1. Scope and who we are
This Privacy Policy explains how Sedulus Ventures Pvt. Ltd. (“Sedulus”, “Billos”, “we”, “us” or “our”) handles personal data when you visit billos.io, contact us, create or use a Billos account, use our web, mobile or desktop applications, or receive support from us.
Billos is the restaurant billing and operations product of Sedulus Ventures Pvt. Ltd. Our business contact location is Kolkata, West Bengal, India. This policy applies to the Billos service and not to independent restaurants or other businesses that use Billos; those businesses may have their own privacy notices.
2. Information we collect
Depending on how you use Billos, we may collect the following categories of information:
- Contact and enquiry information: name, phone number, email address, restaurant name, restaurant type, outlet count and the message you submit through our contact form.
- Account and access information: name, email, phone number, role, restaurant or outlet relationship, username, password hash, sign-in records, MFA settings and security events.
- Restaurant operating data: menus, prices, taxes, tables, orders, KOTs, inventory, customers, reservations, loyalty records, reports, invoices, payments and related business configuration.
- Device and technical information: IP address, browser or app type, operating system, device identifier where available, timestamps, connectivity information, crash or diagnostic information, audit events and approximate location inferred from network information where necessary for security.
- Payment and billing information: plan, invoice, amount, currency, payment status and provider reference. Payment instrument details are handled by the applicable payment provider and are not intended to be stored by Billos unless expressly stated at the point of collection.
- Support and communications: messages, attachments or other information you choose to provide when you ask for support or communicate with us.
Billos does not ask for sensitive personal data that is not needed to operate the service. Do not submit passwords, payment card numbers, government identity numbers or other sensitive information through the public contact form.
3. How we receive and use information
We receive information from you, your restaurant or employer, your device, and services you connect to Billos.
We use information to:
- provide, operate, authenticate and support Billos, including offline workflows and later synchronisation;
- create and administer accounts, roles, outlets, subscriptions, invoices and customer support requests;
- process restaurant operations such as billing, orders, kitchen tickets, reservations, inventory and reports;
- protect the service, detect abuse, investigate incidents, enforce access controls and maintain audit records;
- send service, security, billing and support communications, and respond to enquiries;
- measure reliability and improve features using operational diagnostics and aggregated or de-identified information;
- meet legal, tax, accounting, regulatory and lawful-authority obligations; and
- handle a merger, acquisition, financing, restructuring or sale of all or part of our business.
Where a consent choice is required, we use the information for the stated purpose after consent and provide a practical way to withdraw it. Withdrawal does not affect processing already carried out lawfully before the withdrawal.
4. Restaurant and end-customer data
A restaurant or other Billos customer may enter information about its staff, guests, customers, suppliers or business contacts. In that situation, the restaurant is generally responsible for deciding why that information is collected and for giving any notices required by applicable law. Billos processes that information to provide the service, under the customer's instructions and the applicable agreement, where that relationship applies.
If you are a restaurant guest or customer and your information was entered by a Billos customer, please first contact that restaurant for access, correction or deletion requests. We will assist the restaurant with an appropriate request where applicable.
7. Retention and deletion
We keep information for as long as necessary to provide the service, maintain an account or customer relationship, resolve disputes, enforce agreements, comply with tax and accounting obligations, prevent abuse, and meet other lawful requirements. Retention periods vary by data type and purpose.
When information is no longer required, we delete it, anonymise it or securely isolate it. Backups, security logs and legally required records may remain for a limited period before being overwritten or deleted. A restaurant customer may request an export or deletion of its tenant data subject to the service agreement and legal or operational limitations.
8. Security
We use reasonable technical and organisational safeguards appropriate to the service, including encrypted connections, access controls, tenant and outlet scoping, password hashing, MFA for supported administrative accounts, audit records, rate limiting, backups and security monitoring. No system or transmission is completely secure, so keep credentials confidential and report suspected misuse promptly.
Billos will not ask you to disclose your password or one-time authenticator code by email or through the public contact form.
9. Choices and privacy requests
Subject to applicable law and the role of the relevant restaurant or business, you may ask us to access, correct, export, delete, anonymise or restrict use of personal data, withdraw consent, or stop non-essential marketing communication. We may need to verify your identity and may direct an end-customer request to the restaurant that controls the relevant relationship.
Send a request to [email protected] with the subject “Privacy Request”. Include enough information for us to understand the request, but do not include passwords or full payment details. We aim to respond within a reasonable period required by applicable law.
If you believe your request has not been handled appropriately, you may use the same address as our privacy and grievance contact. You may also have the right to approach the relevant authority under applicable law.
10. Children
Billos is a business service for restaurants and is not directed to children. We do not knowingly request or collect personal data directly from children through the public website. Restaurants remain responsible for using the service lawfully when their own customer records include information about minors.
11. Changes to this policy
We may update this policy when the service, law or our data practices change. We will update the date at the top of the policy and, where appropriate, provide additional notice through the service or by email. Continued use after an updated policy becomes effective means the updated policy applies to future processing.
This policy should be read with our Terms of Service. If you need help, visit our contact page.