Privacy Policy

Mesora provides a cloud-based SaaS platform that lets restaurants offer QR-code ordering, shared carts, kitchen displays, and admin tools. This policy explains what personal data we process, why we process it, and the choices available to you.

We design our product with privacy in mind and aim to collect only the data needed to operate the service, improve reliability, and support restaurant customers and their guests.

Mesora SLL is the data controller for personal data processed through the Mesora marketing website, demo environment, and SaaS platform unless we act as a processor on behalf of a restaurant customer.

When a restaurant uses Mesora to serve guests, the restaurant is typically the controller for guest order data and we process that data as a processor according to our agreement with the restaurant.

Account and contact data: name, email address, business details, billing information, and credentials you provide when registering, subscribing, or contacting support.

Restaurant and operational data: menus, locations, staff accounts, order and table information, and configuration settings you upload or generate while using the service.

Usage and device data: logs, IP address, browser type, pages viewed, and product analytics collected only where permitted—optional marketing analytics on our website require your consent via the cookie banner.

We process personal data where necessary to perform our contract with you, to provide and secure the Mesora service, and to comply with legal obligations.

We rely on legitimate interests for service improvement, fraud prevention, and limited operational analytics that do not override your rights. Where required by law, we ask for your consent—for example, for non-essential cookies and optional website analytics.

We use essential cookies to keep you signed in, remember cookie preferences, and protect the platform. Optional analytics cookies are used only if you accept them.

See our Cookie Policy for details on each cookie, retention periods, and how to change your choices.

We do not sell personal data. We share data with trusted subprocessors that help us host infrastructure, process payments, deliver email, and operate analytics—each bound by contractual confidentiality and data protection obligations.

We may disclose information when required by law, to protect rights and safety, or in connection with a merger or acquisition subject to appropriate safeguards.

Mesora may process and store data in countries outside your own, including the United States and the European Union. Where personal data is transferred from the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

You may request more information about transfer safeguards by contacting privacy@mesora.online.

We retain account and restaurant data for as long as your subscription is active and for a reasonable period afterward to resolve disputes, meet legal obligations, and maintain backups.

Marketing-site analytics and cookie-related records are kept according to the periods listed in our Cookie Policy. You may request deletion subject to applicable law and legitimate business needs.

Depending on your location, you may have rights to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability where applicable.

You may withdraw consent for optional cookies at any time via cookie settings. You may also lodge a complaint with your local supervisory authority. To exercise your rights, contact privacy@mesora.online.

For privacy requests or questions about this policy, email privacy@mesora.online or write to Mesora SLL at the address published on https://mesora.app.