Sahl — سهل | Pay fast

1. What Data We Collect

From Restaurant Owners (Merchants):

Account information: name, email address, password (hashed).
Restaurant details: name, address, logo, currency, VAT rate, Google Review URL.
Menu items: names, descriptions, prices, images.

From Diners (End Users):

No account or login is required. Diners are anonymous by default.
Payment information is processed directly by third-party providers (Tap Payments, WhishMoney, OMT). Sahl does not store card numbers or bank details.
Optional data: email address (if the diner requests an email receipt), star rating, and comment (if the diner leaves a review).
Device information: browser type, language preference (stored in localStorage on the device only).

2. How We Use Your Data

To provide and operate the Sahl platform — processing orders, payments, and receipts.
To display real-time payment and table status to restaurant owners via the dashboard.
To send email receipts when requested by the diner (via Resend).
To display anonymous ratings and feedback to restaurant owners.
To improve the Service — we may analyze anonymized, aggregated usage data.

We do not use your data for advertising or sell it to third parties.

3. Who We Share Data With

Payment processors: Tap Payments, WhishMoney, and OMT receive payment details necessary to process transactions. Each provider has its own privacy policy.
Resend: Email addresses are shared with Resend solely to deliver email receipts when explicitly requested by the diner.
Supabase: Our database and authentication provider. Data is hosted on Supabase's infrastructure.
Restaurant owners: Merchants can see order details, payment amounts, tips, and anonymized ratings for their own restaurant only.

We do not share data with advertisers, data brokers, or any other third parties.

4. Data Retention

Merchant accounts and restaurant data are retained until the Merchant requests deletion or the account is terminated.
Order and payment records are retained for the period required by Lebanese tax and commercial law (minimum 5 years).
Diner email addresses provided for receipts are not stored beyond the email delivery.
Ratings and comments are retained indefinitely unless the restaurant owner or Sahl removes them.

5. Your Rights

You have the right to:

Access your personal data held by Sahl.
Correct inaccurate information in your account.
Delete your account and associated data (subject to legal retention requirements).
Export your data in a machine-readable format.
Withdraw consent for optional data processing (e.g., email receipts) at any time.

To exercise any of these rights, contact us at the email below.

6. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, row-level security on all database tables, and secure cookie handling. Payment card data is processed exclusively by PCI-DSS compliant payment providers and is never stored on our servers.

7. Contact

For privacy-related questions or requests, contact us at: contact@sahl.app