A restaurant operations system, not just a billing app.

Effective Date: 14 May 2026

This Privacy Policy explains how RiSo, RiSo Apps, RiSo QR Ordering, RiSo POS, RiSo customer ordering pages, and every related RiSo product, service, website, dashboard, mobile app, browser page, QR ordering flow, report, notification, support channel, and future module under the RiSo name collect, use, store, disclose, secure, and retain information.

By installing, opening, accessing, logging in to, scanning a RiSo QR code, placing an order through, managing a restaurant through, using, testing, subscribing to, or continuing to use any RiSo service, the restaurant owner, staff user, customer, administrator, visitor, or other user automatically acknowledges and agrees to this Privacy Policy, the Terms and Conditions, and any related RiSo policies shown in the app, website, invoice, support message, or onboarding material. If you do not agree, you must stop using RiSo immediately.

1. Parties and scope
RiSo is a restaurant technology platform that may provide QR ordering, menu management, POS tools, order management, staff roles, analytics, reports, stock/inventory tools, ServeSync ingredient deduction, customer ordering pages, app notifications, subscription controls, and support tools. This Privacy Policy applies to all restaurants using RiSo, restaurant owners, managers, waiters, cooks, authorized RiSo administrators, customers placing orders through RiSo QR links, and anyone interacting with a RiSo-controlled page or app feature.

Each restaurant account is intended for one restaurant outlet only unless RiSo approves otherwise in writing. If a restaurant uses RiSo for multiple outlets, branches, cloud kitchens, franchise locations, or separate business locations without approval, RiSo may restrict, separate, suspend, or require additional subscriptions for those accounts and related data.

2. Information we may collect
RiSo may collect restaurant information such as restaurant name, slug, subscription tier, access status, business address, GSTIN, FSSAI number, phone number, email, UPI ID, social links, branding images, logos, banner images, opening/closing hours, plan settings, user limits, printer settings, order settings, charges, tax settings, and support history.

RiSo may collect user account information such as name, email address, assigned role, restaurant membership, authentication user ID, account status, login status, device token preview, platform type, and activity records. RiSo does not require staff users to share passwords with RiSo support and users must never send secret keys, OTPs, or private credentials through support messages.

RiSo may collect customer order information entered through the QR ordering page or staff/POS interface, including order items, variants, quantities, table reference, order type, customer name, phone number, delivery address when used, payment method after completion, order status, created/completed timestamps, charges, GST calculation, tracking tokens, and order notes if supported.

RiSo may collect inventory and operational data such as inventory items, units, stock counts, purchase/add stock entries, reduction entries, wastage, adjustments, low stock reports, ServeSync recipe mappings, automatic deduction records, stock ledger entries, audit logs, analytics summaries, report generation timestamps, and export metadata.

RiSo may collect device and technical information such as app version, device platform, notification permission status, Firebase Cloud Messaging push token, browser local storage tokens used for customer order tracking, IP-derived request context where available from infrastructure providers, crash/error information, and diagnostic logs needed to operate the service.

3. Customer data collected by restaurants
When customers place orders through a RiSo QR/customer page, RiSo processes the information for the restaurant using RiSo. The restaurant remains responsible for ensuring that customer data is collected lawfully, displayed appropriately, and used only for order fulfilment, customer support, billing, delivery, recordkeeping, and legitimate restaurant operations.

4. How information is used
RiSo may use information to operate QR ordering, create and manage orders, display menus, calculate charges and GST, process POS workflows, manage staff roles, enforce subscription access, provide reports and analytics, support stock and ServeSync features, send push notifications, secure accounts, prevent unauthorized access, debug issues, provide support, maintain logs, enforce limits, improve product quality, and comply with legal or business obligations.

5. Legal basis and legitimate interests
Where applicable, RiSo processes data to perform the service requested by the restaurant, support customer order fulfilment, comply with applicable legal obligations, protect the security and integrity of the platform, prevent fraud and misuse, maintain auditability, and pursue legitimate business interests such as billing, support, reliability, product improvement, and subscription enforcement.

6. Subscription, access, and retention
RiSo may lock access, restrict features, downgrade access, preserve data, or mark a restaurant as Buffer, Trial, Expired, Locked, or other operational status based on subscription rules. Existing data may remain stored during a locked or expired period so that the restaurant can renew and resume service. RiSo may provide warnings before deletion where applicable, but after expiry and required warning periods, RiSo may allow deletion of restaurant data by RiSo only, subject to internal safeguards, legal duties, backups, and operational constraints.

7. Storage and processors
RiSo may use third-party infrastructure and processors such as notification providers, hosting providers, payment/support tools, WhatsApp/Meta services if enabled, AI providers if AI reports/support features are enabled, analytics/error tools, and cloud storage providers. Data may be processed by these providers only as needed to operate RiSo, deliver notifications, host customer pages, store images/files, run service functions, authenticate users, and provide support.

8. Images, logos, and uploaded content
Restaurant branding images, menu images, logos, bill logos, and other uploads may be stored in cloud storage and may be publicly accessible when needed for customer menus, invoices, receipts, reports, or QR ordering pages. Restaurants must only upload content they own or have permission to use. RiSo may remove or disable content that is unlawful, misleading, infringing, abusive, offensive, or harmful to platform integrity.

9. Local device data
Some RiSo functions may use local device storage for temporary app state, customer order tracking tokens, cached UI preferences, or offline-friendly display behaviour. Sensitive business records such as stock ledger entries, audit records, and official order records should be treated as server-backed records. RiSo may clear local data during logout, reinstall, app reset, browser storage clearing, or device replacement.

10. Notifications and communication
RiSo may send push notifications for new orders, stock alerts, support notices, subscription status, app access, and system information. WhatsApp, email, or phone support may be used if the restaurant contacts RiSo or enables such features. Automated WhatsApp reports, AI summaries, and other scheduled communications may be subject to plan limits, add-on pricing, third-party provider rules, and separate consent requirements.

11. Security
RiSo uses technical and organizational safeguards such as authentication, role-based access, server-side access controls, server-side functions, audit logs, access controls, storage rules, and feature guards. No system can be guaranteed completely secure. Restaurant owners and users are responsible for using strong passwords, protecting devices, limiting staff access, removing old staff, reviewing logs, and not sharing credentials, admin passcodes, OTPs, secret keys, or private links.

12. Role-based access and audit logs
RiSo may record user activity such as order changes, stock actions, settings changes, user management, report downloads, access changes, passcode resets, and authorized account actions. These logs are used for accountability, support, security, billing, troubleshooting, and dispute handling. Users should assume actions taken inside RiSo may be logged.

13. Data sharing
RiSo does not sell restaurant or customer data to advertisers. RiSo may share or disclose information with service providers, infrastructure providers, payment/support/notification vendors, authorized restaurant users, legal/regulatory authorities when required, professional advisers, or business successors in connection with merger, restructuring, acquisition, or transfer of the RiSo business.

14. Customer privacy and restaurant responsibility
Restaurants must display or provide their own customer-facing notices where legally required, especially for delivery details, customer phone numbers, tax invoices, payment records, and any marketing or customer communication outside RiSo. RiSo provides tools, but the restaurant remains responsible for lawful use of its customer data.

15. Data accuracy
Restaurant owners are responsible for keeping restaurant details, menus, prices, GST/FSSAI/GSTIN information, charges, order settings, UPI details, staff roles, and inventory records accurate. RiSo is not responsible for losses caused by incorrect data entered by the restaurant or its users.

16. Data retention
RiSo may retain data for as long as needed to provide the service, comply with law, maintain audit records, prevent fraud, resolve disputes, enforce agreements, recover accounts, or preserve business records. Some logs, backups, and security records may remain for a reasonable period even after deletion from the active app interface.

17. Data deletion and account closure
Restaurants may request closure or deletion, subject to unpaid dues, legal obligations, operational requirements, backup cycles, dispute retention, and RiSo deletion safeguards. Deletion may be irreversible. Restaurants must export required reports before deletion where export tools are available.

18. Children and minors
RiSo is intended for restaurant business operations and lawful customer ordering. Restaurant staff accounts should only be created for persons permitted by the restaurant and applicable law to use the system. Customers placing orders must use the service lawfully and under appropriate supervision where required.

19. International transfers
Cloud providers and service processors may store or process data in data centres outside the restaurant's city, state, or country. By using RiSo, users consent to such processing where necessary for operating the service.

20. Changes to this Privacy Policy
RiSo may update this Privacy Policy from time to time. Continued use after an update means the user accepts the updated policy. RiSo may show updated terms in the app, website, support page, invoice, or other reasonable channel.

21. Contact
For privacy or data questions, contact RiSo support through the official support details shown inside the RiSo app. Restaurants should include restaurant name, slug, registered owner/admin email, and a clear description of the request.

Effective Date: 14 May 2026

These Terms and Conditions govern access to and use of RiSo, RiSo Apps, RiSo QR Ordering, RiSo POS, RiSo customer pages, RiSo reports, RiSo notifications, and every present or future service, module, feature, app, website, QR page, dashboard, tool, document, or support channel offered under the RiSo name.

By installing, opening, accessing, logging in to, registering for, scanning a QR code connected to, placing an order through, managing a restaurant through, testing, subscribing to, or continuing to use any RiSo service, you automatically agree to these Terms and Conditions, the Privacy Policy, subscription rules, feature rules, support rules, and all notices displayed or made available by RiSo. If you do not agree, you must stop using RiSo immediately.

1. Definitions
“RiSo” means the RiSo product, service, owner, operator, developer, administrator, brand, app, website, feature, update, or business operation. “Restaurant” means the business, owner, entity, outlet, operator, or authorized person subscribing to or using RiSo. “User” means any Owner/Admin, Manager, Waiter, Cook, staff member, customer, visitor, or person accessing RiSo. “Customer Page” means a public or semi-public QR ordering web page provided by RiSo for a restaurant. “Data” means all restaurant, staff, customer, order, menu, report, payment, branding, stock, audit, and operational information processed through RiSo.

2. License and permitted use
RiSo grants the restaurant a limited, revocable, non-exclusive, non-transferable right to use RiSo only for lawful restaurant ordering, POS, staff, reporting, menu, stock, and operational purposes during an active subscription, trial, buffer period, or approved access period. No ownership of RiSo software, design, code, platform structure, workflows, icons, reports, branding, names, trademarks, or intellectual property is transferred.

Each RiSo restaurant account, subscription, trial, slug, QR page, staff setup, menu, order system, and related access is licensed for one restaurant outlet only, unless RiSo gives written approval for multi-outlet or branch use. A restaurant must not use one subscription, QR page, login setup, menu, printer setup, or restaurant account to operate, bill, manage, or represent multiple restaurants, branches, outlets, cloud kitchens, franchise locations, or separate business locations. Each additional outlet or branch requires a separate restaurant account, subscription, or written arrangement approved by RiSo.

3. Account responsibility
Restaurant owners and Owner/Admin users are responsible for all activity under their restaurant account, staff accounts, customer page settings, menu prices, tax/charge settings, payment details, passcodes, and devices. The restaurant must ensure only authorized persons access RiSo. Staff accounts must be removed promptly when employees leave or should no longer have access.

4. Roles and permissions
RiSo may provide roles such as Owner/Admin, Manager, Waiter, and Cook. Role capabilities may vary by plan, update, device, and security rule. RiSo may enforce role limits, feature limits, user limits, subscription limits, and secure access controls. Display labels may differ from internal role names, but security rules remain binding.

5. Subscription tiers and add-ons
RiSo may offer Essential, Pro, Enterprise, trial access, custom plans, add-ons, user-limit add-ons, automated reports, AI reports, WhatsApp reports, printer features, stock features, or future paid modules. Prices, included features, user limits, support levels, and availability may change. RiSo may manually increase role limits or feature access for paid add-ons or special arrangements.

6. Trial, buffer, expiry, and access lock
RiSo may provide trial access for a limited time. Paid subscriptions may enter a buffer period after expiry where access temporarily continues. After the buffer period, access may be locked and subscription status may become expired. RiSo may show warnings that restaurant data may be deleted if subscription is not continued. Deletion, where supported, is controlled by RiSo and may require additional confirmation.

7. App access control
RiSo may disable restaurant access fully if subscription expires, trial ends, payment fails, misuse occurs, a legal issue arises, security risk is detected, or RiSo manually locks access. When locked, the restaurant app may show “Restaurant Access Locked. Subscribe to Resume Access.” Customer ordering may also be unavailable.

8. Payments and billing
Restaurants are responsible for paying agreed subscription fees, add-ons, taxes, and charges on time. Unless a written agreement says otherwise, fees are not automatically waived because a restaurant did not use the app, forgot to renew, changed staff, lost device access, misconfigured settings, or failed to maintain internet/device availability. Payment terms may be communicated by invoice, message, app notice, or agreement.

9. Refunds and cancellations
Refunds, cancellations, grace periods, and plan changes are at RiSo's discretion unless otherwise required by law or agreed in writing. RiSo may deny refunds for completed billing periods, setup work, custom work, support time, third-party costs, WhatsApp or third-party service costs, AI costs, or misuse-related suspension.

10. Restaurant data and operational responsibility
The restaurant is responsible for menu accuracy, pricing, availability, stock counts, ingredient mappings, GST settings, FSSAI/GSTIN information, UPI/payment details, receipt content, delivery charges, packaging charges, staff actions, and customer order fulfilment. RiSo is a software tool and does not operate the restaurant, prepare food, deliver orders, collect restaurant revenue unless separately agreed, or guarantee business performance.

11. Orders, payments, receipts, and taxes
RiSo may help create orders, calculate totals, generate receipts, and display payment methods. The restaurant remains responsible for tax compliance, invoice/receipt accuracy, GST/FSSAI compliance, pricing legality, payment settlement, refunds, cancellations, and customer disputes. RiSo does not provide tax, accounting, or legal advice.

12. Stock Room, ServeSync, and inventory
Stock Room, stock ledger, ServeSync automatic deductions, recipe mapping, wastage, adjustments, purchase entries, and low-stock alerts depend on accurate setup by the restaurant. RiSo cannot guarantee inventory accuracy if items, units, recipe quantities, staff actions, orders, or physical counts are incorrect. Downgrading from Enterprise or losing access may lock stock features while preserving existing data according to current rules.

13. Printer and hardware limitations
Printer functions depend on device model, Android version, Bluetooth/USB/LAN permissions, printer firmware, paper size, connection stability, and supported protocols. RiSo may provide printer settings and test tools, but cannot guarantee every printer or phone will work. Hardware, paper, ink/thermal rolls, cables, drivers, and network conditions are the restaurant's responsibility.

14. Notifications, WhatsApp, and third-party services
Push notifications, WhatsApp reports, AI reports, and automated communications depend on third-party providers such as Firebase, Meta/WhatsApp, OpenAI or other AI services, hosting providers, device permissions, battery settings, network availability, and provider policies. Delays, failures, classification changes, rate limits, and provider charges may occur.

15. Acceptable use
Users must not misuse RiSo, attempt unauthorized access, bypass subscription limits, reverse engineer the app, extract private credentials, tamper with APKs, scrape data, abuse public pages, overload the system, upload harmful content, infringe rights, impersonate others, interfere with another restaurant, or use RiSo for unlawful, fraudulent, harmful, misleading, or abusive activity.

16. Intellectual property
All RiSo names, logos, UI designs, workflows, code, platform structure, icons, generated documents, reports, templates, pricing displays, feature names, branding, and service concepts belong to RiSo or its licensors. Restaurants may use RiSo-generated documents for their internal business operations, but may not copy, resell, clone, rebrand, reverse engineer, or distribute RiSo technology or design without written permission.

17. Confidentiality and security
Users must keep login credentials, admin passcodes, passwords, device access, and account links confidential. Restaurants must not share private credentials, account links, or private support links. RiSo may reset passwords, revoke sessions, reset passcodes to defaults, lock access, or take protective measures when a security issue is suspected.

18. Audit logs and monitoring
RiSo may record audit logs for security, accountability, support, dispute resolution, billing, and compliance. Logged actions may include user changes, order updates, stock actions, report exports, app access changes, subscription changes, password resets, passcode resets, and access-control actions. Users should not expect operational actions inside RiSo to be anonymous.

19. Availability and changes
RiSo aims to provide reliable service, but does not guarantee uninterrupted, error-free, or permanent availability. Maintenance, internet failure, cloud provider issues, device problems, app bugs, third-party outages, payment issues, or security events may affect service. RiSo may add, remove, rename, redesign, restrict, gate, suspend, or modify features, tiers, pricing, limits, and workflows.

20. Support
Support may be provided through WhatsApp, phone, email, in-app guidance, or other channels. Support availability, response time, and depth may vary by plan, subscription status, workload, and issue type. RiSo is not responsible for losses caused by delayed support, incorrect information provided by the restaurant, unsupported devices, or changes made outside RiSo's guidance.

21. Limitation of liability
To the maximum extent permitted by law, RiSo is not liable for indirect, incidental, special, consequential, punitive, exemplary, or business losses, including lost profits, lost revenue, lost orders, lost data, stock mismatch, staff mistakes, customer disputes, tax errors, payment errors, hardware failures, notification failures, downtime, subscription lockouts, or third-party service failures. RiSo's total liability, if any, shall not exceed the amount paid by the restaurant to RiSo for the affected service period, unless applicable law requires otherwise.

22. Indemnity
The restaurant agrees to defend, indemnify, and hold RiSo harmless from claims, losses, damages, penalties, costs, and expenses arising from restaurant operations, customer complaints, food/service issues, tax or licensing failures, incorrect menu/pricing/tax data, misuse of the app, staff actions, unlawful content, data misuse, intellectual property infringement, or breach of these Terms.

23. Suspension and termination
RiSo may suspend or terminate access for non-payment, misuse, illegal activity, security risk, policy breach, abuse, excessive support burden, reverse engineering, attempted bypass, or any conduct that threatens RiSo, other restaurants, customers, infrastructure, or reputation. The restaurant may stop using RiSo, but unpaid amounts and surviving obligations remain.

24. Data deletion after expiry
If subscription is not continued after expiry and warning periods, RiSo may allow restaurant data deletion. Deletion may include restaurant records, menu data, orders, stock data, audit logs, staff links, settings, and related data, subject to technical limitations, backups, legal duties, and retained security records. Restaurants must export required records before deletion where export tools are available.

25. Governing law and disputes
Unless a written agreement states otherwise, these Terms are governed by the laws of India. Courts or appropriate legal forums in Nagaland, India, shall have jurisdiction where legally permitted. RiSo may also seek urgent relief in any competent jurisdiction for misuse, security risk, intellectual property infringement, or unauthorized access.

26. Updates to terms
RiSo may update these Terms at any time by posting in the app, website, support section, invoice, onboarding material, or other reasonable channel. Continued use after update means acceptance of the revised Terms.

27. Entire understanding
These Terms, the Privacy Policy, subscription rules, feature notices, invoices, and written RiSo agreements together form the understanding between RiSo and the restaurant for use of the service. If any part is unenforceable, the remaining parts continue to apply.