This policy explains what personal data Degh handles and why. It covers restaurant owners and staff who use Degh, and the customers who order from shops built on it. Draft for review: not legal advice.
Who is responsible
- For owner and staff accounts, Degh decides how the data is used.
- For customer orders at a shop, the shop decides how its customer data is used and Degh processes it on the shop's behalf. Each shop has its own privacy page.
What we collect
- Account: mobile number, name, email (optional), and the shops you're linked to.
- Orders: items, delivery address and location pin, notes, payment method and any payment screenshot you upload.
- Usage and security: IP address, device and browser type, login times and security events, kept to prevent fraud and abuse.
- Billing (shop owners): invoices, plan, and payment screenshots for Degh invoices.
Why we use it
- To run the service: sign you in, take and deliver orders, send order updates and one-time codes.
- To bill shops and send account notices.
- To keep the service safe: rate limits, blocking abuse and fake orders.
- We don't sell personal data and don't use customer data for our own marketing.
Who we share it with
- The shop you order from gets your order details.
- Service providers that help us run Degh: hosting (Cloudflare), SMS/WhatsApp delivery for one-time codes, and email delivery. They only process data on our instructions.
- Authorities, when the law requires it.
How long we keep it
- Order records are kept while the shop's account is open, so the shop can see its history and reports.
- Security logs are kept for up to 90 days.
- When a shop closes, its data is deleted within 90 days unless the law requires us to keep it longer.
Your choices
- Ask the shop to correct or delete your customer data, or email support@degh.app.
- Owners can export their shop's data from the admin.
Cookies
We use only the cookies needed to keep you logged in, protect forms and remember your cart and branch. No advertising cookies.
Contact
support@degh.app