Back to qrmflow

Privacy Policy

What we collect, why, and the choices you have.

Last updated 15 October 2026

Who we are

qrmflow is a QR ordering and restaurant management service operated from India by Mohsin Rainsh (CEO & Founder). Email qrmflow@gmail.com or call/WhatsApp +91 60005 95825.

Restaurant accounts

We collect the business name, owner name, phone, address, email and password needed to create and run your account. Passwords are stored only as secure hashes by our authentication provider.

Menus, orders, tables, receipts, GST settings and payment details you enter are stored for your restaurant only and are not visible to other restaurants.

Guests ordering from a menu

To deliver an order we process the items, table or room, optional note and a phone number. Location is requested only when a restaurant enables delivery-area checks, and only while placing that order.

WhatsApp order messages are sent only when the guest ticks the WhatsApp consent box. Guests are not required to create an account.

What we do not do

We do not sell personal data, run advertising trackers or use third-party analytics cookies.

We do not knowingly collect data from children under 18. Restaurant accounts require the owner to confirm they are 18 or older. If you believe a child has given us data, contact us and we will delete it.

Service providers

Cloud hosting and database (data stored securely with access rules per restaurant), Google sign-in (only if you choose it), Meta WhatsApp Business (order and invoice messages with consent), payment gateways and UPI apps (we never store card numbers), an AI provider for optional voice, translation and menu-scan features, and Google Fonts for typography.

Retention and your rights

Account data is kept while your account is active and deleted or anonymised within 30 days of a verified deletion request, except invoices and tax records we or the restaurant must keep under Indian law (generally up to 8 years).

You may request access, correction, export or deletion at any time from the Delete my data page. We respond within 30 days, as required by India's Digital Personal Data Protection Act, 2023.

Business details

qrmflow · Mohsin Rainsh (CEO & Founder) · India

qrmflow@gmail.com · +91 60005 95825