Privacy policy
Last updated: 6 October 2026
This policy explains what information QRenvo, operated by Mahesh Kumar (Proprietor) ("QRenvo", "we") collects when you use qrenvo.com and the QRenvo app, and how we use and protect it. It follows the Digital Personal Data Protection Act, 2023.
Who this covers
- Restaurant owners and staff who create and use a QRenvo account.
- Guests who open a restaurant's menu by scanning its QR code and place orders.
What we collect
- Account details: owner name, email, WhatsApp number and a password (stored only as a secure hash).
- Restaurant details: name, address, opening hours, GSTIN, UPI ID, menu, prices, photos and table numbers.
- Orders and bills: items, amounts, table, time and payment status.
- Guest details: the name and phone number a guest enters when placing an order, used by the restaurant for that order and for showing the guest their own orders.
- Technical data: IP address, browser type and basic logs, kept to run and secure the service.
Payments
Subscription payments are processed by Razorpay. We never see or store your card, net-banking or UPI PIN details. Guests pay restaurants directly by UPI into the restaurant's own account; QRenvo does not receive or hold that money.
How we use information
- To provide the service: show menus, pass orders to the kitchen, create bills and invoices.
- To manage your account, subscription and support requests.
- To keep the service secure, prevent misuse and fix problems.
- To send service messages about your account. We do not send marketing without your consent.
We do not sell personal information.
Who we share it with
- The restaurant a guest orders from receives that guest's order details.
- Service providers that help us run QRenvo: cloud hosting, Cloudflare (network and security) and Razorpay (payments). They may process data only to provide their service to us.
- Authorities when the law requires it.
Storage on your device
The app stores small settings in your browser (for example light or dark mode, your cart and your sign-in session). We do not use advertising cookies.
How long we keep it
Account and restaurant data is kept while the account is active. Bills and invoices may be kept for as long as tax law requires. When an account is closed, we delete or anonymise its data within 90 days, except where we must keep it by law. Backups are overwritten within 14 days.
Security
Data is sent over encrypted connections (HTTPS), passwords are hashed, each restaurant's data is kept separate, and backups are taken daily. No system is perfectly secure, but we work to protect your data and will inform affected users of a breach as the law requires.
Your rights
You can ask to see, correct or delete your personal data, or withdraw consent, by writing to [email protected]. Guests who want their order details removed can ask the restaurant or contact us.
Changes
We may update this policy. The date at the top shows the latest version; significant changes will be shown in the app.
Contact and grievances
Questions or complaints about privacy: [email protected], +91 96702 26608, 217-K, Tajpur, Bikapur, Ayodhya, Uttar Pradesh 224206, India.