Privacy Policy

Qayma is a digital menu platform operated by Elite IT, a company registered in the Kingdom of Saudi Arabia (Commercial Registration on file). In this policy, "we", "us", and "our" refer to Elite IT, and "you" refers to any person who uses the Qayma website, dashboard, or public menu pages.

We collect the following types of data:

a) Account Data (Restaurant Owners)

• Name, email address, and phone number
• Restaurant name, address, and logo
• Menu content (items, descriptions, photos, prices)
• Payment and billing information

b) Usage Data (All Visitors)

• QR code scan timestamps and frequency
• Pages viewed, language preference, and device type
• Approximate location (city-level, from IP address)
• Browser type and operating system

c) Customer Feedback Data

• Reviews, ratings, and spend bracket (if voluntarily submitted)

• To provide and maintain the Qayma platform
• To display your restaurant menu to your customers
• To generate analytics and reports for restaurant owners
• To process payments and issue invoices
• To send service-related notifications (e.g., subscription renewal, weekly reports)
• To improve our platform and develop new features
• To comply with legal obligations (e.g., ZATCA e-invoicing, VAT reporting)

We process your data based on: (a) your consent when you create an account, (b) contractual necessity to provide our services, and (c) legal obligations under Saudi law, including the Personal Data Protection Law (PDPL) and ZATCA regulations.

We do not sell your personal data. We may share data with:

• Payment processors (e.g., Moyasar or Tap Payments) to process your payments securely
• Authentication provider (Clerk) to manage your login and account security
• Cloud infrastructure (Convex, Vercel) to host and deliver our services
• AI service providers (OpenAI, Google) for menu import and image enhancement features
• Communication providers (Twilio) for WhatsApp reports, if you opt in
• Government authorities when required by Saudi law

Your data is stored on secure cloud servers. We use industry-standard encryption for data in transit (TLS) and at rest. Access to personal data is restricted to authorized personnel only. We conduct regular reviews of our data handling practices. While no system is 100% secure, we take commercially reasonable measures to protect your information.

We retain your account data for as long as your account is active. After account deletion, we retain data for up to 12 months to comply with legal and tax obligations (e.g., VAT records). Usage analytics are stored in aggregated, anonymized form and may be retained indefinitely. You can request deletion of your personal data at any time by contacting us.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Withdraw consent for data processing
• Request a copy of your data in a portable format
• Object to data processing in certain circumstances

To exercise any of these rights, contact us at privacy@qayma.com. We will respond within 30 days.

We use essential cookies to maintain your session and remember your language preference. We do not use third-party advertising cookies. Analytics data is collected server-side through QR scans and page views without using browser tracking cookies.

Our service is intended for restaurant owners and their adult customers. We do not knowingly collect data from children under 18. If you believe we have collected data from a minor, please contact us immediately.

We may update this privacy policy from time to time. Material changes will be communicated via email to registered users. The "Last updated" date at the top indicates the most recent revision.

If you have questions about this privacy policy or your personal data, contact us at: