Privacy Policy

1Who we are

Zaferra ("we", "us") is a restaurant management platform operated by Zaferr eCom. This policy explains what information we collect, why we collect it, and how we protect it.

2Information we collect

• Restaurant accounts — restaurant name, business address, owner name, email, phone number, and login credentials.
• Staff accounts — names, roles, and login credentials created by the restaurant.
• Business data — menus, prices, orders, payments, tables, reservations, and sales reports you enter into the system.
• QR menu customers — customer name and phone number when placing an order, so the order can be delivered to the right table.
• Device data — the Windows app registers a device ID and printer configuration for printing.
• Technical data — IP addresses and browser details in server logs, used for security and troubleshooting.

3How we use it

• To provide the service: orders, printing, reservations, reports and billing.
• To process subscription payments through Stripe (card details go to Stripe directly and never pass through our servers).
• To send service-related notifications such as subscription expiry reminders.
• To improve and secure the platform.

4What we never do

• We do not sell your data or your customers' data.
• We do not use your sales data to advertise.
• We do not see or store card numbers — Stripe handles all card data.

5Data storage & security

Data is stored on our servers with encrypted connections (HTTPS). Payment keys are stored encrypted. Access is limited to authorized personnel and used only for support when needed.

6Sharing

We share data only with:

• Stripe — for subscription billing.
• Hosting providers — our server infrastructure.
• Legal requests — only when required by law in Malaysia.

7Retention

Your data is kept while your account is active. When a subscription ends, you may request a full export or deletion of your data by contacting us.

8Your rights

You may request to view, correct or delete your data at any time. Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to know what data we hold about you.

9Cookies

We use only essential cookies required for login sessions. We do not use advertising or tracking cookies.

10Changes

If this policy changes, we will update this page and notify account owners of significant changes.