Privacy Policy
Effective date: 19 August 2026
Tizo is a restaurant point-of-sale and QR ordering service operated by Analytics Tower (“we”, “our”, “us”). This policy explains what we collect through tizo.in, the Tizo Android app, and the QR menu your customers scan at a table — and what we do with it.
1. Who controls the data
A restaurant using Tizo decides what goes into its account: its menu, its staff records, its orders and its customers. That restaurant is the owner of that data. We hold and process it on their behalf so the service can work, and we do not use it for our own purposes.
If you are a diner and want to know why a restaurant holds your details, ask the restaurant. If you cannot reach them, write to us and we will help.
2. What we collect
| Data | Who it belongs to | Why |
|---|---|---|
| Name | Restaurant staff, diners | Staff records; putting a name on a bill |
| Phone number | Restaurant staff, diners | Staff records; order updates and repeat-customer lookup |
| Email address | Restaurant owner, diners | Signing in; emailing a receipt |
| Address | Restaurant staff, diners | Staff records; delivery orders |
| Account identifiers | Restaurant owner | Keeping you signed in and separating one restaurant from another |
| Order and purchase history | Restaurant, diners | Bills, GST invoices, sales reports |
| Payment records | Restaurant, diners | Reconciling a bill. We store the amount, the method, a UPI transaction reference or the last four digits of a card, and the payment gateway's reference. We never see or store full card numbers, CVVs or bank credentials. |
| Salary and payroll figures | Restaurant staff | The payroll feature, if the restaurant uses it |
| Content you enter | Restaurant | Menu items, prices, order notes, inventory |
3. What we do not collect
- Your location. The apps never ask for it and cannot read it.
- Government identity numbers, including Aadhaar and PAN.
- Full card numbers, CVVs, bank account numbers or UPI PINs.
- Your contacts, photos, files, messages, calendar or call logs.
- Advertising identifiers. There are no ads in Tizo and no advertising SDKs in it.
- Behavioural analytics. We do not run Google Analytics, Firebase, or any similar third-party tracker.
4. Who else touches it
We do not sell your data, and we do not share it with anyone for their own purposes. It reaches only the suppliers that make the service run:
- Supabase — the database the service stores data in.
- Vercel — hosting for the website and apps.
- Razorpay — processes online payments when a restaurant turns that on. Card and UPI details are entered on Razorpay's own pages and never pass through us.
We may also disclose data where the law requires it, and no further than the law requires.
5. How it is protected
- Everything travels over HTTPS. Nothing is sent unencrypted.
- The database is encrypted at rest by our hosting provider.
- Each restaurant can reach only its own data. Sign-in is required for every screen in the dashboard, and a device unlock PIN sits on top of it.
- No method is perfect, and we do not claim otherwise. If a breach affects you, we will tell you.
6. How long it is kept
While the restaurant's account is active. Invoices and tax records are kept for at least eight years, because Indian GST law requires it. After an account closes, everything else is deleted within 90 days unless a law says otherwise.
7. Getting your data deleted
Write to info@analyticstower.in or message +91-9462691197 from the phone number or email on the account, and say what you want removed.
We answer within 7 working days and complete the deletion within 30 days.
- Deleted: your account and sign-in, staff records, customer contact details, menu and inventory content.
- Kept: issued invoices and the tax records attached to them, for the eight years GST law requires. These are kept as accounting records and are not used for anything else.
Diners: to have your contact details removed from a restaurant's customer list, ask that restaurant, or write to us and we will pass it on.
8. Your rights
Under India's Digital Personal Data Protection Act, 2023, you may ask for a copy of the data we hold about you, ask us to correct it, ask us to erase it, or withdraw consent you have given. Use the contact details below; there is no charge.
9. Children
Tizo is a tool for running a restaurant business. It is not intended for children, and we do not knowingly collect data from anyone under 18.
10. Changes
If this policy changes we will update the effective date above, and tell account holders directly when the change is significant.
11. Contact
Analytics Tower
Email: info@analyticstower.in
WhatsApp: +91-9462691197
Website: https://www.tizo.in