INTRODUCTION

RESTODAN ("RESTODAN", "we", "our" or the "Company") is a technology platform that brings restaurants, users and independent courier partners together in a digital environment.

This Privacy Policy explains how your personal data is collected, used, shared and protected within the scope of the RESTODAN mobile application, web platform and related digital services (the "Service").

RESTODAN:

• is not a food seller
• does not make sales on behalf of restaurants
• does not collect payments
• does not prepare food or make deliveries

INFORMATION COLLECTED

Information Provided by the User

• First and last name
• Telephone number
• Email address
• Password (stored in hashed form)
• Delivery addresses
• Profile preferences
• Role and authorization information
• Business relationships and profile relationships

Location and Address Information

Location data may be processed in the following ways:

GPS Location (with permission)

• Obtained with the user's explicit permission
• Displaying nearby restaurants
• Selecting a location on the map
• Delivery routing

IP-based location

• Determining approximate location
• Initial map location

Manual address

• Province, district, neighborhood
• Full address
• Coordinate information

Automatically Collected Data

• IP address
• Device type and operating system
• Browser information
• Application usage data
• Log records
• Session UUID
• localStorage data
• Cookie data

Device and Notification Data

The following additional technical data may be collected:

• Firebase Cloud Messaging (FCM) push token
• Device notification identifier
• Notification delivery status

Content Data

• Menu information
• Restaurant photos
• AR (augmented reality) content
• User interactions

PURPOSES OF DATA USE

Service Provision

• Creating and transmitting orders
• Listing restaurants
• Tracking order status
• Delivery routing

Location-Based Services

• Displaying nearby restaurants
• AR restaurant discovery
• Map and address verification
• Route calculation

Notification Systems

• Order updates
• Restaurant status changes
• Delivery notifications

(These notifications may be delivered via Firebase Cloud Messaging)

Authentication

• SMS verification
• Sending security codes
• Account verification

(This process may be provided through the Posta Güvercini SMS infrastructure)

Profile and Authorization Management

• Management of end-user profiles
• Management of restaurant owner and restaurant staff profiles
• Management of courier profiles
• Management of integrator profiles
• Enabling profile switching
• Defining and revoking roles and permissions
• Establishing business-staff relationships

Security and Analytics

• Detection of fraudulent use
• System security
• Error logs
• Performance analysis

DATA SHARING

RESTODAN does not sell your personal data.

Restaurants

• Order information
• Delivery address
• Contact information

Independent Courier Partners

• Delivery address
• Order contents
• Contact information

Business Representatives and Staff

For users authorized on the Platform as restaurant owners, managers or staff members, information necessary for management of the relevant business, execution of order processes, authorization procedures and operational activities may be viewed within the relevant business account.

Third-Party Services

Data may be shared with the following services:

• Google Maps API (maps and geocoding)
• Google Firebase (push notification infrastructure)
• Firebase Cloud Messaging (notifications)
• Posta Güvercini SMS Service (phone verification)

Legal Authorities

• Public authorities where legally required

THIRD-PARTY SERVICES AND DATA PROCESSING

Google Maps Platform

Google Maps is used for the following purposes:

• map display
• address verification
• restaurant positioning
• reverse geocoding

Google may process data under its own privacy policy.

Firebase Cloud Messaging

FCM is used for the following purposes:

• sending push notifications
• order and delivery notifications

Data processed:

• device token
• device identifier
• notification status

Posta Güvercini SMS Service

For SMS verification:

• telephone number
• verification code
• delivery status

may be transmitted to the third-party SMS provider.

DATA RETENTION

• For as long as the account remains active
• For the duration required by legal obligations
• For as long as required by the Service

is retained.

DATA SECURITY

• HTTPS encryption
• Hashed password storage
• Access control systems
• Security logs

USER RIGHTS (KVKK)

Users:

• data access
• correction
• deletion
• objection
• request for information

have these rights.

COOKIES AND SIMILAR TECHNOLOGIES

• Cookies
• localStorage
• sessionStorage
• session UUID
• Firebase token
• device identifier

may be used.

INTERNATIONAL DATA TRANSFERS

Due to Google Maps and Firebase services:

• data may be processed in the United States and other countries

CHILDREN'S PRIVACY

We do not knowingly collect data from users under the age of 13.

CHANGES

This Policy may be updated and becomes effective when published on the Platform.

CONTACT

kvkk@restodan.com

Akarca Mh. Mustafa Kemal Blv. No: 158A Fethiye/MUĞLA