Privacy Policy

1. Operator

ROVSHAN GARAYEV (Trade name: Dineos)
Personal information protection manager: ROVSHAN GARAYEV (Representative)
Contact: info@dineos.org

2. Information We Collect

• Restaurant operator account information such as name, email address, restaurant name, login credentials, and settings.
• Restaurant content such as menus, prices, images, tables, orders, reservations, customer records, and analytics data entered into the Service.
• Payment and subscription information processed through Stripe. We do not store full card numbers.
• Technical information such as IP address, device/browser data, cookies, local storage, logs, and security events.

3. Purposes of Use

• Providing, operating, maintaining, and improving the Service.
• Authentication, account management, support, billing, fraud prevention, and security.
• Sending service notices, maintenance notices, policy updates, and support communications.
• Analyzing usage and improving product quality.
• Complying with laws and responding to lawful requests.

4. Third Parties and Processors

We may use processors and service providers where necessary to provide the Service, including Stripe group companies such as Stripe Japan, Inc. and Stripe, Inc. for payment processing, Contabo GmbH for server hosting, and Netowl, Inc. for domain/email hosting. We do not sell personal information.

4-1. International Transfers

Personal data may be processed outside Japan when required for the Service. Payment data may be processed by Stripe in Japan, the United States, and other countries. Server hosting may involve infrastructure operated by Contabo GmbH in Germany or other regions. We confirm the handling conditions of these providers and take appropriate measures required by applicable personal information protection law.

5. Disclosure to Third Parties

We do not provide personal data to third parties except with consent, when required by law, when necessary for service providers under appropriate controls, or in connection with business transfer or succession.

6. Security

We take appropriate technical and organizational measures to prevent unauthorized access, loss, leakage, alteration, or misuse of personal data, considering the nature and scale of the Service.

7. Retention

• Account, contract, billing, and payment records are retained while the account is active and, after cancellation, for up to 7 years where required for accounting, tax, legal, or dispute handling purposes.
• Order, reservation, menu, table, and customer operation data are deleted or anonymized within 6 months after account deletion or service termination, unless legal, security, or dispute handling needs require longer retention.
• Support inquiries are retained for up to 3 years from the last communication.
• Security logs are retained for up to 12 months unless longer retention is necessary for investigation or legal compliance.

8. Requests

Requests for disclosure, correction, suspension of use, deletion, or other rights regarding retained personal data should be sent to info@dineos.org. We will respond in accordance with applicable law.

9. Changes

We may update this Privacy Policy when necessary. Important changes will be announced through the website or the Service.