How SunEats collects, uses, and protects the data you and your customers trust us with — written plainly, without the legal fog.
SunEats ("SunEats", "we", "us", or "our") provides a restaurant point-of-sale and management platform used by restaurants, cafés, and food businesses across Iraq. This Privacy Policy explains what information we collect when you use our website (zuueats.com) and our POS software, why we collect it, how we handle it, and the choices you have.
This policy covers two kinds of people: our customers — the restaurant owners and staff who sign in and run their business on SunEats — and the guests of those restaurants, whose order details pass through our system when a restaurant serves them. For guest data, the restaurant is the primary decision-maker (the "controller") and SunEats acts on its behalf as a processor.
By using SunEats, you agree to the practices described here. If you don't agree, please don't use the service. This document is provided for transparency and is not a substitute for professional legal advice.
We collect only what we need to run the service, keep it secure, and support you. That falls into a few categories.
When you sign up or we set up your account, we collect your name, business name, phone or WhatsApp number, email address, role (owner, admin, cashier, and so on), and login credentials. Passwords are stored only in hashed form — we never see them in plain text.
To run your business you give us information about it: branch names and addresses, menus, categories, items, prices, recipes, ingredients, inventory levels, tax settings, staff profiles, shifts, and payroll details you choose to record.
As orders flow through the POS we process order contents, amounts, order type (dine-in, pickup, delivery), timestamps, payment method, and — where a restaurant chooses to capture it — a guest's name, phone number, or delivery address. We do not require guests to create accounts.
Like most online services, we automatically record technical information when you use SunEats: IP address, device and browser type, operating system, language setting, pages and features used, and diagnostic logs. This helps us keep the service reliable, fix problems, and prevent abuse.
We use the information above to:
We do not sell your data or your customers' data, and we do not use it for advertising.
Subscriptions to SunEats are paid through FIB, the payment methods commonly used in Iraq. When you pay, you interact directly with those providers. SunEats does not collect or store card numbers or full banking credentials. We receive only what we need to confirm a payment — such as a transaction reference, amount, and status.
Any card or bank details you enter are handled by the payment provider under their own terms and privacy practices, which we encourage you to review.
We share data only when it's needed to run the service, and only to the extent required. We never sell it. Your information may be shared with:
We keep your information for as long as your account is active and for as long as we need it to provide the service. After you close your account, we retain certain records — such as transaction and tax data — for the period required to meet our legal and accounting obligations, then delete or anonymise them. You can ask us to delete data sooner where we are not legally required to keep it.
We protect your data with industry-standard measures: encryption in transit, hashed passwords, role-based access so staff see only what their role allows, access controls on our systems, and regular backups. No system is ever perfectly secure, but we work continuously to safeguard your information and to respond quickly if something goes wrong. If a breach affects you, we will notify you as required by law.
You can ask us to:
To exercise any of these, email us at hello@suneats.app and we'll respond within a reasonable time. If your request concerns data that belongs to a restaurant you order from as a guest, we may direct you to that restaurant, since it controls that information.
SunEats operates offices in Iraq, Turkey, and the USA, and works with service providers that may be located outside Iraq. This means your information may be processed in, or accessed from, countries other than your own. Wherever data is handled, we apply the protections described in this policy and take reasonable steps to ensure it stays safe.
SunEats is a business tool intended for restaurant owners and staff. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us information, contact us and we will delete it.
We may update this Privacy Policy from time to time as our service and the law evolve. When we make material changes, we'll update the "Last updated" date above and, where appropriate, let you know through the service or by email. Continuing to use SunEats after an update means you accept the revised policy.
Questions about this policy or how we handle your data? We're happy to help — in Arabic, Kurdish, or English. Email hello@suneats.app or reach us through our contact page. WhatsApp is the fastest way to get a reply.
Questions? Get in touch — a real person will get back to you.
