Welcome to Akorlis.
This Privacy Policy explains how Akorlis collects, uses, stores, shares and protects personal information when you use our website, application, dashboard, QR menu pages, ordering features and related services available through https://akorlis.com and https://akorlis.com/gr.
This Privacy Policy is intended to address privacy requirements for users in Greece, the European Economic Area, the United States and other regions where our Service may be accessed.
1. Our Role
Depending on the context, Akorlis may process personal information in different roles.
For account registration, billing, payments, platform analytics, security, support and operation of the Akorlis Service, Akorlis acts as the controller or business responsible for the processing.
For personal information collected from End Users through QR menus, waiter-call features, orders, delivery or takeaway workflows on behalf of a Business, the Business may be the controller or business responsible for the information, and Akorlis may act as a processor, service provider or vendor, depending on the applicable law and processing activity.
Businesses using Akorlis are responsible for providing their own privacy notices to their customers where required by law.
2. Personal Information We Collect
2.1 Business account information
We may collect the following information from Businesses, account owners, administrators and staff users:
- name,
- email address,
- phone number,
- password in hashed form,
- business name,
- business address,
- billing information,
- tax/VAT information,
- subscription plan,
- payment status and transaction information,
- support communications,
- account settings,
- user roles and permissions,
- login and security information.
2.2 Business Content
Businesses may upload, create or manage content such as:
- store names,
- logos,
- images,
- menu items,
- categories,
- prices,
- descriptions,
- ingredients,
- allergen notices,
- translations,
- menus,
- table information,
- service areas,
- business hours,
- ordering settings.
Some Business Content may include personal information if a Business chooses to include it.
2.3 End User information
When an End User scans a QR code, views a menu, calls staff, places an order or uses a page powered by Akorlis, we may collect:
- IP address,
- cookies and session data,
- device type,
- browser type,
- operating system,
- language,
- date and time of access,
- QR code, table or service area information,
- order details,
- selected products,
- order notes,
- name, email address, phone number or delivery address if requested by the Business for delivery, takeaway, reservation or similar functionality.
2.4 Technical, usage and log data
We may collect technical information for security, diagnostics, performance and service operation, including:
- IP address,
- log files,
- browser information,
- device information,
- application errors,
- performance data,
- security events,
- access timestamps.
3. How We Use Personal Information
We use personal information to:
- create and manage accounts,
- provide QR menu and ordering functionality,
- manage subscriptions,
- process payments,
- provide customer support,
- operate, secure and improve the Service,
- prevent fraud, abuse and unauthorized access,
- analyze usage and performance,
- measure advertising and marketing performance where permitted,
- comply with legal, tax and accounting obligations,
- communicate with Businesses about the Service,
- enforce our Terms of Service and protect legal rights.
4. Legal Bases for Processing
Where GDPR or similar laws apply, our legal bases may include:
- performance of a contract,
- compliance with legal obligations,
- legitimate interests, including security, service operation, fraud prevention and service improvement,
- consent, especially for certain cookies, analytics or advertising technologies,
- establishment, exercise or defense of legal claims.
5. Payments
Payments may be processed through Stripe, PayPal or bank transfer. We do not store full payment card numbers on our own servers. Payment providers process payment information according to their own terms and privacy policies.
We may store transaction details, payment status, invoice details, billing information, amounts and payment dates for accounting, tax, legal and operational purposes.
6. Cookies, Analytics and Advertising Technologies
We use cookies and similar technologies for:
- essential website and dashboard functionality,
- session management,
- security,
- analytics,
- advertising measurement,
- spam and bot protection.
The technologies we may use include:
- Google Analytics,
- Google Ads tracking,
- Meta Pixel,
- Cloudflare,
- Cloudflare Turnstile.
Some cookies are strictly necessary for the Service to function. Analytics and advertising cookies may be used where permitted by law and, where required, based on consent.
You can usually control cookies through your browser settings. Where a cookie banner or consent tool is available, you may manage your choices through that tool.
7. Hosting, Cloudflare and International Transfers
Akorlis is hosted on a cloud server in the United States and uses Cloudflare for security, performance, network protection and content delivery.
As a result, personal information may be transferred to, stored in or processed in the United States or other countries outside your country of residence, including outside the European Economic Area.
Where required, we use appropriate safeguards for international transfers, which may include contractual safeguards, technical and organizational measures and other transfer mechanisms recognized under applicable law.
8. How We Share Personal Information
We may share personal information with:
- hosting and infrastructure providers,
- Cloudflare,
- payment processors,
- analytics and advertising measurement providers,
- technical service providers,
- support and professional service providers,
- accountants, legal advisors and business advisors,
- government authorities, courts or regulators when required by law,
- parties involved in a business transaction, such as merger, acquisition, restructuring or sale of assets.
We do not sell personal information for money. However, certain advertising technologies, pixels or cookies may be considered "sharing," "targeted advertising," "cross-context behavioral advertising," or similar concepts under some U.S. state privacy laws.
9. U.S. State Privacy Rights
Depending on your U.S. state of residence and subject to applicable thresholds and exemptions, you may have certain rights regarding your personal information, including the right to:
- know or access personal information we collect about you,
- request deletion of personal information,
- request correction of inaccurate personal information,
- obtain a copy of your personal information in a portable format,
- opt out of sale, sharing, targeted advertising or certain profiling activities,
- limit certain uses of sensitive personal information, where applicable,
- not be discriminated against for exercising privacy rights.
To exercise these rights, contact us at [email protected].
If you are an End User of a Business that uses Akorlis, we may need to refer your request to that Business because the Business may be responsible for your information.
10. California Privacy Notice
This section applies to California residents where the California Consumer Privacy Act, as amended, applies.
Categories of personal information collected
Depending on how you use the Service, we may collect:
- identifiers, such as name, email address, phone number, IP address and account identifiers,
- commercial information, such as subscription, transaction and order-related information,
- internet or electronic network activity information, such as device, browser, usage and log data,
- geolocation-related information at a general level inferred from IP address,
- professional or business-related information, such as business name, business address and role,
- user-generated or uploaded content,
- inferences derived from usage data for analytics and service improvement.
Sources
We collect information directly from you, from Businesses using the Service, from End Users interacting with QR menus, from devices and browsers, from payment processors and from analytics, advertising and infrastructure providers.
Purposes
We use personal information for the purposes described in Section 3 of this Privacy Policy.
Disclosure
We may disclose personal information to the categories of service providers and third parties described in Section 8.
Sale or sharing
We do not sell personal information for money. Use of advertising technologies such as Google Ads tracking or Meta Pixel may be considered "sharing" under California law. Where required, you may opt out by adjusting cookie choices, browser settings, platform settings, or by contacting us at [email protected].
Sensitive personal information
Akorlis is not intended to collect sensitive personal information from End Users, except where a Business chooses to request information through its own ordering or customer workflow. We do not use sensitive personal information for purposes that require a right to limit under California law, unless otherwise disclosed.
11. Data Retention
We retain personal information only for as long as necessary for the purposes described in this Privacy Policy or as required by law.
As a general guideline:
- Account data is retained while the account is active and for a reasonable period after deletion.
- Invoices, tax and accounting records are retained as required by applicable tax and accounting laws.
- Order data is retained as needed for operational, accounting or legal purposes of the Business.
- Server logs are typically retained for 30 to 180 days, unless longer retention is needed for security or legal reasons.
- Backups are typically retained for 30 to 90 days.
12. Security
We use reasonable technical and organizational measures to protect personal information, including access controls, secure connections, restricted access, monitoring, security tools and other safeguards appropriate to the nature of the Service.
No method of transmission or storage over the internet is completely secure. Businesses are responsible for using strong passwords, controlling staff access and maintaining appropriate internal security practices.
13. Children's Privacy
The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete it.
Businesses must not use Akorlis to knowingly collect personal information from children in violation of applicable law.
14. Your Privacy Choices
You may have choices regarding:
- account information updates,
- cookie preferences,
- marketing communications,
- analytics and advertising tracking,
- privacy rights requests under applicable law.
You may contact us at [email protected] to make a request. We may need to verify your identity before responding.
15. Do Not Track and Global Privacy Signals
Some browsers or devices may transmit "Do Not Track" or global privacy preference signals. Where required by applicable law, we will process legally recognized opt-out preference signals in accordance with applicable requirements and the technical capabilities of our systems and vendors.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The latest version will be posted on our website with an updated "Last updated" date.
For material changes, we may provide additional notice by email, dashboard notice or another reasonable method.
17. Contact Us
For questions about this Privacy Policy or to exercise privacy rights, contact us at:
Akorlis
Email: [email protected]
Country: USA