Privacy Policy

Introduction

This Privacy Policy describes how Chahiya ("we," "us," or "our"), operated by an independent software developer trading as Chahiya, collects, uses, and protects personal information when you visit our website at chahiya.com, access our restaurant management dashboard at app.chahiya.com, or use our digital customer ordering web applications and progressive web apps (Chahiya Customer PWA). We are committed to protecting your privacy and ensuring transparency about how your data is handled.

Information We Collect

We collect information necessary to provide, secure, and improve our services across both our restaurant management tools and customer ordering applications:

• Restaurant Operators (Dashboard): When restaurant owners or staff register, we collect name, email address, password hash, business/restaurant name, city, country, contact phone number, and menu/table configurations.
• Restaurant Staff & Personnel: For managers, servers, and cashiers, we collect full name, email address, contact phone number, assigned staff roles, hashed PIN credentials, and terminal pairing records.
• Delivery Drivers (Chahiya Driver App): When couriers register or accept a tenant invitation, we collect their full name, phone number, email address, password hash, assigned restaurant memberships, active shift timestamps, and cash-on-delivery settlement logs.
• Precise Geolocation & Real-Time Telemetry: When a driver is on an active shift or handling deliveries within the Chahiya Driver mobile application, we collect high-accuracy foreground and background GPS coordinates, heading, speed, and device telemetry. This data is collected strictly while on duty to facilitate dispatch and live order tracking.
• Dining Customers & Guests (Customer PWA): When diners browse menus, place orders, or create an account on a restaurant's ordering PWA, we collect contact details (name, email address, phone number for order updates), delivery address and instructions (for delivery orders), and order history.
• Google User Data (Google OAuth for Dashboard & Customer PWA): If you choose to sign in using Google-either as a restaurant operator on the Chahiya Dashboard or as a diner on the Chahiya Customer PWA-we access your basic Google profile data (specifically your email address, full name, Google account ID, and profile picture). We use this data solely to authenticate your identity and provide you with seamless account and order tracking.
• Store & Tenant Content: Menu items, categories, prices, photographs, modifier groups, dining table configurations, and staff assignments configured within the dashboard.
• Contact & Support Submissions: Inquiries submitted via our contact forms or direct emails to hello@chahiya.com.
• Anonymous Analytics: Cookieless, privacy-preserving aggregated website usage statistics collected via Cloudflare Web Analytics. It does not collect personal data, does not use cookies, and does not track individual users across websites.

Google API Services User Data Policy Compliance

Chahiya's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Purpose: Information received through Google APIs is used solely to authenticate your identity-allowing restaurant operators to access their store management dashboard and diners to quickly sign in and track their food orders on the Customer PWA-without requiring manual password creation.
• No Advertising & No Sale of Data: We never sell your Google user data to third parties, nor do we transfer it to data brokers or use it for personalized advertising, retargeting, or profiling.
• No AI Training: Google user data is not used to train generalized artificial intelligence or machine learning models.
• Revoking Access & Data Deletion: Both restaurant operators and dining customers can revoke Chahiya's access to their Google Account at any time via Google Account Security Settings (https://myaccount.google.com/permissions). You may also request the complete deletion of your account and all associated Google user data by contacting us at hello@chahiya.com or deleting your profile directly from your account settings.

Customer Data and Restaurant Operations

When a customer places an order with an individual restaurant via the Chahiya Customer PWA, that specific restaurant receives the customer's order details (name, delivery address, phone number, and items ordered) strictly to prepare and fulfill the food order. Chahiya does not sell, broker, or aggregate customer personal data across restaurants for marketing or advertising.

Live Delivery Tracking & Data Roles: During active delivery orders, the assigned driver's real-time GPS location is transmitted to the restaurant's dispatch dashboard and shared live with the customer on their order tracking screen until delivery completion. With respect to customer order records, guest contact information, and staff operational records processed on behalf of restaurants, Chahiya acts as a Data Processor, and the respective Restaurant Tenant is the independent Data Controller. For restaurant tenant subscriptions and global driver accounts, Chahiya acts as a Data Controller.

Payment Processing & Merchant of Record

To ensure maximum payment security and global tax compliance, Chahiya does not store, process, or transmit sensitive payment card details (such as credit card numbers or CVV codes) on its servers.

• International Subscriptions (Paddle): Our order process for international subscriptions is conducted by our online reseller and Merchant of Record, Paddle.com (Paddle.com Market Limited / Paddle Payments Limited). Paddle handles billing, tax collection, customer payment support, and returns. Paddle processes payment data in compliance with PCI-DSS Level 1 standards.
• Domestic Subscriptions in Algeria (Chargily): Domestic payments in Algerian Dinars (DZD) via Edahabia or CIB cards are securely processed through Chargily Pay V2, a licensed fintech payment gateway.

How We Use Your Information

We use the information we collect for the following lawful purposes:

• To provide, operate, and maintain your online ordering website, POS, and restaurant dashboard.
• To authenticate your identity and secure your account credentials.
• To communicate with you regarding product updates, security alerts, and administrative messages.
• To respond to your customer support inquiries and provide technical assistance.
• To comply with legal, tax, and regulatory obligations.

Data Sharing & Third-Party Service Providers

We do not sell, rent, or trade your personal information. We only share data with trusted infrastructure providers necessary to operate our SaaS platform:

• Cloudflare: Content delivery network (CDN), DDoS mitigation, and SSL security.
• Google Cloud Platform: Secure cloud infrastructure and database hosting.
• Paddle.com: Merchant of Record for international subscription billing and tax remittance.
• Chargily Pay: Payment gateway for domestic Algerian subscriptions.
• Resend: Transactional email delivery for account verifications and order notifications.
• Cloudflare Web Analytics: Cookieless, GDPR-compliant privacy analytics.

Business Transfers: In the event of a corporate incorporation, reorganization, restructuring, merger, sale of assets, or transition of service to a successor entity, user information and store data will be transferred as part of that transaction under the same privacy protections and commitments set forth in this Policy.

Cookies and Tracking

The Chahiya marketing website does not use tracking cookies, advertising pixels, or third-party behavioral trackers. Essential local cookies or session tokens are used exclusively for language preference selection and secure authenticated dashboard sessions.

Data Retention & Account Deletion

We retain your account and store data for as long as your account remains active. If you cancel your subscription or request account deletion, your personal data and restaurant catalogs will be permanently deleted from our primary databases within 30 days, except where retention is required by applicable accounting or tax laws. To request account deletion, email hello@chahiya.com.

Your Rights (GDPR & CCPA)

Regardless of your location, you have the right to access, rectify, port, or request the deletion of your personal data. European Union users enjoy rights under the GDPR, and California residents enjoy rights under the CCPA. To exercise any of these rights, please email us at hello@chahiya.com. We respond to all verified requests within 30 days.

Contact Us

If you have any questions about this Privacy Policy, your personal data, or our Google API compliance, please contact us by email at hello@chahiya.com (or support@chahiya.com).