Privacy & Security

This page explains what personal information Beqora collects, why we collect it, how we protect it, and the choices you have. It applies to the Beqora website, mobile web app, and related services.

1. Information we collect

• Account data — name, email, and a hashed password when you sign up. Optional: profile photo, nickname, phone/WhatsApp number, and preferred language.
• Delivery data — the delivery addresses you save and, only when you tap "Use my location", your approximate GPS coordinates so we can calculate the delivery distance.
• Order data — items you order, the restaurant, order totals, delivery fees, order status, and (for group orders) the members and their sub-carts.
• Activity data — likes, comments, reviews, ratings, saved posts, saved restaurants, and search queries used to power our smart-search and feed ranking.
• Restaurant data — for partners: business name, WhatsApp number, cuisine, city, address, hours, delivery configuration, menu items, and posts.
• Device & log data — IP address, browser type, and basic request logs used for security, rate-limiting, and abuse detection.

2. How we use your information

• To create and secure your account, authenticate you, and let you sign in.
• To display a personalised feed, sort restaurants by distance, and calculate delivery fees.
• To transmit your order to the chosen restaurant via WhatsApp and let them contact you.
• To send transactional emails (email verification, password reset, security alerts) from notify.beqora.com.
• To translate user-generated content into your preferred language (English or French).
• To prevent fraud, spam, and abuse (rate limits, suspicious-activity alerts, admin moderation).
• To improve the platform via aggregated, non-identifying analytics.

3. Sharing your information

• Restaurants receive the details needed to fulfil your order: your name, delivery address (or table number), phone/WhatsApp handle, order items, and any note you add.
• Group members can see each other's display name, avatar, and items inside a shared group order.
• Service providers that host our infrastructure, send our emails, and provide AI-assisted translation and search process data on our behalf under confidentiality obligations.
• We do not sell your personal information. We do not run third-party advertising trackers.
• We may disclose information when required by law or to protect the rights, safety, or property of Beqora, our users, or the public.

4. Security

• All traffic is served over HTTPS.
• Passwords are hashed by our authentication provider — Beqora staff never see your password.
• Database access is protected by row-level security (RLS) so users can only read and write their own data, and admin-only tables are inaccessible from the public API.
• Sensitive endpoints (login, password reset, order submission) are rate-limited, and repeated failures trigger security alerts.
• Uploaded images are stored in a private bucket and served through signed URLs.

5. Data retention

We keep account data for as long as your account is active. Order records may be retained for accounting, dispute resolution, and legal compliance for up to 5 years after the order. Aggregated analytics may be kept indefinitely because they cannot identify you.

6. Your rights & choices

• Access & correction — view and edit your profile, addresses, and preferences from Account.
• Deletion — delete your account from Account → Delete my account. Restaurant owners can safely delete their restaurant from the dashboard danger zone.
• Location — you can revoke location access at any time in your browser settings; Beqora will fall back to your saved address.
• Email — transactional emails cannot be turned off, but you can opt out of non-essential notifications from Account → Notifications.
• Language & theme — controlled from your account settings; the choice is stored locally in your browser.

7. Children

Beqora is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. International transfers

Beqora is operated primarily for users in Cameroon and neighbouring markets, but our infrastructure providers may process data on servers located outside your country. Where required, we rely on contractual safeguards to protect your data during those transfers.

9. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on this page and the "Last updated" date will change. Continued use of Beqora after an update means you accept the revised policy.

10. Contact us

For privacy questions, data-access requests, or security reports, email us at privacy@beqora.com.