Privacy Policy

01The two roles we act in

It matters which of two capacities we are acting in, because your rights differ between them.

• As a controller: for the restaurant's own account data — the owner's name, email and phone, subscription and billing records, and logs of how the platform is used. Here we decide the purpose and means of processing.
• As a processor: for everything that enters the system from day-to-day trading — orders, sales, customer phone numbers, loyalty balances and staff records. That data belongs to the restaurant. We process it only on their instructions, under the Data Processing Agreement.

If you are a diner at a restaurant that uses Noqta and want to ask about your data, the restaurant is the party responsible for it; we assist them in responding to you.

02What we collect

We do not collect or store payment card details. We do not request sensitive data (such as health, religious or political information), and entering it into free-text fields is contrary to the Acceptable Use Policy.

03Why we process it

• To run the platform and deliver the agreed service: recording orders, managing the menu, producing reports, and operating the loyalty programme.
• To generate the analysis and recommendations that are the substance of the service, including comparison across periods and branches.
• To operate the WhatsApp agent so that it answers your questions from your restaurant's data and no one else's.
• To bill and collect subscriptions and administer your account.
• For security: detecting unauthorised use, preventing fraud, and maintaining audit records.
• To provide support and to contact you about operational matters concerning the service.
• To meet a legal obligation where we are required to do so by a valid order.

We do not sell your data, rent it, use it for targeted advertising, or share it with outside parties for their own commercial purposes.

04Artificial intelligence and your data

Some features — principally the WhatsApp agent and the analytical briefs — use language models to generate answers and recommendations. We set this out explicitly because it bears directly on your data.

• Only the data needed to answer your specific question is sent to the model provider, not your whole database.
• We contract with model providers on terms that prohibit using your data to train their models.
• Your restaurant's data is isolated from every other restaurant's; one restaurant's performance is never used as a reference in another's answers.
• Model output can be wrong. Recommendations are decision aids, not a substitute for your commercial judgement, nor for accounting or legal advice.

05Who we share it with

We rely on service providers ("sub-processors") to run the platform. Each is contractually bound to process data only on our instructions and to a standard of protection no lower than the one we owe you.

We may disclose data where compelled by a court or competent authority, and will notify you unless notification is legally prohibited. If the business is sold or merged, data transfers as part of that transaction and this commitment continues to apply to it.

06Transfers outside the country

Platform data may be stored or processed on servers outside Palestine, because the infrastructure providers we rely on operate international data centres. Where that happens we require the provider to give contractual protections equivalent to those set out in this policy.

07How long we keep it

• Operating and analytical data: kept for the life of your subscription, because the value of the service rests on historical comparison.
• After termination: your data remains available for export for thirty days, then is deleted or anonymised within ninety days of the termination date.
• Billing records: kept for the period required by applicable accounting and tax rules.
• Security and audit logs: kept for up to twelve months.
• Backups: data may persist in encrypted backups for a limited further period before being cycled out.

08Security

• Data encrypted in transit and at rest.
• Each restaurant's data separated from every other's, with that separation enforced on every read.
• Role-based permissions, so a staff member sees only what their job requires.
• An audit trail over sensitive operations, particularly anything touching money or orders.
• Internal access restricted, logged, and reviewed periodically.

No system is perfectly secure. In the event of a breach that materially affects your data, we will notify you without undue delay and in any case within seventy-two hours of becoming aware of it, setting out what happened and what we recommend.

09Your rights

• Access: obtain a copy of the data we hold about you.
• Rectification: correct anything inaccurate.
• Erasure: ask us to delete your data, to the extent that does not conflict with a legal or accounting obligation we are under.
• Portability: receive your data in a structured, machine-readable format.
• Objection and restriction: object to particular processing, or ask us to restrict it.
• Withdrawal of consent: where processing rests on your consent, without affecting the lawfulness of what came before.

To exercise any of these, write to the address below. We will respond within thirty days, and may ask you to verify your identity first in order to protect your account.

10Children's data

The platform is intended for commercial use by adults. We do not knowingly collect data from anyone under eighteen, and we delete such data if we become aware of it.

11Changes to this policy

We may update this policy. Where a change materially affects your rights or how we process your data, we will notify you by email or in the platform at least thirty days before it takes effect. Continuing to use the platform after that date constitutes acceptance.