Privacy Policy

The short version

We collect what the service needs to run: your account, your restaurant's details and your team.
Guest data your restaurant enters belongs to your restaurant. We process it only on your instructions.
We never sell data, use it for ads, or use it to train AI models.
Some providers, such as email and AI, process data outside India. We tell you which ones.
You can see, correct or delete your data by writing to us. We reply within 30 days.

This summary helps you read the policy; the full text below is what applies.

1.Who we are and what this covers

AICNI Restro is a restaurant operating system run by ALL4YOU INTERNATIONAL PRIVATE LIMITED ("we", "us"), developed by AICNI (Artificial Intelligence Community Network India). This policy covers our website (https://aicnirestro.com), the command center your team signs in to, the QR menu your guests open, and the phone and WhatsApp agents.

We handle personal data in two different roles, and the rules differ for each:

As a Data Fiduciary for data about you and your team: your account, your restaurant's details, sign-ins, billing and support. This policy explains how we do that.
As a Data Processor for data about your guests that your restaurant puts into the service: bookings, orders, phone numbers, call transcripts, WhatsApp chats and reviews. Your restaurant decides why that data is collected; we only process it on your instructions. See our Data Processing terms.

We follow the Digital Personal Data Protection Act, 2023 (DPDP Act), the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000.

2.What we collect

What	Examples	Where it comes from
Your account	Name, email address, password (stored only as a one-way hash), Google profile name and photo if you choose Google sign-in	You
Your restaurant	Business name, address, GSTIN, FSSAI number, logo, menu, prices, tables, opening hours	You and your team
Your team	Names, emails, roles, which screens each person can open, shifts, clock-in times, tips	You and your team
Activity and security logs	Sign-in times, IP address, browser type, and an audit log of sensitive actions such as discounts and cancelled bills	Our servers, automatically
Demo and contact requests	Name, phone number, restaurant name, city, and your message	You, through our forms
Billing	Your plan, invoices and payment status. We never see or store full card numbers.	You and our payment partner

Guest data we process for your restaurant

When your restaurant uses AICNI Restro, guests' names, phone numbers, party sizes, orders, notes your staff add (such as allergies or birthdays), call transcripts and summaries, WhatsApp messages and reviews are stored in your account. We do not store phone call audio: it is turned into text while the call happens. This data belongs to your restaurant and is covered by our Data Processing terms.

3.Why we use it

To run the service you signed up for: sign you in, show your floor and orders, print bills, and run the agents you switch on.
To keep accounts safe: send sign-in codes, spot unusual activity, and keep an audit log your owners can read.
To bill you and issue GST invoices.
To answer support requests and demo requests you send us.
To improve the product using counts and trends, never by reading individual restaurants' or guests' records unless you ask us to help with them.
To meet our legal duties, for example under tax law or a lawful order from an authority.

What we never do: we do not sell personal data, we do not use it for advertising, and we do not use your restaurant's or your guests' data to train AI models.

5.AI agents, calls and chats

When you switch on the phone or WhatsApp agent:

The guest's speech or message is sent to our speech and AI providers to understand it and reply. They process it on our behalf and only for that purpose.
A transcript and a short summary of each call, and the WhatsApp conversation, are saved in your account so your team can check what was booked or ordered.
The agents read details back and ask the guest to confirm before anything is booked, and hand over to your staff when asked.

Your restaurant should tell guests that calls are answered by an automated assistant. The agent's greeting can say this, and you can change it on the Voice Agent screen.

7.Where your data is stored

Our servers and database run on Amazon Web Services (Lightsail), India (Mumbai region). Some providers process data outside India, for example email delivery and AI in the United States. The DPDP Act allows this except to countries the Government of India restricts, and we will stop any transfer to a restricted country.

8.How long we keep it

Data	How long
Your account and restaurant data	While your account is open. After you close it, we delete it within 90 days, unless you ask for an export first.
Invoices and billing records	As long as Indian tax law requires (currently about six years).
Security and activity logs	At least one year, as the DPDP Rules require, then deleted.
Backups	Copied over automatically within 7 days of deletion.
Demo and contact requests	Up to 12 months after our last conversation, then deleted.

If an account has been inactive for a long time, we will email you at least 48 hours before deleting it, so you can sign in to keep it.

9.Your rights

Under the DPDP Act you can ask us to:

tell you what personal data we hold about you and how we use it, and who we have shared it with;
correct, complete or update it;
erase it, unless we have to keep it by law;
nominate someone to act for you if you die or can't act yourself;
hear and resolve a complaint (see Grievance Redressal).

Write to info@aicni.in from your account's email address. We reply within 30 days. Most account details can also be changed directly in the command center.

Guests of a restaurant should contact that restaurant first, as it decides how their data is used. If you write to us, we will pass your request to the restaurant and help it answer.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

10.Children

AICNI Restro is a business tool for adults. You must be 18 or older to create an account, and we do not knowingly collect children's data for ourselves. If a restaurant records a child's details, for example a booking for a birthday, it is responsible for having a parent's or guardian's consent where the law requires it.

11.How we protect it

Connections are encrypted with HTTPS, passwords are stored only as salted hashes, each person sees only the screens their role allows, sensitive actions are logged, and the database is backed up every day. Read more on our Security page.

If a personal data breach happens, we will inform affected restaurants without undue delay and within 72 hours of becoming aware of it, tell affected people what happened and what to do, and report it to the Data Protection Board as the DPDP Rules require.

12.Cookies

We use only the cookies needed to keep you signed in and secure, and we keep a few preferences in your browser. We use no advertising or tracking cookies. See Cookies and Storage.

13.Changes to this policy

If we make a significant change, we will email account owners and show a notice in the command center at least 15 days before it takes effect. The date at the top shows when this version started.

14.Contact and Grievance Officer

Fathahur Rahman Thangal
President & National Director; Grievance Officer and Data Protection contact
ALL4YOU INTERNATIONAL PRIVATE LIMITED
Aluva, Ernakulam, Kerala, India
Email: info@aicni.in

For privacy questions write to info@aicni.in. How we handle complaints is on the Grievance Redressal page.

Questions about this policy?

Write to info@aicni.in or see how to raise a complaint.