Privacy Policy

This policy covers both, and they are treated very differently.

Venues (our customers)

A restaurant or hotel that subscribes to GuestSide. We hold an account for each member of their staff. They are our customer, and we are the data controller for their account data.

Guests (their customers)

Someone who taps a tag at a table or in a room. A guest never creates an account, never signs in and never gives us a name. For anything a guest does, the venue is the controller and we are the data processor acting on its instructions.

• Name, email address and role of each staff account
• A password, stored only as a bcrypt hash — never in readable form
• The venue’s own business details: trading name, address, timezone, tax and service-charge rates
• Content the venue uploads: menu items, prices, photographs, offers and service catalogues
• Ordinary server logs — IP address, timestamp, and the page or endpoint requested

Deliberately close to nothing. A guest is never asked for a name, an email address or a phone number, and there is no guest account to create.

• The order or request itself — the items, any note typed by the guest, and the table or room it came from
• An unguessable tracking token stored on the phone that raised the order, so that phone can follow its own order and no other. It is not linked to an identity, and the next guest in the room cannot see the previous guest’s activity
• Feedback and ratings, stored without anything that identifies who left them
• Ordinary server logs, as above

We do not use advertising trackers, we do not build guest profiles, and we do not sell or share guest data with anyone.

Two things get special handling because getting them wrong would be serious.

Wi-Fi credentials are never written into the page. The page a guest receives says only whether a network exists. The password is returned by a separate request, after the room and its PIN have been checked.

Stay PINs are a four-digit code a hotel may issue per room at check-in. They gate guest actions and the Wi-Fi reveal. Wrong guesses are rate-limited per room and per device. Issuing a new PIN locks the previous guest out immediately without changing the tag.

GuestSide does not process card payments for guests. Orders are settled at the table, on delivery, or charged to a hotel room folio by the venue’s own staff. We record only the method chosen and whether it was marked paid. No card number ever reaches our systems.

Subscription fees paid by venues are handled by our payment provider; we keep the transaction reference and amount, not the instrument.

• Orders and service requests — retained for the venue while its subscription is active, so it can reconcile its own books
• Guest tracking tokens — held on the guest’s own device and expire with the stay or the visit
• Server logs — 30 days
• Staff accounts — until the venue deletes them or 60 days after the subscription ends, whichever comes first

A venue can delete any staff account from Admin → Team at any time, which revokes that person’s access immediately.

To delete an entire venue workspace and everything in it, email [email protected] from the address on the owner account, or call +91 88999 21113. We action it within 30 days and confirm in writing when it is done. Backups containing the data are overwritten on their own cycle within 90 days.

Because guests are never identified, there is no guest record to look up or erase — which is the point of the design.

Under India’s Digital Personal Data Protection Act, 2023, you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to erase it, and withdraw a consent you previously gave. Write to [email protected].

If you are a guest and want something you typed into an order removed, ask the venue — it is their record, and we will act on their instruction.

• Every connection is HTTPS. Session cookies are Secure and httpOnly
• Passwords are bcrypt-hashed, never stored or logged in readable form
• Each venue’s data is pinned to its own tenant on every query; one venue cannot read another’s
• Table and room links carry 128-bit random tokens, so a link cannot be edited into another table, room or venue
• Admin sessions are re-validated against the database on every request, so a disabled account loses access at once
• Uploads are type- and size-checked and served with X-Content-Type-Options: nosniff

TK-TechKnow LLC, City Center Plaza, Third Floor, Karan Nagar, Srinagar, Jammu & Kashmir 190010, India. Email [email protected], telephone +91 88999 21113.