Privacy Policy

This Privacy Policy explains how Culinary Velocity ("Culinary Velocity", "we", "us") collects, uses, discloses, and protects information when a restaurant, café, or cloud kitchen ("tenant") and its staff use our restaurant management software, including order management, kitchen dashboard, billing and payments, sales reporting, asset management, staff management, and Restaurant Intelligence.

By creating an account or using the product, you agree to the collection and use of information as described here. If you don't agree, please don't use the service.

Account & identity information: name, email address, phone number, password (stored hashed, never in plain text), role, and, if you sign in with Google, the profile information Google shares with us.

Restaurant & tenant data: restaurant name, branch details, menu items, categories, tables, orders, staff records, and other operational data your restaurant creates while using the product.

Billing & subscription information: billing name, phone, email, address, chosen plan and payment method, and payment-confirmation details you send us (for example, over WhatsApp) to verify a subscription payment. We do not process card numbers or bank credentials directly. Payments are confirmed manually against the QR codes we provide.

Usage & device data: log data, IP address, browser/device type, and pages visited, collected automatically to keep the service secure and reliable.

Cookies: httpOnly session cookies that keep you signed in and protect against cross-site request forgery. We don't use third-party advertising or tracking cookies.

To provide, operate, and maintain the product: order flow, kitchen display, billing, reporting, staff and asset management.

To authenticate you, keep your session secure, and enforce tenant isolation so one restaurant never sees another restaurant's data.

To verify and process subscription upgrades and communicate about your billing status.

To send transactional email: signup verification codes, password resets, and account notices.

To generate the Restaurant Intelligence insights your restaurant requests, and to monitor, debug, and improve the product.

Restaurant Intelligence analyses your restaurant's own operational data (sales, orders, menu performance) to produce business insights, using a third-party language-model provider to generate the analysis. We send only the operational data needed to answer a given query, not your customers' or staff's personal contact details, and that data is not used by us or our AI provider to train models for other customers.

Restaurant Intelligence is designed to support your decisions, not make them for you. Insights are recommendations, and you remain responsible for business decisions.

We rely on a small number of trusted providers to run the product: a cloud database provider (MongoDB) to store your data, Cloudinary to host images (such as menu photos), an email provider to send transactional mail, Google to support sign-in, and an AI provider (via OpenRouter) to power Restaurant Intelligence. Each provider only receives the data necessary to perform its function, and none are permitted to sell your data.

We do not sell your personal information or your restaurant's data to anyone.

We share data only: with the third-party service providers described above; with your own staff, according to the role-based permissions your restaurant configures; when required by law, court order, or to protect the rights, safety, or property of Culinary Velocity, our users, or the public; or with your consent.

We retain your account and restaurant data for as long as your account is active. If you close your account, we delete or anonymize personal data within a reasonable period, except where we're required to retain records for legal, tax, or dispute-resolution purposes.

Passwords are hashed, authentication uses httpOnly cookies with short-lived access tokens, and every business resource is scoped to its owning restaurant so tenants cannot access one another's data. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

We handle personal information in line with Nepal's Privacy Act, 2075 (2018). You can access, correct, or request deletion of your personal information at any time by contacting us. Restaurant owners can manage their staff's access directly from Settings, and can export or remove operational data as needed.

Culinary Velocity is a business tool for restaurant owners and staff and is not directed at children. We do not knowingly collect personal information from anyone under 18.

Culinary Velocity is built primarily for restaurants in Nepal, and pricing is quoted in Nepali rupees. Our infrastructure providers may store or process data outside Nepal; regardless of where it's processed, we apply the same protections described in this policy.

We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date below and, where appropriate, notify tenant owners directly.

Questions about this policy or your data? Email us at support@culinaryvelocity.com and we'll respond within one business day.