Privacy policy
The short version: your restaurant's operating data lives on your own hardware, inside your building. What reaches us is only what has to, your account, your license, and whatever you choose to switch on the optional cloud mirror for. We never sell personal data.
- Your orders, menu, stock and customer records sit on your own machines.
- They only reach our servers if you enable the optional cloud mirror.
- We never sell your data and we don't use your business data to advertise anything.
- You can export everything, at any time, in open formats.
1. Where your data lives
SureTill is offline-first, and that has a direct privacy consequence: the working database for your restaurant, orders, menu, recipes, stock movements, customer accounts, khata balances, staff actions, is held on the local server inside your premises. The backend runs on that local server, so your data does not need to travel anywhere for the software to function.
Three deployment choices determine what, if anything, leaves the building:
Nothing operational leaves your building. We hold only your account and license record.
A copy of your operational data is replicated to our servers for the multi-branch dashboard, off-site backup and remote reporting. You choose this; it can be switched off.
2. What we collect
Account and billing information. Your business name, contact name, phone number, email, address, and tax registration details where required for invoicing. Payment records, we do not store full card details.
License and device information. Your license key, plan, seat count, and for each activated terminal a machine identifier, platform, software version and last check-in time. This is how seat limits and activation work.
Operational data, if you enable the cloud mirror. Sales, orders, inventory movements, customer records and reports, replicated from your local server. If the mirror is off, we do not hold this.
Diagnostics you choose to send. Log bundles sent from a terminal when you ask for support. These may contain operational detail relevant to the fault; we use them only to fix it.
Website usage. Standard server logs and basic analytics on suretill.com, pages viewed, approximate region, referring source. We do not run advertising trackers.
3. How we use it
To provide the software and your license; to activate and manage terminal seats; to bill you and send renewal reminders; to provide support and diagnose faults; to operate the cloud mirror, dashboard and backups where you have enabled them; and to meet our own legal and tax obligations.
We do not sell your data. We do not share your business data with other customers. We do not use your operational data to build advertising profiles, and we do not train external models on it.
4. Who we share it with
A short list, and only what each needs: our hosting and backup provider, for the cloud mirror; our payment and messaging providers, for invoices and WhatsApp notifications; and professional advisers or authorities where we are legally required to disclose.
If we ever change providers in a way that affects where your data is held, we will tell account holders before it happens.
5. How long we keep it
Account, license and invoice records are kept for as long as you are a customer, and afterwards for the period our own tax and accounting obligations require under Pakistani law. Mirrored operational data is kept while your subscription is active; on cancellation we retain it for a grace window so you can export it, then delete it on request or at the end of that window. Diagnostic bundles are deleted once the issue is closed.
Suspension is not deletion. If a license is suspended for non-payment, your data is retained and restored intact when the account is reinstated.
6. Your rights
You can ask us for a copy of the data we hold about your account, ask us to correct it, ask us to delete it where we are not required to keep it, and request a full export of your operational data at any time, including if you are leaving. Exports are provided in open formats you can load into another system.
Note that you are the controller of your own customers' data, the diners whose phone numbers and khata balances sit in your system. If one of them asks you to delete their record, you can do that yourself in the software; we do not need to be involved.
7. Security
Access to the software is controlled by user accounts, roles and permissions, with two-factor authentication available. Every administrative action is written to an audit log. Cloud-mirrored data is encrypted in transit and at rest, and backups run continuously with point-in-time recovery.
The parts of your security we cannot control are the ones inside your restaurant: who has a terminal login, who knows the manager PIN, and who can reach your local server. We will help you set roles up sensibly during onboarding.
8. Contact us
Questions about this policy, or a request about your data: contact us, email support@suretill.com, call 0332-7685715, or message us on WhatsApp. We are based in Lahore, Pakistan.
If we make a material change to this policy, we will notify account holders and update the effective date above.
This page is provided for general information and is not legal advice. Our data-handling practices, and this policy, may be updated from time to time; the current version always lives here with its last-updated date. If you operate under a specific regulatory regime, please confirm your own obligations independently.