Privacy Policy

1. Who uses ServeX

ServeX is a restaurant operations and point-of-sale platform used by restaurants and their authorised staff. A restaurant controls the business and customer information entered by its staff. Where we process that information on the restaurant’s behalf, the restaurant is responsible for deciding why and how it is used, and Styx Corp acts as its service provider or processor.

2. Information we collect

• Account information: name, email address, role, permissions, restaurant, branch and authentication details. Passwords are stored as secure hashes; the Android app stores its login token using encrypted device storage.
• Restaurant information: business name, branches, menus, prices, taxes, tables, staff settings, subscription information and operational preferences.
• Order and customer information: orders, items, KOT and billing status, payment method and amount, table, notes, and customer details entered by the restaurant such as name, phone number, email and delivery address.
• Technical information: IP address, request and error logs, browser or device type, operating-system information, timestamps and security events needed to operate and protect the Services.
• Support communications: messages and information supplied when requesting assistance.

3. Android permissions and Bluetooth printing

The ServeX Android app requests Bluetooth scan and connect permissions only when needed to discover, connect to and print through a compatible Bluetooth receipt printer. On older Android versions, Android may require location permission to perform Bluetooth discovery. ServeX does not use this permission to determine or track your physical location. Printer names and hardware addresses used for connection remain on the device and are not uploaded to ServeX servers. Bluetooth access can be denied or revoked through Android Settings, but printing will then be unavailable.

4. How we use information

• Provide authentication, POS, orders, KOT, billing, table management, reporting and printing functionality.
• Synchronise authorised changes across the website and app, including real-time order updates.
• Manage subscriptions, enforce plan access and process or record payments.
• Maintain service reliability, troubleshoot errors, prevent abuse and protect accounts.
• Provide support, service notices and legally required communications.
• Comply with applicable law and enforce our agreements.

We do not sell personal information or use restaurant customer data for third-party advertising.

5. When information is shared

We may disclose information only as reasonably necessary:

• to the restaurant account owner and authorised users according to their permissions;
• to hosting, database, storage, email, error-monitoring, real-time messaging, payment and support providers that process information for us under appropriate obligations;
• when a restaurant activates an optional integration or asks us to share information;
• to comply with law, lawful process, or protect users, the public and the Services; or
• as part of a merger, financing, acquisition or transfer of the business, subject to appropriate safeguards.

6. Storage, security and international processing

Information is transmitted using HTTPS and access is restricted using authentication and role-based permissions. We use reasonable administrative, technical and organisational safeguards, but no internet service can guarantee absolute security. Service providers or infrastructure may process information in countries other than yours; where required, we use appropriate safeguards for such transfers.

7. Retention

We retain information while the relevant restaurant account is active and for as long as needed to provide the Services, meet legal, tax and accounting requirements, resolve disputes, prevent fraud and maintain backups. Retention periods depend on the type of information and applicable law. When information is no longer required, we delete or anonymise it using commercially reasonable measures.

8. Access, correction and deletion

Restaurant staff and customers should first contact the restaurant that collected their information. Restaurant account owners may request access, correction, export or deletion of their ServeX account and associated personal information by emailing support@stxs.cloud from the registered account email. We may verify identity and retain information where required by law or for legitimate security, billing and record-keeping purposes. Uninstalling the Android app removes its local app data but does not by itself delete information held in the restaurant’s ServeX account.

9. Cookies and local storage

The website uses cookies or similar browser storage for authentication, security, language, preferences and essential functionality. The Android app uses device storage for the secure login token, selected branch and printer connection preferences. We do not use this app data for advertising.

10. Children

ServeX is a business service and is not directed to children. We do not knowingly collect personal information directly from children through the Android app. Restaurants must comply with applicable law when entering customer information into the Services.

11. Changes to this policy

We may update this policy to reflect changes to the Services, providers or law. We will publish the revised policy here and update the effective date. Material changes may also be communicated through the Services or by email where appropriate.