Privacy Policy

DineFlow is a restaurant order-management software that replies to restaurant customers' messages on social platforms (Facebook, Instagram, TikTok) using artificial intelligence and forwards order details to the restaurant. This policy explains what data we collect and how we use it.

1. Data we collect

• Restaurant owner data: name, email, phone number, restaurant name, and subscription/license data.
• Restaurant settings: menu items, prices and costs, branches and branch WhatsApp numbers, and dish photos uploaded by the restaurant.
• Linked accounts: when a Facebook Page, Instagram or TikTok account is linked, we store its ID, name and the access token granted by the platform. Tokens are stored on our servers only.
• Restaurant customers' messages: message text sent to the linked account, the sender's name or username as provided by the platform, and location if the customer shares it.
• Order data: customer name, phone number, delivery address and ordered items, as written by the customer in the conversation.

2. How we use data

• To reply to customer messages on behalf of the restaurant, and to record and update orders.
• To send order details to the restaurant branch's WhatsApp and pick the nearest branch.
• To show orders, reports and profits to the restaurant owner inside the app.
• To manage subscriptions, licenses and support.

We do not sell data, do not use it for advertising, and do not send messages that the customer did not initiate.

3. Service providers

• Google Firebase (data storage) and Render (server hosting).
• DeepSeek (processing conversation text to generate replies).
• Meta (Facebook, Instagram, WhatsApp) and TikTok, through their official APIs, to receive messages and send replies.
• Wayl for online payments. We do not store card details.

4. Data retention and deletion

• We keep data while the restaurant account is active or until the owner asks us to delete it.
• The owner can unlink any connected account at any time from the "Link accounts" tab; its access token is deleted from our servers immediately. Access can also be revoked from Facebook, Instagram or TikTok settings.
• Data deletion requests: email sniper.aa6@gmail.com with the restaurant or account name, or contact +964 781 506 3799. Deletion is completed within 30 days. Restaurant customers can request deletion of their conversations the same way.

5. Security

Data is transferred over encrypted connections (HTTPS). Access tokens and service keys are kept on the server only and are never sent to users' devices.

6. Contact

Privacy questions: sniper.aa6@gmail.com · +964 781 506 3799