Privacy Policy

Who this policy covers

Kessti is a software platform used by restaurants and cafés to run their day-to-day operations and connect with their own customers. This policy covers two groups of people differently, because Kessti collects different information from each:

Restaurant owners and staff: people who create a Kessti account to manage a restaurant's point of sale, orders, kitchen, reservations, and related tools.
Restaurant customers (diners): people who order, make a reservation, or join a loyalty program directly through a specific restaurant's own ordering page, reservation page, or loyalty sign-up, which that restaurant operates using Kessti.

If you're a diner, your relationship is with the restaurant you're ordering from or visiting, not with Kessti directly. Kessti provides the software the restaurant uses, similar to how a restaurant's point-of-sale terminal or booking system is provided by a technology vendor. The restaurant decides how it uses the information you provide (for example, whether to enroll you in its loyalty program).

Information we collect

For restaurant owners and staff creating a Kessti account, we collect: your name, email address, and optionally a phone number; your account role (for example, owner, manager, cashier, waiter, or kitchen staff); and a securely hashed password or staff PIN (we never store your password or PIN in plain text). When you log in, we record the device/browser type and IP address used, to help detect suspicious activity and keep your account secure.

For restaurant customers who create an account with a specific restaurant (for example, to join that restaurant's loyalty program), we collect: your name, phone number, and optionally your email address and birthday. Phone number verification uses a one-time code sent to your phone. If you make a reservation without creating an account, the restaurant collects your name, email, phone number, the reservation date and party size, and any notes you provide.

We do not collect or store payment card numbers, card security codes, or other card details. When you pay for an order, Kessti only records how the payment was made, such as cash, card, or another method, as a label for the restaurant's own records, not the underlying card information itself.

How we use your information

To operate your account and let you use Kessti's features (for restaurant staff) or a restaurant's ordering, reservation, or loyalty features (for customers).
To send account-related messages, for example, email verification, password reset, order confirmations, and reservation confirmations.
To detect and prevent fraud, abuse, and unauthorized access to accounts.
To help a restaurant understand its own sales, customers, and operations (for restaurant owners), based only on that restaurant's own data.

Marketing communications

When you create a customer account with a restaurant that uses Kessti, you're enrolled by default to receive marketing communications (such as promotions or loyalty updates) by email from that restaurant, unless you opt out. You can opt out of marketing communications at any time through your customer account settings, or by contacting the restaurant directly. Opting out of marketing does not affect transactional messages, such as order or reservation confirmations, which are necessary to provide the service you requested.

Cookies and similar technologies

Kessti uses cookies that are necessary to keep you signed in and to protect your account (for example, session and security cookies). These are functional cookies, not advertising or cross-site tracking cookies. See our Cookie Policy for the full list and details.

We share personal data with a small number of service providers who help us operate Kessti, and only to the extent needed for them to provide their service:

Email delivery (Resend): to send account, order, and reservation emails.
Error monitoring (Sentry): to detect and fix technical problems; this can include your IP address and browser information when an error occurs, but does not include session recordings of your activity.
File storage (Cloudflare R2): to store uploaded files such as menu photos and restaurant logos.
Bot protection (Cloudflare Turnstile): to help distinguish real visitors from automated bots on certain forms, sometimes without any visible check.
Google: only when a restaurant owner chooses to connect their own Google Business Profile to Kessti, to manage that restaurant's Google listing.

Some of our forms use Cloudflare Turnstile to verify you're a real visitor rather than a bot, sometimes with no visible check at all. See Cloudflare's Turnstile Privacy Addendum

We do not sell personal data. We do not currently send communications by SMS or WhatsApp; if that changes, this policy will be updated first.

How long we keep information

We keep account and transaction information for as long as an account is active, and afterward for as long as needed to comply with our legal and accounting obligations, resolve disputes, and enforce our agreements. A restaurant staff member can deactivate their own account from their profile settings; this disables login but does not erase historical records they're associated with (such as past orders they processed), since those records are also relied on by the restaurant for its own accounting.

Where your data is stored

Kessti's application and database are hosted on Railway, and uploaded files are stored using Cloudflare. Kessti is currently focused on serving restaurants and their customers in Tunisia.

Your choices

Restaurant staff can update their profile information or deactivate their own account from account settings.
Restaurant customers can update their profile information and opt out of marketing communications from their customer account.
If you have a question about your personal data that isn't covered here, you can contact us using the form on our Support page.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date at the top of this page.

Contact us

If you have questions about this Privacy Policy or how your information is handled, contact us through our Support page