copy of your information, object to certain processing or withdraw consent. Contact meliani.mehrez@gmail.com. We may verify your identity before fulfilling a request and retain information where legally required. For restaurant guest information, contact the restaurant first; we can assist it with requests concerning data it controls.
Kashero business accounts are intended for adults authorized to operate a business. Do not use optional guest contact fields to collect unnecessary sensitive information. We may update this policy and will identify the effective date on this page.