RestroMatrix is operated by Erpixo LLP ("we"). It is software a restaurant uses to run its own operations — purchases, cash, inventory, attendance and payroll records.
For the restaurant owner's own account details we are the Data Fiduciary. For everything the restaurant puts into the app about its staff, vendors and customers, the restaurant is the Data Fiduciary and we are its Data Processor: we hold and process that data on the restaurant's instructions, and we do not decide what goes in or use it for our own purposes.
| What | Why |
|---|---|
| Owner's name, phone, restaurant name, city | To create and secure the account |
| Staff names, phones, home addresses, designation, salary, joining date, attendance, advances | Entered by the restaurant to run its own payroll and rota |
| A photo of each staff member's Aadhaar card | Taken by the restaurant in its monthly staff check, to keep a record of who it employs. Only the restaurant's owner can view it. |
| Bills, vendor payments, cash movements, sales figures, uploaded spreadsheets and bill photographs | The restaurant's own financial records — the purpose of the product |
| Device push token | To send alerts. Withdrawn when you log out. |
| Access logs and error reports | Security and fixing faults |
We do not ask for Aadhaar numbers to be typed in. A photo of a staff member's Aadhaar card is kept only when the restaurant takes one in its monthly staff check. It is stored in our database on our servers in India, not as a photo file, and is shown only to the restaurant's owner; no other login, including the person who took it, can open it again. Like the rest of the database it is included in our nightly backups, which are kept with Cloudflare R2 for about 14 days. The owner can delete it at any time from the staff member's page, and it is deleted with the rest of the restaurant's data on request; a deleted photo leaves the backups as older backups are replaced, normally within 14 days. We do not ask for card details — subscription payments are handled by Cashfree and card data never reaches our servers.
On our own servers in India. Uploaded photographs and backups are stored with Cloudflare R2. Access is restricted to the restaurant's own logins; each restaurant's data is isolated from every other restaurant's, and that isolation is tested before each release.
For as long as the account is active, and for a period afterwards for tax and audit purposes. A restaurant can ask for its data to be exported or deleted — see Contact.
You may ask us what we hold about you, correct it, withdraw consent, or ask for it to be deleted. Where the restaurant is the Data Fiduciary — staff data — we will pass the request to them and assist.
We do not sell data and we do not share one restaurant's data with another. Any comparison across restaurants is aggregated and anonymous, never attributable to a named outlet. We use Cashfree for payments, Cloudflare for storage, and Expo for push notifications.
If personal data is compromised we will notify affected users and the Data Protection Board as required. Complaints: [GRIEVANCE OFFICER NAME], admin@erpixo.com. We aim to respond within 30 days.
The version is at the top. Material changes will be notified in the app and consent asked again.