Privacy Policy

Cachera ("we", "our", or "us") is a venue operations platform providing restaurant management, point of sale, reservation systems, CRM, HR & payroll, ticketing, and WhatsApp Business API integration services to businesses across the UAE, Saudi Arabia, Syria, and the GCC.

This Privacy Policy explains what personal and business data we collect, why we collect it, how we use and protect it, and the rights you have with respect to your data. By accessing our website at cachera.io or using any Cachera service, you agree to the practices described in this policy.

If you use Cachera on behalf of a business, "you" refers to both you individually and the business entity you represent.

We collect the following categories of data:

• Business & Contact InformationName, business name, email address, phone number, country, and job title — provided when you contact us, request a demo, or sign up for a Cachera account.
• Usage & Technical DataPages visited, features used, session duration, browser type, operating system, IP address, and device identifiers — collected automatically via our platform and website analytics tools.
• Transaction & Operational DataSales records, reservation data, payroll figures, attendance logs, and other operational records generated when your business uses the Cachera platform.
• End-Customer Data (via your business)When you use Cachera's CRM or WhatsApp API features, your customers' names, phone numbers, and interaction history are stored in our system on your behalf. You are the data controller for this data; we process it only to provide the agreed service.
• CommunicationsMessages, emails, and chat conversations you send to our sales or support teams.

We use the data we collect to:

• Provide, operate, and maintain the Cachera platform and services
• Process demo requests, onboarding, and account setup
• Send transactional messages such as booking confirmations and system notifications
• Respond to customer support inquiries
• Send product updates, feature announcements, and promotional content (you may opt out at any time)
• Analyze product usage to improve our features and user experience
• Comply with applicable laws and regulations
• Detect, prevent, and address fraud, abuse, or security incidents

We do not sell your personal data to third parties. We do not use your end-customers' data for any purpose other than providing the services you have subscribed to.

Cachera integrates with the WhatsApp Business API, provided by Meta Platforms, Inc. When you enable this feature:

• Messages sent through CacheraAre routed through Meta's WhatsApp Business API infrastructure. Meta processes these messages subject to its own WhatsApp Business Policy and Meta Privacy Policy.
• Data shared with MetaPhone numbers and message content necessary to deliver messages are shared with Meta as part of normal WhatsApp API operation. Cachera does not share any additional personal data with Meta beyond what is required to transmit the message.
• Your responsibilityBy using Cachera's WhatsApp integration, you confirm that you have obtained the necessary consent from your end-customers to contact them via WhatsApp, and that you comply with the WhatsApp Business Policy and applicable data protection laws in your jurisdiction.
• Message templatesAll WhatsApp message templates used within Cachera must be approved by Meta before use. Cachera facilitates this process but is not responsible for Meta's approval decisions.

We share data only where necessary to provide our services or meet legal obligations:

• Service ProvidersTrusted sub-processors such as cloud hosting providers, analytics services, and payment processors that help us operate the platform. These providers are bound by confidentiality agreements and may only use data to provide services on our behalf.
• Meta / WhatsAppAs described in Section 4 above, for businesses that have enabled the WhatsApp API integration.
• Legal RequirementsIf required by law, court order, or government authority, we may disclose data to the extent required to comply.
• Business TransfersIn the event of a merger, acquisition, or sale of all or part of our business, data may be transferred as part of that transaction. We will notify affected users prior to such a transfer.

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law:

• Active account data is retained for the duration of your subscription.
• Transactional and operational data (sales, payroll, attendance) is retained for a minimum of five years to meet accounting and regulatory requirements common in GCC jurisdictions.
• Marketing communications data is retained until you unsubscribe or request deletion.
• End-customer data held on behalf of a business client is deleted within 90 days of contract termination upon written request.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain types of processing
• Data portability — receive a copy of your data in a machine-readable format
• Withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at sales@cachera.io. We will respond within 30 days. In some cases, we may need to verify your identity before fulfilling a request.

Data deletion requests: To request deletion of your personal data or the data of your end-customers, email sales@cachera.io with the subject line "Data Deletion Request". We will confirm deletion within 30 days.

We implement industry-standard technical and organizational measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Access controls and role-based permissions
• Regular security reviews and monitoring
• Secure cloud infrastructure hosted in reputable data centers

No method of transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at sales@cachera.io.

Our website uses cookies and similar technologies to:

• Maintain session state and remember your preferences
• Analyze website traffic and usage patterns (via anonymized analytics)
• Improve page performance and user experience

You can control cookie settings through your browser. Disabling cookies may affect the functionality of some parts of our website.

We may update this Privacy Policy periodically to reflect changes in our services, legal requirements, or business practices. The "Last Updated" date at the top of this page indicates when the policy was last revised. For significant changes, we will notify active account holders via email.

Continued use of Cachera services after an update constitutes acceptance of the revised policy.

For any questions, concerns, or requests related to this Privacy Policy or the handling of your data, please contact us: