Privacy Policy

1. Information we collect

We collect the following information.

• Information you enter in the demo request form: name, email address, phone number (optional), restaurant name, restaurant address, and your message
• Information provided once you become a customer: contact details, store information, and billing details. Card numbers are handled directly by Stripe and are never stored on Rasara servers
• Information collected automatically when you use the website: pages viewed, clicks and other usage events, browser and device details, IP address and the approximate location derived from it, access logs, and error reports
• The IP address and browser signals processed by Cloudflare Turnstile during the anti-spam security check

2. How we use it

• Responding to demo requests and scheduling demos
• Providing, operating, and supporting the service, including incident response
• Billing and collecting subscription fees
• Analyzing usage to improve the website and the service
• Preventing spam and abuse, and maintaining security
• Meeting legal obligations such as tax and accounting recordkeeping

3. Cookies and analytics

The website uses cookies and similar storage for the following purposes.

You can block or delete cookies in your browser settings. If you do, preferences such as your language selection may not persist.

• Language cookie: remembers whether you chose Korean or English
• Analytics cookie (PostHog): identifies your browser with an anonymous identifier and records page navigation, button clicks, and errors. If you submit the demo request form, that submission is recorded using your email address as the identifier

4. Service providers and disclosure

We do not sell personal information. We use the following providers to operate the service, and each of them may process information only for the purpose we engaged them for.

• Vercel — website and API hosting, access logs
• Supabase — service database and file storage
• Stripe — subscription payment processing and invoicing
• Resend — delivery of demo request notification email
• Cloudflare — bot and spam prevention
• PostHog — website usage analytics and error reporting
• Twilio — SMS verification for restaurant membership phone numbers
• Anthropic — AI features such as menu review and recommendations. Only menu and operational data is sent for this purpose; no guest personal information is sent

5. Legally required disclosure

We may disclose information where required by a warrant, subpoena, or other lawful demand, limited to what the demand requires. We object to demands we consider overbroad.

6. Storage outside Canada

Some of the providers above store and process information outside Canada, primarily in the United States. Law enforcement authorities in those countries may seek access to that information under the laws that apply there. By using Rasara you consent to this transfer.

7. How long we keep it

• Demo request submissions: 24 months from our last contact with you
• Contract, payment, and tax records: for the period Canadian tax law requires us to retain them, generally six years
• Service data: for the term of your subscription, then as described under “Data after cancellation” below
• Website analytics data: 12 months from collection

8. Data after cancellation

If you cancel your subscription, your store data is retained for 30 days from the cancellation date. Email hello@rasara.ca within that window and we will export it for you. After 30 days it is deleted, including from backups, except for accounting records we are legally required to keep.

9. Your rights

You have the following rights regarding your personal information.

Email hello@rasara.ca and we will verify your identity and respond, normally within 30 days. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.

• Request access to the personal information we hold about you
• Request correction of information that is inaccurate
• Request deletion
• Withdraw your consent, noting that withdrawing consent for information the service requires may end your ability to use it
• Ask questions or raise concerns about how we handle your information

10. Our role for restaurant guest information

For order, reservation, and membership information that a restaurant processes using Rasara, we act as a service provider on that restaurant's behalf. The restaurant remains responsible for that information.

If you are a guest of a restaurant and want to access or delete your information, please contact that restaurant first. We act on the restaurant's instructions.

11. Security

We apply reasonable technical and organizational safeguards, including encryption in transit, least-privilege access, and authorization checks on authenticated requests. No system can be completely secure, and we do not guarantee absolute security.

12. Children

Rasara is sold to restaurant businesses and we do not knowingly collect personal information from children.

13. Changes to this policy

If this policy changes we will post the new version on this page and update the date at the top. We will email active customers in advance of changes that materially affect their rights.

14. Contact

For any question about how we handle personal information, contact us at:

Rasara Technologies Inc. 5785 Yonge Street, North York, Ontario, Canada hello@rasara.ca