Our commitments
- Your data is yours. We don't sell it, rent it or use it for advertising.
- We never store card numbers. Payments stay on your bank's terminal or a certified payment provider.
- You can leave at any time and take your data with you.
- We tell you what we use. Every service that handles your data is listed below.
- We answer to a real person. Email us and someone on the team replies.
What we store
- Your account: names, email addresses and roles of the people you invite.
- Your restaurant data: menu, orders, payments (amount and method, never card numbers), guests you record, bookings, stock and timesheets.
- Device information: a random device ID, device type and when it was last used, so we can enforce device limits and help with support.
The website at evrondesk.com doesn't use advertising trackers or cookies.
Who can see your data
- Your team, based on the role you give each person (owner, manager, cashier, waiter, kitchen, driver). Every void, refund and discount is logged with a name.
- Other restaurants: never. Each restaurant's data is isolated with row-level security in the database, so even a faulty or modified app can't read another restaurant's records.
- Our team: only when needed to support you or keep the service running, and never to sell or share.
How it's protected
- All traffic is encrypted with HTTPS (TLS).
- Data is stored encrypted at rest by our database provider.
- Sign-in uses email and password, with individual staff PINs on shared terminals and automatic screen locking.
- API keys are shown once and stored only as a one-way hash. Webhooks are signed so your systems can verify them.
- Shopify, WooCommerce and delivery-app connections are checked with their own secrets before any order is accepted.
Services we use
| Service | What it does for EvronDesk | Where |
|---|---|---|
| Supabase | Database and sign-in | Singapore |
| Cloudflare | Hosting for the app and website, network protection | Global |
| Resend | Sending account emails (sign-up, password reset, invites) | United States |
| Paddle | Selling EvronDesk subscriptions, invoices and tax | United Kingdom |
| Stripe | Online payments, only if a restaurant connects its own Stripe account | Global |
| Deliverect, UrbanPiper, Shopify, WooCommerce | Order connections, only if a restaurant turns them on | Varies |
Your choices
- Export: reports, sales and guest lists export to CSV at any time, and the API gives full programmatic access on plans that include it.
- Delete: email us from the owner's address and we'll delete your restaurant's data, except records we must keep for tax or legal reasons.
- Correct: owners and managers can edit their restaurant's data directly in the app.
Keeping working
EvronDesk keeps taking orders and payments when the internet drops, and syncs when it's back. See offline mode.
Reporting a problem
If you think you've found a security issue, email support@capradigitals.com with "Security" in the subject. We'll acknowledge it within two working days and keep you updated until it's fixed.
Frequently asked questions
Does EvronDesk store card numbers?
No. Card payments happen on your own bank terminal, or on Stripe's hosted checkout for online orders. EvronDesk only records that a card payment was made and how much.
Who owns the data in my EvronDesk account?
You do. You can export your sales, guests and reports at any time, and ask us to delete your restaurant's data when you leave.
Can other restaurants see my data?
No. Every restaurant's data is separated at the database level, so an account can only read the restaurants it belongs to.
Where is my data stored?
In a managed cloud database run by Supabase, hosted in Singapore, with the app and website served through Cloudflare's global network.