Privacy Policy
Iotech POS is a point-of-sale and ordering platform used by restaurants: a register, a kitchen display, a web console for the restaurant's team, a customer ordering app and a driver app. This policy explains what information the platform handles, why, and the choices you have.
Who is responsible for your information
Each restaurant using Iotech POS decides how it uses its customers' information and is responsible for it. IoTech runs the platform and handles that information on the restaurant's behalf, only to provide the service. Questions about a specific restaurant's use of your information can go to that restaurant or to us.
Information we handle
- Customers: name, phone number, delivery addresses and map location, orders, payments status (not card numbers), loyalty points, ratings and messages you send the restaurant.
- Restaurant staff and drivers: name, email or phone number used to sign in, role, working shifts, and for drivers the live location while on shift and delivering.
- Devices: the restaurant's tablets and app versions, to keep them working and up to date.
- Payments: card and wallet payments are made on Paymob's secure page; we receive only the result (paid or not, amount, reference), never card details.
Messages through Facebook, Instagram and WhatsApp
A restaurant can connect its own Facebook Page, Instagram professional account and WhatsApp Business number to Iotech POS, using Meta's own sign-in. With the restaurant's permission, the platform then:
- receives messages customers send the restaurant on Messenger, Instagram and WhatsApp, with the sender's name or number, so the restaurant's team can see and answer them in its console;
- sends the restaurant's replies and order updates (for example a tracking link) back through the same channel;
- reads the list of Pages, Instagram accounts and WhatsApp numbers the restaurant chooses to connect.
For this the platform uses these Meta permissions: pages_show_list, pages_messaging, pages_manage_metadata, pages_read_engagement, instagram_basic, instagram_manage_messages, business_management, whatsapp_business_management and whatsapp_business_messaging. The information is used only to provide this messaging to that restaurant. It is never sold, never used for advertising, and never shared with other restaurants.
How we use information
- to take, prepare, deliver and track orders, and to process payments;
- to let the restaurant's team serve customers, including answering messages;
- to keep accounts secure, prevent misuse and fix problems;
- for the restaurant's own reports (sales, menu performance, delivery times).
Cash orders that aren't paid
When a customer orders to pay in cash or by card on delivery or at pickup and then can't pay, refuses the order or doesn't come for it, the restaurant's driver or team marks it on the order. To protect restaurants from orders that aren't paid, the platform counts these marks:
- at the restaurant: after a number of them the restaurant chooses, that customer pays online before the restaurant makes their order;
- across the platform: after a number of them at any restaurants using Iotech POS (3 unless we change it), the customer pays online first at every restaurant on the platform. A restaurant sees only that the customer "has failed cash orders elsewhere", never which restaurant or how many;
- so that this follows the person and not just one number, we link the identities used on the same order: the mobile number, a different WhatsApp number, a confirmed email, the Jibo account and its Google, Apple or Facebook login, the Jibo app's install id on your phone (a random id the app gets when installed; reinstalling gives a new one), and a WhatsApp username given to a restaurant. We keep these only as one-way codes (hashes), not as readable emails or account ids, and use them for nothing else.
The mark lifts by itself after a period with no new problem (90 days unless the restaurant or we set another) or after a few orders paid online, and a restaurant's manager can lift it for their restaurant at any time. We do this under Egypt's Personal Data Protection Law (Law No. 151 of 2020) to prevent fraud and protect the restaurants using the platform. You can ask what we hold about you, or ask for a review if you think a mark is wrong, as described under Data deletion or by contacting us.
Sharing
We do not sell personal information. It is shared only with: the restaurant you deal with; the services the platform runs on, under their own privacy terms (Google Firebase and Google Cloud for hosting and maps, Paymob for payments, Meta for Messenger, Instagram and WhatsApp); and authorities where the law requires it.
Where it is stored and for how long
Information is stored on Google Cloud in the European Union (europe-west1). It is kept while the restaurant uses Iotech POS and as long as the restaurant needs it for its records. When a restaurant leaves the platform, its information is deleted, including its customers' orders, points and messages with it.
Your choices and rights
- Ask for a copy of your information, ask us to correct it, or ask us to delete it: see Data deletion.
- Turn off app notifications in your phone's settings.
- Disconnect a restaurant's Facebook, Instagram or WhatsApp access at any time in Meta's settings (the restaurant can also disconnect in its console).
Security
Access is protected by sign-in and role-based permissions, each restaurant sees only its own data, connections are encrypted, and secret keys are kept in a protected key store.
Children
Iotech POS is not directed at children under 13 and does not knowingly collect their information.
Changes and contact
We will post any change to this policy on this page with a new date. Contact: IoTech, support@iotechpos.com.