Privacy Notice

Arivahly Ventures Pvt. Ltd. operates AVS Restaurant POS as a hosted service. We handle account, billing, support and security information to provide the service. A restaurant using the POS decides why it collects diners’ and staff members’ information; the restaurant is responsible for giving those people its own notice and handling their requests. Our service terms describe how we process that restaurant data on the restaurant’s instructions.

• Account setup: restaurant and branch names, owner name, email address, license identifier and a securely hashed password. We use these to create and protect the account, apply the selected plan, provide support and meet legal obligations.
• Restaurant service records can include diner names, phone numbers, email, addresses, birthdays, anniversaries, allergy notes, orders, loyalty and wallet balances; staff names, contact details, account permissions and shift records; plus menus, inventory and branch settings. We process these to run billing, ordering, kitchen, loyalty and reports, and to provide backups and support. The restaurant chooses which features and fields to use.
• Security and diagnostics: authentication, audit and operational events needed to detect misuse, investigate incidents and keep the service reliable. We do not use these records for advertising.
• Optional product updates: sent only when the account owner separately opts in. The choice is optional and can be withdrawn under Settings → Privacy or by contacting privacy@arivahly.in.

Data is stored on infrastructure configured for the hosted service. We give access only to authorized staff and service providers needed to operate, secure, back up or support the service, under appropriate safeguards. Payments, once enabled, are handled by the provider named in the payment flow; card credentials should not be entered into restaurant notes or customer records.

We keep account information while the account is active and for up to 365 days after closure, unless a longer period is needed for law, security or a dispute. Security logs and associated personal data used to detect and investigate unauthorized access are retained for at least one year where the notified Rules apply. Customer profiles with no update or order activity are automatically anonymized after the configured retention period (365 days by default; 365–3,650 days on the hosted server). Profile contact fields are removed from related order snapshots while transaction records remain. Restaurant operators should set a period that fits their stated purposes and legal duties. Account owners may request access, correction, export or account closure from privacy@arivahly.in. Some invoice, transaction or audit records may need to be retained or anonymized rather than erased immediately.

The web app uses essential first-party session cookies to sign you in securely and remember your session. The current POS app does not load advertising pixels or optional cross-site tracking cookies. If optional analytics are added later, they must remain disabled until a visitor chooses them.

Business accounts are intended for adults acting for a restaurant. Restaurant operators should avoid collecting children’s information unless they have established the required parent or guardian permission and safeguards for their use case. Do not enter sensitive information into free-text notes unless it is necessary to fulfil the restaurant’s service.

We use access controls, password hashing, encrypted transport for public deployments, backups and audit records. If a security incident affects personal data, contact security@arivahly.in promptly. We will investigate, contain and notify affected parties and authorities as required by applicable law.

For privacy questions, rights requests or complaints, contact the privacy team at privacy@arivahly.in. Include the account email and the request type; do not email passwords or payment credentials. We aim to acknowledge requests within seven days and resolve them within the period required by applicable law.

Read the service terms or view India compliance notes.