Privacy Policy & Data Security

To deliver high-precision sales intelligence, menu engineering metrics, and AI assistant reporting, Marcalyx Ltd collects the following categories of information:

• Account Credentials: Name, business email, encrypted password hash, phone number, and restaurant/branch details.
• Daily Shift Sales Data: Point-of-sale registers, shift reports, CSV spreadsheets, Excel workbooks, menu item quantities, gross sales, declared cash handovers, and POS credit terminal amounts.
• Telegram Channel Data: Telegram user IDs, chat identifiers, and voice note recordings (processed strictly for transcription and parameter extraction).
• Google Account Tokens: When you connect Google Sheets Live Sync, OAuth access and refresh tokens are stored using AES-256 encryption.

Marcalyx Ltd enforces strict multi-tenant data partitioning at the database level using PostgreSQL Row-Level Security (RLS). Under zero circumstances is one restaurant's financial sales, dish prices, ingredient margins, or POS variance exposed to, shared with, or aggregated into another tenant's workspace.

All data transmitted between your browser, Telegram, POS devices, and our backend is encrypted in transit using TLS 1.3 and encrypted at rest using AES-256.

When our AI engine (powered by local Faster-Whisper, Gemini, OpenAI, or Grok) parses unstructured shift spreadsheets or voice notes:

• Zero Customer Model Training: Your financial numbers, dish names, and operational spreadsheets are NEVER used to train public or foundation AI models.
• Deterministic Math Safety: Mathematical calculations (totals, averages, variances, ranking) are executed deterministically by our proprietary calculation service — AI is used solely for natural language parsing and structural extraction.
• Voice Note Ephemeral Processing: Voice audio sent via Telegram is transcribed in temporary memory and immediately discarded.

Payment processing and recurring subscriptions are handled securely by Paystack (a Stripe company). Marcalyx Ltd does not store raw credit card numbers or CVVs on our servers. We only store anonymized card tokens, brand identifiers (e.g. Visa/Mastercard), and the last 4 digits for billing management and invoice generation.

You maintain 100% intellectual property ownership of your restaurant sales data. You may export your complete historical reports (in Excel, CSV, or PDF format) or request permanent erasure of your account and all associated workspace records at any time by contacting our data protection officer.