Privacy Policy

Sufra (sufra.page) is operated by [Founder to decide: legal name of the operating entity], at [Founder to decide: official address].

• Shop owners' data (the dashboard account and subscription): Sufra is responsible for it.
• A shop's guest data (orders, reservations, loyalty…): the shop owns it and is responsible for it; Sufra processes it on the shop's behalf, only to provide the service.

If you are a guest with a question about your data at a particular shop, you can ask the shop directly, or message us and we will help.

• Account details: name, email, phone (optional) and password (stored hashed — we cannot read it).
• Shop details: name, link, address, contact numbers, logo, opening hours and the full menu.
• Subscription and payment: plan, subscription dates and the Whish or OMT receipt photos you upload. We never collect card numbers.
• Staff accounts, the names and numbers of drivers you add, and the settings you choose.
• Your support conversations with us on WhatsApp.

We use this data to run your account, activate your subscription, contact you about the service, send necessary emails (such as account confirmation and password reset), and protect the platform against fraud and abuse.

When a guest uses a shop's menu on Sufra, the following may be collected — all of it to serve that shop:

• Orders: name and phone, delivery address and zone for delivery orders, table number, notes and the items ordered.
• Reservations, birthdays and gifts: name, phone and date, plus the recipient's name and phone when sending a gift.
• Loyalty card: phone number, stamps and order count.
• Reviews: the rating and comment the guest writes.
• The Saber AI host: the messages a guest types in the chat. If the shop has Saber's memory on, it may remember the guest's name, phone and simple preferences (such as “no onions”) to serve them better next time.
• Device id: a random number created in the guest's browser that carries no name or phone. We keep it to run Saber and the loyalty card, so the menu recognises the same device next time.
• Menu analytics: events such as opening the menu or an item, adding to the cart and placing an order, with a session id that changes daily and the table number if any. They help the shop see what sells, and carry no guest name or phone.

The shop uses this data to prepare orders and contact the guest about them, and to manage reservations, loyalty and offers. Sufra stores and processes it only on the shop's behalf.

• We do not sell or rent personal data to anyone.
• We show no ads on menus, and we never use a shop's guest data to contact guests for ourselves.
• We do not use your data to train AI models.
• We send no automated WhatsApp messages: every message opens ready-made in WhatsApp and is only sent when a person taps Send. We use no WhatsApp API.

We use specialised companies to run Sufra. They process data only as far as their job requires:

• Supabase — database, sign-in and photo storage.
• Vercel — website hosting.
• Resend — email delivery (account confirmation, password reset, and our replies from support@sufra.page).
• ImprovMX — receives email sent to @sufra.page addresses (such as support@sufra.page) and forwards it to the Sufra team's inbox.
• Google (Gmail) — the inbox where we read and answer support email.
• Anthropic — AI (Claude) for Saber, menu import from photos, design suggestions and translation. It receives only what the feature needs: menu content, a menu photo, or Saber chat messages.
• Meta, TikTok and Google — only if a shop turns on ad pixels (see the next section).

These companies run servers outside Lebanon, so data may be stored and processed outside Lebanon.

We may disclose data where the law requires it or a competent judicial authority requests it, or to protect our rights and users' safety.

Ad pixels are off by default. They run on a shop's menu only if the shop owner turns them on and enters their own pixel id.

When on, the menu sends events to Meta (Facebook and Instagram), TikTok or Google Analytics, such as menu views, item views, add-to-cart and completed orders with their value. These companies may set their own cookies on the guest's device.

If the shop turns on the Meta Conversions API, Sufra's server sends Meta the order event with the guest's phone number hashed (SHA-256) as Meta requires, plus the IP address and browser type, so the shop can measure its ads.

The shop is responsible for informing its guests and getting their consent where the law requires it. Those companies' use of the data is governed by their own privacy policies.

• Menu analytics: detailed events are kept for 90 days, then rolled up into daily counts (views and orders per item) that carry no identifier, and the details are deleted.
• Orders, reservations and other guest data: kept while the shop's account exists so the shop can refer back to it, unless deleted at the request of the shop or the person concerned.
• Saber's memory: kept until the guest taps “Forget me” in the chat, deletion is requested, or the shop's account is closed.
• After a shop's subscription stops (or its trial ends without one) or its account is closed: we keep the data for 90 days from the day it stopped; after that it may be deleted permanently.
• Database backups: deleted automatically after 7 days.
• Account, subscription and receipt records: kept for the life of the account, and afterwards as long as accounting and tax law requires.

You can ask to access, correct or delete your data, or to stop its use for promotional messages.

To make a request, message Sufra on WhatsApp (the number is at the end of this page) with the shop's name and the phone number concerned. We may ask for proof that the data is yours before acting, and we reply within 30 days at most.

If the request concerns data held by a particular shop, we coordinate with that shop, since it owns the data.

You can also clear Saber's memory yourself with the “Forget me” button in the chat, and ask a shop not to send you offers.

Sufra sets no advertising cookies of its own. What we store on your device is needed for the service to work or to remember your choices:

• Language cookie: remembers the language you chose for the site.
• Sign-in cookies: keep a shop owner signed in to the dashboard.
• Invite cookie: keeps an “Invite a friend” code if you arrived through an invite link, so you get the longer trial.
• Dashboard preferences, such as the selected branch and colour mode.
• On the menu (the browser's local storage): the cart, language, table number, nickname, the random device id, a session id that changes daily, and orders waiting to be sent when the connection drops.
• App cache (service worker): keeps a copy of the menu and photos so it opens fast and works on a weak connection.

You can clear all of this at any time in your browser settings: the site will still work, but it will forget your choices and cart. Pixel cookies are only set if the shop turned pixels on, as described above.

We use an encrypted connection (HTTPS) across the whole site, access rules that stop any shop from seeing another shop's data, hashed passwords, and we collect as little data as we can.

No system is 100% secure. If a breach affects your data, we will tell you and the shops concerned as quickly as we can.

Sufra is a service for shops and their adult owners. Menus are public and anyone can browse them, but we do not knowingly collect data from children under 13. If you learn that a child has sent their data through Sufra, message us and we will delete it.

We process data under the applicable laws of Lebanon, including Law No. 81 of 2018 on Electronic Transactions and Personal Data.

We may update this policy when we add features or providers. We will publish the new version here with its last-updated date, and tell shop owners about material changes through the dashboard or WhatsApp.

For any question or request about your data, message Sufra on WhatsApp at the number below. Official email: support@sufra.page