Privacy Policy

Last updated: June 13, 2026

EchoTakeout is a multi-tenant restaurant software-as-a-service platform operated by A SUGUNA ATHIVEERAPERUMAL ("we", "us", "our"). We are committed to protecting the privacy of both restaurant operators (our subscribers) and consumers (customers who place orders via restaurant menus powered by our software).

1. Scope of This Policy

This Privacy Policy describes how we collect, store, and process data for two distinct groups:

• Restaurant Owners/Merchants: Independent business operators who subscribe to EchoTakeout.
• Dining Customers: Individuals who place orders via QR code menus at our subscribers' physical locations.

2. Data Collected from Restaurant Owners

To establish and support restaurant accounts, we collect and store:

• Account Information: Name, email address, password hashes, and contact phone numbers.
• Restaurant Configuration Data: Restaurant name, dynamic brand colors, tagline parameters, table setups, and custom operational constraints (e.g., queue limits).
• Menu Catalog Data: Item listings, descriptions, categories, prices, stock statuses, and item images.

3. Data Collected from Dining Customers

When a dining customer places an order at a subscriber's menu, we act strictly as a service provider (data processor) on behalf of the restaurant, collecting:

• Customer Name: Used by the restaurant to identify the order ticket.
• Mobile Number: Used by the restaurant to send order status alerts, KOT tokens, or clarify order details.
• Order Details: Selected items, table designations, customization instructions, and order totals.
• Payment References: Transaction IDs, order IDs, and verification parameters generated by third-party payment gateways (such as Razorpay). We do not collect or store card numbers, UPI PINs, or bank credentials.

4. Third-Party Payment Gateway Sharing

EchoTakeout does not store or process payment funds. When a merchant enables online payments, checkout transactions are routed directly to the merchant's connected payment processor (Razorpay) using secure OAuth parameters. Data sharing with Razorpay is governed by Razorpay's Privacy Policy.

5. Data Security & Storage

Our platform database is hosted on secure cloud infrastructure provided by Supabase. We utilize cryptographic hashing to protect passwords and enforce secure network protocols (HTTPS/SSL) to protect all transactional data in transit.

6. Contact Information

For questions regarding data practices or this policy, please email support at echotakeout@gmail.com.