Privacy Policy
Last updated: 2026-09
Your data runs your restaurant. It does not run our advertising. This page says, in plain words, what we keep, why we keep it, and what we will never touch.
Who we are
Devenisto is a Saudi system that gives restaurants and cafés a store in their identity, a branch cashier, a kitchen display, a driver app and an operations dashboard. This policy covers devenisto.com and the platform itself.
What we keep
- Merchants and their staff: name, work contact details, login credentials (passwords are stored only as secure hashes) and the actions taken inside the platform.
- A brand's customers: the phone number or email they sign in with, their order history, and, where they use them, loyalty points, wallet balance and saved addresses. Each brand sees only its own customers.
- Visitors to this site: a cookie for your language and one for your display mode. Nothing else. This site sets no advertising trackers.
What we never touch
Card numbers. The platform neither accepts nor stores them. When a merchant connects a payment provider, that provider handles the payment and we keep only the transaction status and its reference.
How one merchant stays separate from another
Every merchant's data is isolated on several layers, down to row-level security inside the database itself, and automated tests try to cross that line before every release and must fail. A customer's activity with one brand is invisible to every other brand.
What stays, and why
Invoices, ledgers and the audit trail are append-only. They cannot be edited or deleted, because regulation and honest bookkeeping both need history to stay intact.
Your rights
A customer can request an export or deletion of their personal data from the privacy section of their account. Requests are logged and handled under the Saudi Personal Data Protection Law (PDPL). Deletion never erases another party's financial records, which are kept as the law requires.
Talk to us
Any privacy question or request: support@devenisto.com