Privacy Policy

Last updated: 15 October 2026

This policy explains how Codebyte Tech Solutions ("we", "us"), the company behind the CinSnacks platform, handles personal information. CinSnacks lets cinemas and restaurants take food orders from a seat or table by QR code, and lets those venues run their business from a dashboard.

1. Who is responsible for what

• Venue owners and staff (cinemas and restaurants that subscribe) are our customers. We hold their account and business information.
• Guests who scan a QR code and place an order are ordering from the venue. The venue is the seller; we provide the ordering software and process the order data on the venue's behalf.

2. Information we collect

• Venue accounts: name, email address, phone number, business name and details, staff accounts, and subscription and billing records.
• Guest orders: the items ordered, seat or table, order notes, amount, payment method, order status, and any name or phone number the guest chooses to enter, plus ratings and complaints the guest submits.
• Technical data: basic device and browser information, IP address and login session data, used to keep the service secure and working.

3. Payment information

Online payments are made on the payment provider's own secure page (for example JazzCash or PayFast). We never see or store card numbers, wallet PINs or OTPs. We receive only the result of the payment (paid or not paid), the amount and a transaction reference. Where a venue connects its own payment account, its merchant credentials are stored encrypted and are never shown back in the browser.

4. How we use information

• To take, prepare, deliver, track and (where needed) refund orders.
• To run venue dashboards, reports, subscriptions and support.
• To send service messages such as order updates, password resets and subscription notices.
• To prevent fraud and abuse, and to keep the platform secure.

We do not sell personal information.

5. Who we share it with

• The venue you ordered from, so it can fulfil your order.
• Payment providers, only what is needed to process a payment you choose to make.
• Service providers that help us run the platform (hosting, email delivery), under confidentiality obligations.
• Authorities, where we are required to do so by law.

6. Cookies and local storage

We use browser storage only for things the service needs, such as keeping venue staff signed in. We do not use it for advertising.

7. Security

Each venue's data is kept separate from every other venue's. Public order links use long, unguessable tokens, passwords are stored hashed, and sensitive credentials are encrypted. No system is perfectly secure, but we work to protect your information and fix problems promptly.

8. Retention

We keep order and account records for as long as the venue's account is active and as long as needed for accounting, dispute and legal purposes. Technical logs are kept for a limited period and then deleted.

9. Your choices

You can ask us to access, correct or delete your personal information. Guests can also contact the venue they ordered from. Some records (such as completed orders and payments) may have to be kept for legal or accounting reasons.

10. Children

The service is not directed at children under 13 and we do not knowingly collect their personal information.

11. Changes

We may update this policy. The date at the top shows when it last changed.

12. Contact us