Privacy Policy

This Privacy Policy applies to the OMLU restaurant operations platform, operated by Nadha Labs ("Nadha Labs", "we", "us", or "our") in India.

This Policy explains how information is handled through OMLU's restaurant workspace, staff applications, QR ordering experiences, websites, and related services. It applies to restaurant customers, their authorised users, staff, and guests who interact with OMLU.

It should be read together with the other documents in the OMLU Legal Center and any privacy notice provided by the restaurant you are visiting or working with.

These roles depend on the context. Restaurants are responsible for providing appropriate notices to their guests and staff where required.

We receive information when a restaurant registers an account, creates authorised-user access, configures menus, prices or taxes, uploads content, contacts support, or uses OMLU's operational features. Guests may provide item choices, instructions, and other dining-session information through a restaurant's QR ordering experience.

When OMLU is used, we may automatically receive technical information such as IP address, browser and device details, request and connection timestamps, operational logs, and security events. We use this information to deliver the service, diagnose problems, maintain reliability, and protect OMLU from unauthorised or abusive activity.

Guests can browse a restaurant's QR menu without creating an OMLU account. Temporary browser and session information helps connect a guest to the correct restaurant and dining session. Ordered items, instructions, service interactions, and related timestamps are processed so the restaurant can fulfil orders, coordinate service, and prepare bills.

The relevant restaurant controls this dining information. Questions about a specific dining record should normally be directed to that restaurant.

• Provide, operate, maintain, and improve OMLU.
• Authenticate authorised users and maintain separation between restaurant workspaces.
• Route orders, coordinate restaurant service, calculate bills and taxes, and produce receipts.
• Provide requested AI-assisted menu extraction.
• Deliver operational updates and important account communications.
• Monitor reliability, investigate problems, and prevent fraud, abuse, or unauthorised access.
• Meet applicable legal, tax, accounting, and regulatory obligations.

Where required, Nadha Labs processes personal data based on consent. We may also process personal data where processing is permitted under applicable law, including circumstances in which consent is not required.

Processing may be necessary to provide requested OMLU services, maintain platform security, prevent fraud or abuse, protect legal rights, and comply with applicable legal obligations.

We may send registered contacts communications needed to operate OMLU, such as authentication messages, password resets, security notices, operational alerts, support replies, and account or subscription updates. These are service communications, not third-party advertising.

Nadha Labs does not sell or rent personal information. We share information only as needed with service providers that help us operate and secure OMLU, subject to appropriate obligations.

Hosting and delivery

Vercel

Application infrastructure

Render and associated cloud infrastructure

Databases and caching

Managed PostgreSQL and Redis-compatible infrastructure providers

AI-assisted menu extraction

Google Gemini API, when a restaurant user chooses that feature

We may update our providers as OMLU evolves while continuing to limit sharing to what is reasonably necessary for the service.

Some infrastructure providers may process or store information outside India. Where international processing occurs, Nadha Labs handles those transfers in accordance with applicable Indian law and any restrictions notified by the Central Government.

We retain information only for as long as reasonably necessary for the purposes described in this Policy, to operate and secure OMLU, and to comply with applicable legal, tax, accounting, and regulatory obligations.

Certain billing and transaction records may need to be retained for periods required by applicable tax and accounting laws. Where the restaurant is legally responsible for retaining such records, OMLU may retain them on the restaurant's behalf for the applicable period.

Security records, information associated with closed accounts, and backup copies may remain for a limited period where reasonably necessary for security, recovery, dispute handling, or legal compliance. Information is deleted or anonymised when it is no longer reasonably required.

Depending on the context and applicable law, individuals may request:

• information about personal data processed by Nadha Labs;
• correction of inaccurate information or completion of incomplete information;
• erasure where legally applicable;
• grievance redressal;
• withdrawal of consent where processing relies on consent; and
• nomination where available under applicable Indian privacy law.

For guest dining or order data controlled by a restaurant, OMLU may direct the request to the relevant restaurant or assist that restaurant in handling it. Requests concerning Nadha Labs account or security data may be sent directly to our privacy contact.

Rights are subject to applicable law. We may verify a request and may retain information where a legal obligation or permitted security or legal purpose requires it.

Restaurant account owners may request closure through the OMLU privacy or support contact. After verification, access may be disabled and personal account information may be deleted or anonymised. Certain information may continue to be retained where required by law or reasonably necessary for security, fraud prevention, dispute resolution, or other legitimate legal purposes.

We may preserve or disclose information where reasonably necessary to comply with applicable law, a valid court or government request, or legal process; enforce our agreements; investigate misuse; or protect the rights, safety, and security of Nadha Labs, restaurants, users, or the public.

Nadha Labs uses reasonable technical and organisational safeguards designed to protect information processed through OMLU. These measures may include encryption in transit, secure credential storage, role-based access controls, tenant isolation, audit logging, rate limiting, security monitoring, and controlled infrastructure access.

No internet-based service can guarantee absolute security. Restaurants and authorised users should protect their credentials, use appropriate access permissions, and notify us promptly of suspected unauthorised access.

If a personal data breach occurs, Nadha Labs will take appropriate steps to investigate, contain, and remediate the incident and will provide notifications to affected persons, relevant restaurant customers, and competent authorities where required by applicable law.

OMLU is a restaurant operations platform and is not directed to children as an online service. Nadha Labs does not knowingly create OMLU accounts for children or intentionally collect children's personal data for independent marketing or profiling purposes.

Dining information submitted in a restaurant context remains governed by the restaurant relationship and applicable law.

OMLU uses necessary browser technologies, including cookies and local or session storage, for authentication, session continuity, QR ordering sessions, user preferences, draft recovery, and security. OMLU does not currently use third-party behavioural advertising cookies.

For privacy questions, rights requests, or grievances, contact:

We may update this Privacy Policy as OMLU evolves or legal requirements change. The current version will always display its latest revision date. Where required, we will provide additional notice of material changes.