Last updated: November 10, 2026
1. Who is responsible for your data
Caelora Technologies, Turkey is the data controller for personal data processed through RestaurantOS. You can reach us at restaurantos@caeloratech.com.
2. What personal data we collect
We may collect and process the following categories of personal data:
- Identity and contact data: name, email address, phone number, and the restaurant or business you represent.
- Account data: login credentials, profile information, and user roles within a restaurant account.
- Service data: menus, reservations, orders, customer records, staff records, and other information you enter into RestaurantOS.
- Communication data: support messages, feedback, and marketing preferences.
- Usage and technical data: IP address, browser type, device identifiers, pages visited, and error/performance logs.
3. How we use personal data
We use personal data to:
- provide, operate and maintain the RestaurantOS platform;
- manage accounts, authentication, and access control;
- process subscriptions, payments, and billing through our Merchant of Record;
- provide customer support and respond to inquiries;
- improve the service, fix issues, and ensure security and fraud prevention;
- send service-related messages and, where permitted, marketing communications.
4. Legal basis for processing
We rely on one or more of the following legal bases:
- Performance of a contract — to provide RestaurantOS and process your subscription.
- Legitimate interests — to maintain security, prevent fraud, and improve the service.
- Consent — for marketing communications and non-essential cookies, where required.
- Legal obligation — to comply with applicable laws or regulator requests.
5. Who we share data with
We only share personal data when necessary and with appropriate safeguards:
- Service providers: hosting, analytics, error tracking, email delivery, and support tooling.
- Merchant of Record: Paddle acts as our online reseller to process payments, manage subscriptions, handle tax compliance, and provide invoicing. You can read Paddle's privacy practices in their policies.
- Professional advisers: legal, accounting, or insurance advisers when required.
- Authorities: law enforcement, regulators, or courts where we are legally required to disclose.
6. International transfers
Personal data may be transferred outside your country of residence, including to Turkey and other countries that may not provide the same level of protection. Where required, we use appropriate safeguards such as standard contractual clauses or adequacy decisions.
7. Data retention
We keep personal data for as long as necessary to provide the service, fulfil legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymise it.
8. Your rights
Depending on your location, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure in certain circumstances;
- request restriction of processing or object to processing;
- request a copy of your data in a portable format;
- withdraw consent at any time for consent-based processing;
- complain to a supervisory authority in your country.
To exercise any of these rights, contact us at restaurantos@caeloratech.com.
9. Security
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular security reviews. No system is completely secure, and we encourage you to use strong passwords and keep your credentials safe.
10. Cookies and tracking
We use essential cookies to operate RestaurantOS and may use analytics or marketing cookies with your consent where required. You can manage cookie preferences through your browser or any consent banner we provide.
11. Changes to this notice
We may update this Privacy Notice from time to time. The latest version will be posted on this page with an updated last updated date.
12. Contact us
For privacy questions or requests, email us at restaurantos@caeloratech.com.