Data Processing & Security.

Roles and purpose

Each restaurant ordinarily decides its operational purposes for orders, final bills and permitted customer communication. KyaLoge provides technical processing tools under the corresponding business agreement.

Any formal data processing agreement, subprocessor list, international transfer assessment, lawful basis and retention schedule must be reviewed with the restaurant before live processing.

Security architecture

The platform uses restaurant-specific database tenancy controls, role-limited staff permissions, encryption for selected sensitive fields, protected provider settings, and operational audit logs. New owner access can require multi-factor authentication.

Technical safeguards reduce risk but do not remove it. Independent security assessment is part of the separate prelaunch approval process.

Processors and retention

Providers for infrastructure, transactional messages, optional AI suggestions and approved messaging are connected by the authorised operator. Credentials and recipient details are not intended for public exposure.

Data retention, deletion and breach-notification responsibilities should be finalised in signed agreements and published notices consistent with applicable law.

Requests and incidents

For security disclosures, privacy requests or suspected improper disclosure, contact the KyaLoge team through the contact page without sending private passwords or identity documents in the first message.