Privacy Policy

Information we collect

Account data: when you sign in with Google (via our authentication provider), we receive identifiers such as your subject id, email address, and display name as provided by that flow.

Workspace and operational data: names, slugs, products, prices, images you upload, QR table links, orders placed through public guest pages, and membership roles you configure.

Technical data: standard server and security logs may include IP address, user agent, timestamps, and request paths as needed to operate and protect the service.

How we use information

To provide the product: authenticate you, sync your profile, store workspace content, process guest orders, and serve public menu and image URLs you choose to expose.

To improve reliability and security: debugging, abuse prevention, and compliance with law where applicable.

Storage and processors

Data is stored on infrastructure operated by us or our vendors (for example database, object storage, and serverless hosting) according to their respective terms.

Authentication may be handled by a separate identity service; only tokens and profile fields required for Doi Xiu are stored in our database.

Retention and deletion

We keep information while your account and workspaces exist. Deleting a workspace removes associated operational data according to our implementation and backups rotation.

You may request account-level assistance by contacting support through channels we publish for your organization.

Your choices

You can update display name and avatar in the app where supported. Language preference is stored with your account for the signed-in experience.

Guest ordering flows use table tokens in URLs; share QR links only with guests you intend to serve.

Changes

We may update this policy from time to time. The “Last updated” date reflects the latest revision. Continued use after changes constitutes acceptance of the updated policy.