1. Overview
B8cafe ("we", "us", "our") provides a point-of-sale and café management platform for cafés (the "Service"). This policy explains what data we collect, why we collect it, and how it's used and protected — for the businesses ("tenants") that run B8cafe, their staff, and the customers who interact with a tenant's QR menu.
2. Information we collect
Account & business data: name, email, business name, branches, staff accounts, roles, and device/terminal pairing information needed to operate the POS.
Operational data: menu items, prices, orders, inventory, sales, expenses, and reports — all stored per tenant and isolated from other tenants.
Customer-facing QR menu data: when a guest orders or calls a waiter via a table's QR code, we process the order lines, optional kitchen notes, and an optional name to identify the order at the table. Guests don't need to create an account.
Billing data: we don't run automatic card billing right now — if you request a paid plan, we collect a preferred contact method (WhatsApp, email, or phone number) to arrange payment with you directly. We never ask for or store full card numbers ourselves.
Technical data: standard log data (IP address, browser/device type, timestamps) for security and reliability purposes.
3. How we use information
To operate and improve the Service, process orders and payments, provide customer support, secure accounts and devices, and comply with legal obligations.
Our upcoming AI analytics assistant will only ever read a tenant's own business data, on a read-only basis, to answer that tenant's own questions — it will never access or mix data across tenants.
4. Data sharing
We do not sell personal data. We share data only with service providers who help us run the Service under confidentiality obligations, including:
- Cloud hosting and database providers (infrastructure)
- Image hosting for menu item photos
We may disclose data if required by law or to protect the rights, property, or safety of B8cafe, our users, or others.
5. Data retention
We retain tenant data for as long as the account is active, and for a reasonable period afterward to allow account recovery and meet legal/accounting requirements. Tenants can request deletion of their data by contacting us.
6. Cookies & similar technologies
We use essential cookies/local storage to keep you signed in and remember preferences (such as language and branch selection). We do not use third-party advertising trackers.
We use Google Analytics on this website to measure traffic and understand how visitors use our pages (pages viewed, general location, device type). This data is aggregated and is not used to identify you personally. See Google's privacy policy for how Google handles this data.
7. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us using the details below.
8. Security
Each tenant's data is isolated by tenant ID, access is role-restricted, and traffic is encrypted in transit. No system is 100% secure, but we work to protect your data using industry-standard practices.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
10. Contact us
Questions about this policy or your data? Contact us at support@b8scale.com.