1. Introduction
Absterco (Pvt) Ltd ("we", "us", "our") operates the MenuVire platform ("Service"). This Privacy Policy explains how we collect, use, store, and protect personal information when you use our Service — whether you are a business subscriber or a customer of a business using MenuVire.
We are committed to protecting your privacy in accordance with applicable Sri Lankan data protection principles.
2. Information We Collect
2.1 Business Subscribers (Franchise / Restaurant Owners)
When you register and use MenuVire, we collect:
| Category | Examples |
|---|---|
| Account information | Name, email address, phone number, business name |
| Payment information | Transaction records (card details are processed by the payment gateway and not stored by us) |
| Business content | Menu items, prices, images, branch details, QR codes |
| Usage data | Login times, features accessed, dashboard interactions |
| Device and technical data | IP address, browser type, operating system |
2.2 End Customers (Loyalty Programme Members)
When a customer enrols in a business's loyalty programme via MenuVire, we collect on behalf of the subscribing business:
| Category | Examples |
|---|---|
| Identity | Phone number (used as the primary identifier) |
| Verification | OTP (one-time passwords, not stored after verification) |
| Transaction history | Points earned, points redeemed, qualifying orders |
| Enrolment data | Branch enrolled at, enrolment date, loyalty tier |
We do not require end customers to create an account, download an app, or provide an email address.
3. How We Use Your Information
We do not use end customer data for our own marketing purposes.
Business Subscribers
- To create and manage your account
- To provide, maintain, and improve the Service
- To process subscription payments and send billing notifications
- To send service-related communications (maintenance notices, security alerts, product updates)
- To respond to support requests
- To comply with legal obligations
End Customers
We process end customer data strictly to:
- Operate the loyalty programme on behalf of the subscribing business
- Deliver SMS OTP verification messages
- Record and display loyalty points and transaction history to the customer and the business
4. Subscription Plan Data
Data collected and features available vary by subscription plan:
- Starter — Basic menu and analytics data only. No loyalty or SMS data.
- Growth — Includes loyalty programme member data, SMS delivery records, and payment transaction references.
- Business — All of the above, plus advanced analytics aggregates and custom branding configuration.
5. SMS Communications
The Service sends SMS messages to end customers for:
- OTP verification during loyalty programme enrolment or login
- Loyalty reward notifications (if enabled by the subscribing business)
- SMS marketing campaigns authorised and controlled by the subscribing business
8. Data Security
We implement appropriate technical and organisational security measures including:
- HTTPS encryption for all data in transit
- Hashed and salted credential storage
- Role-based access controls within the platform
- Regular security reviews
9. Data Retention
| Data type | Retention period |
|---|---|
| Active subscriber account data | Retained for the duration of the subscription |
| Data after account cancellation | 30 days, then deleted |
| Payment transaction records | Retained as required by Sri Lankan financial regulations |
| End customer loyalty data | Retained while the subscribing business account is active; deleted with the account |
| Log and analytics data | Up to 12 months |
10. Your Rights
Depending on your relationship with us, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (subject to legal retention requirements)
- Object to certain processing activities
- Export your data in a machine-readable format
11. Children's Privacy
The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
12. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to read their privacy policies.
13. International Transfers
Our servers are located primarily in cloud infrastructure serving Sri Lanka and the Asia-Pacific region. If data is transferred outside of Sri Lanka, we ensure appropriate safeguards are in place.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify business subscribers of material changes by email or platform notice. The updated policy will show the revised Effective Date at the top of this document.
15. Contact
Absterco (Pvt) Ltd (formerly Sigma Dev Solution (Pvt) Ltd)
Email: legal@absterco.com
Platform: app.menuvire.com