Privacy notice
Salo collects only what it needs to run a restaurant's service, and guests can order without giving any personal information.
Draft placeholder. This page is not yet in force and is not legal advice. It will be replaced by a reviewed version before any restaurant goes live.
Our approach: collect less
We design Salo to need as little personal data as possible. If a feature can work without personal data, it does.
This notice is being prepared under the Data Privacy Act of 2012 (Republic Act 10173).
Guests
Guest QR ordering needs no account. We do not ask guests for a name, phone number or email.
We store the order, the table and the time, because the restaurant needs them to serve and bill the table.
A guest session is tied to one table and expires after a few hours.
Restaurant owners and staff
Owner and manager accounts use an email address and password.
Staff sign in on registered devices with a PIN. We record which staff member made each change so owners can review voids, discounts and adjustments.
Where data lives
Data is stored in cloud data centers in Singapore. Each restaurant's data is kept separate from every other restaurant's.
Devices keep a local copy so service can run offline.
What we never do
We do not sell personal data.
We do not use guest data for advertising.
We do not log passwords, PINs or payment credentials.
Still to be written
Retention periods, data subject rights and how to exercise them, the contact for our data protection officer, and the list of service providers that process data for us.