This Privacy Policy explains how Yexaa Technologies (operating the RexQR Platform — "RexQR," "we," "us," "our") collects, uses, discloses, and protects your personal information when you use our Platform.
1. Information We Collect
1.1 Information You Provide
Account Information: Name and email address, phone number, password and security credentials, profile photo (optional), date of birth.
Reservation Information: Dining preferences and restrictions, party size and special requests, guest names and contact information, reservation history.
Payment Information: Credit/debit card details, billing address, transaction history.
1.2 Information We Collect Automatically
Device Information: IP address, device type and operating system, browser type and version, unique device identifiers, mobile network information.
Usage Information: Pages viewed and features used, search queries and booking behavior, time spent on Platform, clickstream data.
2. How We Use Your Information
- Process and manage reservations
- Facilitate payments
- Send booking confirmations and reminders
- Enable communication with Venues
- Provide customer support
- Customize your experience and recommend Venues
- Generate AI-powered features
- Analyze usage patterns and develop new features
3. How We Share Your Information
3.1 With Venues
When you book, we share your name and contact information, party size and reservation details, special requests and preferences, and dietary restrictions.
3.2 With Service Providers
- Payment Processors (Stripe): Payment card information, transaction details
- Cloud Hosting (AWS): All Platform data for storage and processing
- Analytics (Google Analytics): Usage data and metrics
4. Data Retention
- Active Accounts: As long as your account is active
- Inactive Accounts: 3 years after last activity, then deleted or anonymized
- Transaction Records: 7 years (legal and tax requirements)
- Deleted Accounts: Deleted immediately when you confirm — there is no recovery window. See Account Deletion.
5. Your Rights and Choices
Access Your Data: View, download, or request a copy of all personal information. Email privacy@rexqr.com.
Delete Your Account: You can delete your account yourself, at any time, from inside the RexQR app. See Account Deletion for the exact steps and for what is deleted and kept.
Control Marketing: Click "unsubscribe" in any marketing email, or manage in Account Settings.
6. Account Deletion
This section applies to the RexQR mobile app, published by Yexaa Technologies.
6.1 How to request deletion
You can delete your account yourself, from inside the app. Deletion is immediate — we do not queue it for later review.
- Open the RexQR app and go to the Profile tab.
- Tap Delete my account at the bottom of the screen.
- Type your registered phone number (or email address) to confirm it is your account.
- If you have not signed in recently, you will be asked to verify your number again.
- Tap Delete my account to confirm. Your account is deleted straight away and you are signed out on every device.
If you cannot access the app, email privacy@rexqr.com from your registered address and we will complete the deletion for you within 30 days.
Two cases we will ask you to resolve first: if you are currently waiting in a venue's queue, cancel or finish that token first (the app links you straight to it), so venue staff can still call your name. If your account owns a business on RexQR, close the business from the dashboard or contact support@rexqr.com— deleting a business account affects staff, orders and payouts, so we handle it with you.
6.2 What is deleted
Deleted permanently and immediately, with no recovery period:
- Your RexQR account and verified phone number
- Your profile (name, email address, and profile photo)
- Your saved queue tokens, venues and searches held on your device
- Your language, city and theme preferences
- Push notification registrations for your devices
- All active sign-in sessions, on every device
6.3 What is kept, and for how long
A small amount of data is kept because the law requires it. Your personal identifiers are removed from these records, so what remains cannot be linked back to you:
- Order, invoice and tax records — kept for 7 years. The UAE Federal Tax Authority and Indian GST rules both require businesses to keep transaction records. These are the venue's record of a sale, not your profile, and your name and contact details are stripped from them when your account is deleted. Tax invoices are also sequentially numbered, and a gap in that sequence is itself a compliance failure.
- Queue tokens already issued to you at a venue.These are that venue's operational record of your visit. Your name is removed from them at deletion; only the venue can remove the token itself.
- Anonymised consent records. Where you previously granted or withdrew a consent, we keep the fact and its timestamp as evidence that we honoured your choice. These carry no name, phone number, email address, IP address or device identifier.
6.4 Deleting some data without deleting your account
Yes — you do not have to delete your whole account to remove data. You can clear individual saved venues, searches and queue tokens from within the app, and you can turn off push notifications at any time from the Profile tab. To have specific personal data erased while keeping your account, email privacy@rexqr.com and we will action it within 30 days, subject to the legal retention above.
7. How We Protect Your Data
Security Measures: Encryption during transmission (TLS/SSL), encryption at rest, secure data centers, regular security audits, and access controls.
Payment Security: We never store full credit card numbers. Our payment processing is PCI-DSS compliant.
8. Contact Us
- General Privacy Questions: privacy@rexqr.com
- Data Protection Officer: dpo@rexqr.com
- Mailing Address (UAE): Yexaa Technologies FZCO, IFZA Business Park, DDP, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai 341041, UAE
- Mailing Address (India): Yexaa Technologies Pvt Ltd, Cessna Business Park, Tower 1, Level 8, Umiya Business Bay, Outer Ring Road, Marathahalli, Bengaluru, Karnataka 560103, India