Privacy Policy

1. Introduction

“MezaSync”, “we”, and “us” refer to the operators of the MezaSync platform. “You” means any customer, restaurant user, delivery partner, staff member, or visitor using our services. By using MezaSync you acknowledge this Policy. Where consent is required by law for a specific processing activity (for example certain marketing or precise location uses), we will ask for it.

2. Scope of this Policy

This Policy covers personal data processed through:

• The public storefront and authenticated web dashboards.
• The MezaSync mobile application (customer, restaurant, and delivery experiences).
• APIs, chat, email, and push notification systems that power the service.
• Admin tools used to operate the network (users, restaurants, support, system settings).

3. Information we collect

Account & profile

• Name, email address, phone number, password (stored hashed), avatar, and preferences.
• Authentication data from Google Sign-In or similar providers when you choose those options.
• Role and permission information (customer, restaurant owner/staff, delivery person, admin).

Ordering & commerce

• Cart contents, order items, special instructions, order status history, and payment status (including COD confirmation).
• Delivery addresses, coordinates, and delivery notes.
• Reviews and ratings you submit.

Restaurant operations

• Restaurant and branch profiles, logos/covers, menus, categories, add-ons, offers, operating hours, and delivery configuration.
• Staff memberships and role assignments within a restaurant.

Delivery operations

• Delivery profile details, availability status, assignment history, and location updates while on duty or on an active delivery (when permitted).
• Delivery confirmation media (for example completion photos) when that feature is used.

Communications

• Chat messages, attachments, and support thread metadata.
• Email and in-app notifications related to orders, deliveries, chats, and account security.

Device & technical data

• Device identifiers and FCM (Firebase Cloud Messaging) tokens for push notifications.
• Approximate or precise location when you grant permission.
• Log data such as IP address, browser/app version, and diagnostic events needed to secure and improve the service.

4. How we use information

We use personal data to:

• Create and manage accounts, roles, and authentication sessions.
• Show nearby restaurants, check delivery range, and calculate distances.
• Process orders, update statuses, and coordinate restaurants with delivery partners.
• Enable chat between customers, restaurants, drivers, and support.
• Send transactional push notifications and emails (order placed, status changes, delivery requests, chat messages, admin broadcasts).
• Prevent fraud, abuse, and unauthorized access; debug outages; and improve product quality.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information.

5. How data is used by role

6. Sharing & processors

We share information with:

• Restaurants that receive your order (items, customer name/phone, delivery address, notes, payment status).
• Delivery partners assigned to an order (pickup/drop-off details, contact info needed for delivery, COD amount when relevant).
• Service providers that help us run MezaSync, such as hosting, email delivery, map/geocoding providers, and Firebase for messaging and analytics-related infrastructure.
• Auth providers (for example Google) when you choose to sign in with them — subject to their privacy terms.
• Authorities when required by law or to protect rights, safety, and security.

Restaurant owners are responsible for how their staff handle customer data obtained through MezaSync and must use it only for order fulfillment and legitimate support.

7. Location data

With your permission, MezaSync uses location to find nearby branches, validate delivery distance, match delivery partners, and support live tracking/navigation features. You can disable location access in your device settings at any time. Without location, nearby sorting, range checks, and some delivery features may not work correctly.

Delivery partners who go online or accept active deliveries should expect more frequent location updates for matching and tracking until the delivery is completed or they go offline.

8. Push notifications & topics

If you allow notifications, we store a device push token and may subscribe the device to platform topics (such as general announcements) so we can deliver order, chat, delivery, and administrative messages. You can turn off notifications in device or in-app settings; transactional messages that are essential to an order you placed may still be sent by email or shown in the app where available.

9. Cookies, sessions & local storage

The website uses cookies and similar technologies for authentication sessions, security (CSRF), and remembering preferences. The mobile app stores tokens and settings locally on your device to keep you signed in and remember preferences. You can clear site cookies in your browser or clear app data / sign out in the application.

10. Retention

We keep account and order records for as long as your account remains active and as needed for operations, dispute resolution, accounting, and legal compliance. Chat and delivery tracking data are retained for a period appropriate to support quality, safety, and customer service, then deleted or anonymized when no longer needed. You may request deletion of your account subject to lawful retention requirements (for example completed order records).

11. Security

We use administrative, technical, and organizational measures designed to protect personal data, including access controls, encrypted transport (HTTPS) where configured, and hashed passwords. No method of transmission or storage is 100% secure; please use a strong unique password and protect your devices.

12. Children’s privacy

MezaSync is not directed to children under the age where parental consent is required in your jurisdiction for online services. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.

13. Your choices & rights

Depending on your location, you may have rights to:

• Access, correct, or update your profile information in the app or portal.
• Manage notification and location permissions on your device.
• Request a copy of personal data we hold about you.
• Request deletion or restriction of processing, subject to legal exceptions.
• Object to certain processing or withdraw consent where processing is consent-based.

To exercise these rights, use Contact Support in the MezaSync app or reach us via channels on About MezaSync. We may need to verify your identity before fulfilling a request.

14. International transfers

Our servers and processors (for example cloud hosting or Firebase) may be located in countries other than yours. Where we transfer personal data internationally, we take steps designed to provide an appropriate level of protection consistent with this Policy and applicable law.

15. Changes to this Policy

We may update this Privacy Policy as MezaSync evolves. We will revise the “Last updated” date and, when changes are material, provide additional notice through the app, website, or email when appropriate.

16. Contact

Privacy questions or requests: use Contact Support in the app Settings, open a support chat when signed in on the web, or visit About MezaSync. For related contractual terms, see our Terms of Service.