Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: name, email, password, business name, and business type when you register
• Business data: menus, pricing, staff details, operating hours, and storefront content you create
• Payment information: bank account details and payout preferences (processed and stored securely)
• Usage data: pages visited, features used, and interaction patterns to improve the Service
• Customer data: information about your restaurant's customers (orders, reservations, contact info) that you collect through the platform

2. How We Use Your Information

• To provide, maintain, and improve the Pilond platform
• To process payments and payouts to your bank or mobile money account
• To send transactional emails (order confirmations, password resets, etc.)
• To provide customer support
• To send product updates and marketing communications (with your consent)
• To detect and prevent fraud or abuse

3. Data Sharing

We do not sell your personal data. We share information only with:

• Payment processors (Stripe, Paystack) to facilitate transactions
• Email providers (Resend) to deliver transactional emails
• Hosting providers (Vercel, Supabase) to operate the platform
• Law enforcement when required by applicable law

4. Data Storage & Security

Your data is stored securely using Supabase with row-level security policies ensuring tenant isolation. All data is encrypted in transit (TLS) and at rest. Payout credentials are stored encrypted. We implement industry-standard security measures but cannot guarantee absolute security.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for marketing communications

To exercise these rights, contact us at privacy@pilond.com.

6. Cookies

We use essential cookies for authentication and tenant resolution. We do not use third-party tracking cookies. The active-tenant-slug cookie identifies which restaurant dashboard you are managing.

7. Data Retention

We retain your data for as long as your account is active. After account deletion, data is retained for 30 days to allow recovery, then permanently deleted. Anonymized analytics data may be retained indefinitely.

8. International Transfers

Pilond operates globally and your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

9. Children's Privacy

Pilond is not intended for use by individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, contact us at privacy@pilond.com.