Privacy Policy

Welcome to Qrvo ("we", "our", or "us"), operated under the laws of Pakistan. Qrvo is a modern SaaS platform that enables restaurant owners, staff, and diners to interact seamlessly through contactless QR-code menus, real-time table ordering, kitchen display systems, and automated billing.

This Privacy Policy describes how Qrvo collects, uses, processes, stores, and protects personal and transactional information when you visit our website at https://qrvo.online, use our dashboard, scan QR codes at partner restaurants, or subscribe to our services.

By accessing or using Qrvo, you acknowledge that you have read, understood, and agree to the data collection and processing practices described in this policy.

We collect only the minimum information necessary to deliver, secure, and improve our restaurant management and digital ordering services. The data collected depends on how you interact with Qrvo:

Qrvo utilizes Safepay (Safepay Payments (Pvt) Ltd) as our authorized third-party payment gateway provider for processing subscription fees.

We use the data we collect solely for lawful, legitimate business purposes, including:

• ⚡ Service Fulfillment Routing orders in real-time from customer tables to restaurant kitchen displays and cashier terminals.
• 🔒 Anti-Abuse & Order Verification Verifying diner presence via table session tokens, waiter approvals, and optional Wi-Fi subnet checks.
• 📊 Business Analytics Providing restaurant owners with operational insights such as popular dishes, peak hours, and order volume.
• 📩 Account Communications Notifying owners about subscription renewal dates, trial status, system updates, and customer support inquiries.

Qrvo does not sell, rent, or trade your personal or business data to advertising networks or third-party brokers under any circumstances.

We share information only with trusted service partners strictly necessary to run the platform:

We employ robust technical and organizational security controls to protect your data:

• Multi-Tenant Scoping: All database queries are strictly scoped by restaurant_id to ensure one restaurant cannot access another restaurant's orders, revenue data, or customer records.
• Encryption in Transit: All data transmitted between your browser, restaurant terminals, and Qrvo servers is protected using TLS 1.3 encryption (HTTPS/WSS).
• Role-Based Access Control (RBAC): Restaurant accounts differentiate between Owner, Cashier, Floor Staff, and Kitchen roles to restrict administrative operations.
• Ephemeral Customer Sessions: Diner sessions at tables automatically expire when bills are settled or sessions are terminated.

Qrvo uses strictly essential cookies and local storage tokens necessary for the operation of the service:

• Session Cookies: Maintain authenticated staff/owner sessions and secure CSRF protection.
• Table Tokens: Maintain the diner's active cart and ordering session while connected to a specific restaurant table.
• Theme Preferences: Store your preference for dark or light mode.

We do not use invasive cross-site tracking cookies or third-party behavioral advertising cookies.

Restaurant owners and staff members may review, update, or request deletion of their account records at any time.

• Access & Correction: You can modify your menu, restaurant details, and staff assignments directly from the Qrvo Dashboard.
• Account Deletion: You may request full account and restaurant data deletion by contacting support.
• Data Retention: Order history and sales receipts are retained for your restaurant's accounting and reporting needs until you close your account or request data purging.

We may periodically update this Privacy Policy to reflect enhancements in our platform, new features, or evolving regulatory requirements. Whenever significant changes occur, we will update the "Effective Date" at the top of this page and post a prominent notice on our website or dashboard.