Legal

Privacy
Policy

Last Updated

March 18, 2026

Organization

hoslr

hoslr ("we," "our," or "us") provides a digital experience platform for restaurants, including restaurant websites, AI chatbots, QR-based menus and ordering, web-based point-of-sale(POS), e-receipts, and customer feedback tools (collectively, the "Platform" or "Services").

We are committed to protecting your personal information and being transparent about how we collect, use, and share it. This Privacy Policy applies to all users of our Platform — including restaurant owners, operators, staff, and their customers (end diners). By using our Services, you agree to the practices described in this policy.

Section 01

Information We Collect

1.1Information You Provide Directly

  • Restaurant registration detailsBusiness name, address, owner name, email, phone number, and billing information.
  • Staff account informationName, role, email, and login credentials.
  • Menu dataFood items, descriptions, prices, photos, and categories uploaded by restaurant operators.
  • Customer informationName, email, phone number, and table or order preferences submitted during QR ordering, reservation, or feedback forms.
  • Payment informationFor billing our restaurant clients, we collect card details through our PCI-DSS compliant payment processor. We do not store raw card data.

1.2Information Collected Automatically

  • Device and browser dataIP address, browser type, operating system, and device identifiers.
  • Usage dataPages viewed, features used, session duration, QR code scans, and order interactions on the Platform.
  • Log dataServer logs including timestamps, error reports, and referral URLs.
  • Cookies and trackingIP address, browser info, page interaction data and transmit it to Meta Platforms, Inc.

1.3Information from Third Parties

  • Google ServicesGoogle Sign-In, Google Analytics, Google Ads, or Google Business Profile.
  • Meta PlatformsMeta Pixel-enabled pages or Facebook/Instagram integration.
  • Payment PartnersTransaction confirmation and fraud signals from our payment gateway partners.
Section 02

How We Use Your Information

Service Provision

Creating and managing restaurant accounts, powering QR menus, POS operations, e-receipts, and processing orders.

Communication

Sending transactional emails, order confirmations, e-receipts, product updates, and support communications.

Advertising & Analytics

Measuring advertising effectiveness on Google/Meta, serving personalized ads, and using aggregated analytics.

Legal & Security

Preventing fraud, complying with laws, enforcing Terms of Service, and protecting our rights.

Section 03

Advertising Disclosures

Google Ads

We use Google Ads conversion tracking and remarketing features. You can opt out via g.co/adsettings. We comply with Google's EU User Consent Policy.

Meta Pixel

We use the Meta Pixel for retargeting and audience building. Data is processed subject to Meta's Data Policy. Manage preferences via Facebook Ad Settings.

Where required by law (GDPR/ePrivacy), we obtain explicit consent before placing advertising cookies.

4. Cookies & Tracking Technologies

Strictly Necessary
Analytics
Advertising & Retargeting
Functional

5. How We Share Your Information

We do not sell your personal information.

Service Providers

Cloud hosters, payment processors, email/SMS providers.

Restaurant Operators

Sharing order details to fulfill your requests.

Legal Requirements

To comply with law or protect rights.

Business Transfers

In event of merger or acquisition.

6. Data Retention

  • Accounts 5 Years
  • Orders 2 Years
  • Analytics 13 Months

7. Data Security

We use TLS/SSL encryption, encrypted storage, and access controls. No method is 100% secure, but we take industry-standard precautions.

8. Your Rights

Exercise your rights by contacting privacy@hoslr.com

Access

Request your data patterns, correction, or deletion.

Rectification

Request your data patterns, correction, or deletion.

Erasure

Request your data patterns, correction, or deletion.

Restriction

Request your data patterns, correction, or deletion.

Portability

Request your data patterns, correction, or deletion.

Objection

Request your data patterns, correction, or deletion.

9. Children's Privacy

Platform not directed to under-13s. We delete child data if discovered.

10. International Transfers

Operated from India. We use Standard Contractual Clauses for EEA transfers.

12. Changes to Policy

We notify 30 days prior to material changes via email or platform notice.

13. Contact Us

Reach us at privacy@hoslr.com. We respond within 30 days.