Privacy Policy

1. Who we are

Mize is a restaurant management system operated by Alpas Technology Pvt. Ltd., a company incorporated and registered in Nepal with its office in Kathmandu. For anything in this policy, you can reach us at mizenepal@gmail.com.

This policy is written to meet our obligations under the Privacy Act 2075 (2018), the Electronic Transactions Act 2063 (2006), and other applicable Nepali legislation.

2. Information we collect

2.1 Verification information

Every account is subject to KYC or KYB verification before activation. To complete it we collect:

• Government-issued photo identification of the account holder or authorised representative
• Business registration documentation or PAN/VAT certificate
• Business name, legal form, and principal operating address
• Phone number and email address for correspondence

2.2 Business Data you put into Mize

When you run your restaurant on Mize you create Business Data: orders, bills, menu configurations, inventory entries, expenses, vendor records, staff records and attendance, customer records, and the reports generated from them. You own this data. We hold and process it only to provide the Services to you.

2.3 Information about your guests

If you use customer profiles or customer campaigns, you may enter details about your own guests, such as name, phone number, and visit history. For that information you are the controller and Mize acts on your instructions. You are responsible for having a lawful basis to collect it and to message those guests, and for honouring their requests to be removed.

2.4 Payment information

Subscription payments are processed by certified payment partners. We receive limited confirmation data to record the status of a transaction. We do not receive or store complete payment card numbers.

2.5 Technical and usage information

We collect information your browser or device sends automatically, including IP address, browser or app version, device type, operating system, pages or screens used, and timestamps. On the app, we may collect crash diagnostics and, if you allow notifications, a push token.

3. How we use information

We use the information above to:

• Verify your identity and your business, and activate your account
• Provide the Services, including billing, kitchen order routing, reporting and the other modules in your plan
• Take payment for your Subscription and send receipts and renewal notices
• Keep the Services secure, investigate abuse, and prevent fraud
• Provide support when you contact us
• Notify you about outages, mandatory updates, changes to these documents, and changes to pricing
• Understand how the Services are used so we can improve them
• Meet our legal, tax, and regulatory obligations in Nepal

We do not sell your personal information or your Business Data, and we do not use your Business Data to advertise to your guests.

4. Anonymised and aggregated data

We may use anonymised and aggregated usage data, in a form that cannot identify any individual person or business, for internal analytics, service improvement, and industry benchmarking. This data is not treated as your Business Data.

5. Who we share information with

We share information only where it is needed to run the Services or where the law requires it:

• Payment gateways and processors, including eSewa and Khalti, to take and confirm payments
• Infrastructure and hosting providers that store and serve the platform
• Communication providers that deliver email and SMS on our behalf, including messages you send through customer campaigns
• Third-party services you choose to connect, such as delivery platforms or accounting tools, which are governed by their own terms and privacy policies
• Professional advisers, and government or regulatory bodies, where we are required to disclose by law or valid legal process
• An acquirer or successor entity, in the event of a merger, acquisition, or sale of assets, subject to the protections in this policy

6. How long we keep information

We keep your Business Data for as long as your account is active. If your account is closed, your Business Data remains available for export for 30 days from the termination date, after which it is permanently deleted in line with our data retention schedule.

Verification records, invoices, and transaction records may be retained for longer where Nepali tax, accounting, or anti-fraud law requires it. Anonymised and aggregated data may be retained indefinitely, as it can no longer identify you.

7. How we protect information

We use technical and organisational measures appropriate to the risk, including encryption of data in transit, access controls, individual staff logins with attribution of actions, and regular backups. Payment processing is handled by certified partners in line with applicable payment security standards.

No system can be guaranteed completely secure. You are responsible for keeping your login credentials confidential and for the actions of staff you authorise. Tell us immediately at mizenepal@gmail.com if you believe an account has been accessed without permission.

8. Your choices and rights

Subject to Nepali law, you may:

• Ask for a copy of the personal information we hold about you
• Ask us to correct information that is inaccurate or out of date
• Export your Business Data from your account at any time, and for 30 days after closing it
• Ask us to delete your account and the personal information we are not required to keep
• Object to, or ask us to restrict, a particular use of your information
• Turn off non-essential cookies in your browser, and push notifications in your device settings

Write to mizenepal@gmail.com to make a request. We may need to verify your identity first. We aim to respond within 30 days. If a request concerns a guest of one of our restaurant customers, we will pass it to that restaurant, which is the controller of that information.

9. Cookies

We use cookies and similar technologies for session management, security, and performance analytics. Essential cookies are required for the platform to work and cannot be disabled. Non-essential analytics cookies can be managed through your browser settings. Blocking essential cookies will stop parts of the platform from functioning.

10. Children

Mize is a business tool and is not directed at children. You must be at least 18 years old to hold an account. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact mizenepal@gmail.com and we will delete it.

11. International use and data transfers

Mize is operated from Nepal. Some of our infrastructure and service providers may store or process data outside Nepal. Where that happens, we take reasonable steps to ensure the information remains protected to the standard described in this policy. If you use Mize from outside Nepal, you understand that your information is handled under Nepali law, and we will make reasonable efforts to comply with mandatory local protections that apply to you.

12. Changes to this policy

We may update this policy to reflect changes to the Services, our practices, or the law. Material changes will be announced on the Website, through an in-app notice, and by email to your registered address, at least 14 days before they take effect. The date at the top of this page shows when it was last updated.

13. Contact us

For any question, request, or complaint about privacy, contact:

• Mize Legal Department, Alpas Technology Pvt. Ltd.
• Kathmandu, Nepal
• Email: mizenepal@gmail.com
• Website: mizeos.com

If you are not satisfied with our response, you may raise the matter with the relevant authority in Nepal.