Restozay is restaurant management software for restaurants in Pakistan: point of sale, online ordering, WhatsApp ordering, delivery, inventory, accounts, marketing and social media publishing. Restozay is owned and operated by Starlogics SMC Private Limited ("Star Logics", "we", "us"), Rahim Yar Khan, Punjab, Pakistan.
This policy explains what data we collect through restozay.com, the Restozay dashboard, and the online menus and websites we host for restaurants, why we collect it, who we share it with, and how you can have it deleted. Our mobile apps have their own policies: Restozay Chat, Restozay Rider and Foodzay.
1. Information we collect
Restaurant owners and staff
- Account details: name, username or email, mobile number, role and permissions. Passwords are stored only as a one-way hash.
- Business data the restaurant enters: menus, prices, orders, sales, stock, suppliers, expenses, payments, staff records and settings.
- Activity records: who created, edited or completed an order or other record, and when, so the restaurant can audit its own staff.
Restaurant customers
When you order from a restaurant that uses Restozay (through its online menu, website, WhatsApp or by phone), the restaurant records:
- your name, mobile number, delivery address and map location;
- the items you order, notes, payment method and order status;
- ratings and comments you choose to leave about an order;
- WhatsApp messages you exchange with the restaurant's WhatsApp number and, where the restaurant has turned these features on, recordings of calls to that number and replies from the restaurant's automated assistant.
The restaurant decides what it collects from its customers and how it uses it. We store and process this data on the restaurant's behalf to run its service.
Technical information
Our servers record the IP address, browser type and time of each request, and error logs. We use this to keep the service secure, prevent abuse and fix problems.
2. Connected social media accounts
Restozay's Social Media Manager lets a restaurant connect its Facebook Page, Instagram Business account and TikTok account, write a post once in the Restozay dashboard, and publish it to the accounts it chooses, immediately or at a time it schedules. A restaurant connects an account by signing in with Facebook or TikTok and approving the permissions shown on the platform's own screen.
What we receive and store
| Platform | Data | Why we need it |
|---|---|---|
| The ID, name, profile picture, category and link of each Page you choose; a Page access token for that Page; a long-lived user access token of the person who connected it; that person's Facebook user ID; the permissions granted; and token expiry dates. | To show which Page is connected, to publish the posts you create to that Page, to refresh the list of Pages you manage, to remove our access when you disconnect, and to honour removal and deletion requests that Facebook sends us. | |
| The ID, username, name and profile picture of the Instagram Business or Creator account linked to your Facebook Page. Instagram publishing uses the linked Page's access token. | To show which Instagram account is connected and to publish the photos and videos you create to it. | |
| TikTok | Your TikTok open ID, display name and avatar, an access token and refresh token, and the privacy options TikTok allows for your account. | To show which TikTok account is connected and to publish the videos you create to it with the privacy setting you choose. |
| Your posts | The caption, hashtags, photo or video you upload, the schedule, and for each platform the publishing status, the post ID and link the platform returns, and any error message. | To publish the post, show you whether it succeeded, and keep your post history. |
How we use it, and what we do not do
- We publish only posts that a restaurant user composes in Restozay and sends to publish or schedules, and only to the accounts that restaurant connected and selected for that post.
- We do not read or store your Page's or account's messages, comments, followers, or their personal data, and we do not use these permissions to run ads.
- We do not sell this data, share it with other restaurants, or use it for advertising or profiling.
- Access tokens are encrypted before they are stored in our database. They are used only by our servers to call Facebook, Instagram and TikTok, and are never shown in the dashboard.
Removing access and deleting this data
- Disconnect in Restozay: Social Media Manager → Accounts → Disconnect. The connection and its tokens are deleted immediately. Disconnecting a Facebook Page also removes the Instagram account linked to it. When the last Page is disconnected we also revoke Restozay's access on Facebook, and when a TikTok account is disconnected we revoke its token with TikTok.
- Remove Restozay on Facebook: if you remove Restozay from your Facebook account's business integrations, Facebook notifies us and we delete every token we hold for your account immediately.
- Ask Facebook to delete your data: if you send a data deletion request through Facebook, we delete your connected Facebook and Instagram accounts and their tokens from Restozay and give you a confirmation code.
- Posts already published stay on Facebook, Instagram or TikTok until you delete them there. The copy in your Restozay post history is deleted when you delete the post in Restozay.
Step-by-step instructions are on our Data Deletion page. Your use of these platforms is also covered by the Meta Privacy Policy and the TikTok Privacy Policy.
3. How we use information
- To provide the service: take and manage orders, print bills, send order updates on WhatsApp, run delivery, keep stock and accounts, and publish social posts.
- To operate the restaurant's integrations that the restaurant switches on, such as payment confirmation and tax (fiscal) reporting.
- To provide support, bill restaurants for their plan and prepaid credits, and keep the service secure.
- To fix problems and improve Restozay.
We do not sell personal data and we do not show third-party advertising.
4. Who we share it with
We share data only as needed to run the features a restaurant uses:
- The restaurant you order from, and its staff and delivery riders.
- Meta Platforms (WhatsApp Business Platform, Facebook, Instagram) and TikTok, to send WhatsApp messages and to publish posts the restaurant creates.
- Hosting and storage providers that run our servers and store uploaded images and files.
- Maps and notification providers (Google Maps, Expo and Firebase Cloud Messaging) for addresses, delivery maps and app notifications.
- AI providers (OpenAI, ElevenLabs, Cloudflare, fal.ai), only when the restaurant turns on AI chat replies, AI call answering or AI image generation, and only the content needed for that task.
- Payment and tax authorities' systems, such as the 1LINK payment network and the Punjab Revenue Authority, only when the restaurant enables those integrations.
- Authorities, when the law requires it.
5. Cookies
We use essential cookies to keep you logged in, protect forms against forgery, and remember customer details on a restaurant's online menu if you choose to save them. We do not use advertising cookies.
6. How long we keep data
We keep data while the restaurant's Restozay account is active. Order and sales records may be kept longer where the restaurant needs them for accounting and tax purposes. Connected social media tokens are kept only while the account stays connected (see section 2). A restaurant can ask us to delete its account and data at any time.
7. Security
All connections to Restozay use HTTPS. Passwords are hashed, social media access tokens are encrypted at rest, and staff see only what their role permits. No system is perfectly secure, but we work to protect your data and will act quickly if a problem is found.
8. Your choices and rights
You can ask us for a copy of your data, to correct it, or to delete it. Restaurant customers can also contact the restaurant directly, since it controls its customer records. Email us at [email protected] and we will reply within 7 days.
9. Children
Restozay is a business tool and is not directed at children under 13. We do not knowingly collect data from children.
10. Changes and contact
If we change this policy we will update the date at the top of this page. For any privacy question or deletion request, contact:
Starlogics SMC Private Limited (Restozay)
Rahim Yar Khan, Punjab, Pakistan
Email: [email protected]
WhatsApp: +92 303 3930338