Privacy Policy

DashDine is a product of Arooj Trading and Tech Solutions, a company registered in the State of Qatar under Commercial Registration No. 232156, which is the data controller for the personal data described in this policy. The platform is accessible at dashdinemenu.com and through our APIs.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

Account information such as name, email address, hashed password, restaurant name, and billing details.

Menu data such as item names, descriptions, photos, prices, and modifiers you upload.

Payment information is processed by our payment provider. We do not store raw card numbers.

Support messages and automatically collected usage, device, IP, and cookie data.

When customers or staff place orders through DashDine, we collect order details such as items, quantities, service type, table or location, and optional contact details.

We use information to provide, operate, secure, and improve the Service; process payments; send service notifications; respond to support requests; prevent fraud; and comply with legal obligations.

We do not sell your data. We do not use your menu or order data to train AI models or advertise to your customers.

Data is stored in PostgreSQL databases with Row-Level Security so each restaurant account is isolated.

Connections are encrypted in transit and data is protected with access controls, backups, and operational monitoring.

We share data only with essential service providers such as database and authentication providers, hosting providers, payment processors, transactional email providers, website analytics (Google Analytics), advertising measurement (Google Ads), and product analytics for signed-in restaurant teams (PostHog).

If you accept measurement cookies and create a DashDine account, Google Ads may receive a one-way hashed (SHA-256) form of the email address you sign up with, used only to confirm that the signup came from one of our ads (enhanced conversions). The hash cannot be read back as your email address, and it is not used to show you personalized ads.

We may disclose information when required by law and will notify you where legally permitted.

Account data is retained while your account is active. On deletion, personal data is removed within a reasonable period unless retention is required by law.

Billing records may be retained for legal and tax compliance. Order data may be anonymized for operational reporting.

Your data is hosted with our cloud providers — Supabase (database and authentication) and AWS (application hosting, in the Middle East region). Some processing takes place outside Qatar, including website analytics and advertising measurement (Google) and product analytics (PostHog). Where data is transferred across borders, we rely on appropriate safeguards.

Depending on your jurisdiction, you may have the right to access, correct, delete, export, restrict, or object to processing of your personal data.

To exercise a privacy right, email support@dashdinemenu.com.

The Service is not directed to children under 16. If you believe a child has provided us data, contact us and we will delete it promptly.

We will notify you of material changes via email, in-app notice, or banner before the change takes effect where required.

For privacy questions, email support@dashdinemenu.com.

We retain an account’s first acquisition touch, including campaign source, medium, name, content and term, referrer domain, landing-page path, and visit and signup times. This acquisition record does not include an IP address, user agent, or arbitrary query parameters. A Google Ads click ID (GCLID) is stored only after consent.

We record business-significant product events such as restaurant, branch and menu setup, storefront publication, QR generation, subscription milestones, and first-order creation and completion. These records help us understand onboarding, activation, and support needs and are not intended to contain restaurant-customer personal data.

To understand how restaurant teams use DashDine, we use PostHog for product analytics in the admin portal, onboarding and the staff tools only. We send which pages are opened and which controls are used, with the internal account ID, restaurant, role and plan. We do not send names, email addresses, phone numbers or on-screen text, we do not record sessions, and we set no cookies for these analytics. PostHog does not run on our public website, restaurant menus or guest devices.

To show restaurant owners how guests use their menus, we store daily counts only in our own database: menu views per branch, and how often each dish was opened and added to a cart. No visitor identifier, IP address, device data or cookie is stored with them, and they are not shared with any third party.