NeuPos
Trust & Transparency

Privacy Policy

This Privacy Policy explains how NeuPos collects, uses, protects, and discloses information when you use our restaurant management platform, point-of-sale systems, and QR ordering menus.

Last Updated: October 1, 2026 • Effective Immediately

1 Introduction & Scope

NeuPos ("we", "us", or "our") operates a multi-tenant cloud-based restaurant management platform, including Point-of-Sale (POS) terminals, Kitchen Display Systems (KDS), Waiter ordering portals, and QR Code digital dining menus.

This policy applies to all users of our platform, including restaurant owners/administrators, managers, staff members, and restaurant guests who browse menus or place digital orders via our QR code system.

2 Information We Collect

We collect information necessary to deliver, operate, and maintain reliable restaurant operations:

A. Restaurant Business Account Information: When a restaurant registers for NeuPos, we collect restaurant business name, legal entity information, business email, contact phone number, physical address, and administrator credentials.
B. Operational & Menu Catalog Data: Floor and table layouts, categories, menu item descriptions, prices, photos, inventory levels, recipes, staff assignments, and cashier session records.
C. Transactional & Order Data: Items ordered, quantities, timestamps, tax calculations, discounts applied, kitchen status progressions, payment methods, and invoice receipts.
D. Device & Technical Usage Data: IP addresses, browser type, operating system version, access timestamps, and session diagnostics for security and fraud prevention.

3 How We Use Your Information

  • Order Processing & Transmission: Real-time synchronization of customer orders from QR menus and waiter tablets to kitchen displays and cashier cash registers.
  • Invoicing & Financial Reporting: Generation of tax-compliant digital bills, receipt printing, and daily cashier sales shift reconciliations.
  • Account & Subscription Management: Managing software packages, feature gating, renewal alerts, and system support.
  • Platform Performance & Security: Monitoring service stability, preventing unauthorized account access, and debugging system anomalies.

4 Guest & Customer Data Collection

NeuPos empowers individual restaurant administrators to configure whether they require customer contact details (such as Guest Name, Phone Number, and Email Address) during digital checkout:

Restaurant-Controlled Privacy Setting: If a restaurant disables customer data collection in their settings, diners can scan, browse, and place orders completely anonymously without providing any personal contact information.

When enabled, guest details are collected solely on behalf of that specific restaurant for order delivery confirmation, loyalty identification, and receipt delivery.

5 Multi-Tenant Data Isolation & Security

NeuPos uses strict tenant scoping across all database queries. Every database record (orders, customers, inventory, sales, products) is strictly partitioned by unique restaurant_id identifiers. No restaurant administrator or staff member can view, access, or query data belonging to another restaurant.

Passwords are encrypted using industry-standard BCRYPT hashing with salted rounds. We enforce secure HTTPS encryption across all web traffic.

6 Information Sharing & Third Parties

We do not sell, rent, or monetize your business or customer personal data to third-party advertisers.

Information is only shared under limited circumstances:

  • Infrastructure Service Providers: Secure cloud database hosting and server infrastructure under strict confidentiality contracts.
  • AI Menu Vision Scanning: When a restaurant administrator uses the AI menu scanner, uploaded menu photos are transmitted to Google Gemini API securely for automated optical character extraction without storing personal records.
  • Legal Compliance: If required by law, court order, or governmental regulation.

7 Cookies & Local Storage

We use essential session cookies (NEUPOS_SESSID) to maintain staff and administrator authentication states. Client-side browser local storage is utilized to cache temporary cart items and user theme preferences. We do not use third-party tracking cookies.

8 Data Retention & User Rights

We retain restaurant operational records as long as your subscription account remains active. Restaurant administrators have the right to export customer contacts to CSV, update menu details, or request permanent deletion of their restaurant workspace upon account closure.

9 Contact Information

If you have questions, feedback, or requests regarding this Privacy Policy or your data, please contact our data compliance team:

NeuPos Platform Administration

Email: admin@restpo.com

Phone: +8801850211813