Privacy policy

Who we are

Sofrito is made by LefamTech (“we”). This policy covers the Sofrito apps for iPhone, iPad, Android, Windows, macOS and Linux, the Sofrito web app, Sofrito Cloud, Sofrito Hub and this website. Write to privacy@sofritopos.app with any question.

Who decides what happens to the data

Restaurants use Sofrito to run their business. For what a restaurant enters about its team, its guests and its sales, the restaurant is the controller and decides why and how the data is used. When the restaurant uses Sofrito Cloud, LefamTech is its processor: we store and process that data only to provide Sofrito to the restaurant, on its instructions.

If you are a guest or an employee of a restaurant that uses Sofrito, contact the restaurant first; we help it answer you. LefamTech is the controller for the details of the people who manage a restaurant’s account with us, for partner accounts and for messages sent through this website.

What Sofrito stores

• The restaurant’s business: its name, address, tax number and logo, menu, prices and photos, floor plans, orders, kitchen tickets, payments, refunds, cash sessions, fiscal documents and day closes, stock, suppliers and reports.
• The team: names, roles and permissions, an optional photo, email and phone if entered, hourly rates and time clock entries. Staff PINs are never stored as typed: Sofrito keeps only a keyed hash (HMAC) of each PIN. Back-office passwords are stored as salted PBKDF2 hashes, and sign-in sessions as SHA-256 hashes of their tokens.
• Guests, only what the restaurant enters: name, company, phone, email, tax number, address, birthday, notes, allergies, tags, marketing consent, loyalty points, number of visits and amount spent, bookings and waitlist entries, and gift card balances. When a guest asks for an invoice with a tax number, the name and number appear on that fiscal document.
• Payments: the method, amount, tip and reference. For a card charged on the restaurant’s own terminal, Sofrito may record the card brand, the last four digits and the authorisation code. Sofrito never receives full card numbers and does not process card payments itself.
• Devices: each paired device’s name and role (till, handheld, kitchen display), platform (for example iPad or Android), app version, when it was last online, and the network (IP) address it was paired from. Back-office sign-ins record the browser or app name and version (the user agent).
• Activity: an audit log of sensitive actions, such as voids, discounts, refunds and changes to settings, with who did them, when, on which device and who approved them.

Sofrito does not use your location, contacts or microphone, and does not send emails or text messages to guests.

What stays on your device

The app keeps on the device the address of your Sofrito server, the device’s pairing token, the signed-in session, the language and the theme. Items you have tapped but not yet sent to the kitchen are kept in temporary storage, so nothing is lost if the app reloads. When you add a picture, for example a dish photo or your logo, the app opens your device’s photo picker or camera and uploads only the picture you choose.

Where the data is kept

• Sofrito Cloud runs on Cloudflare. Each restaurant has its own database (a Cloudflare Durable Object), kept in the Cloudflare data centre that hosts such databases closest to where the restaurant first used Sofrito, which may be in another country. A small shared database holds only what must be global: which restaurants an email address can sign in to, short-lived pairing codes, partner accounts and website enquiries. All traffic to Sofrito Cloud uses HTTPS.
• Sofrito Hub runs on a computer in the restaurant. The data stays in a database file and daily backups in the hub’s data folder on that computer, and devices reach it over the restaurant’s own network. LefamTech has no access to it.
• Hub linked to Sofrito Cloud: if the restaurant links its hub to a Sofrito Cloud account (Back office, Settings, Cloud sync), the hub copies its data to Sofrito Cloud, where it is kept as described above. The restaurant can unlink at any time.
• Printers: tickets and receipts go to the restaurant’s printers. Star CloudPRNT printers fetch them from Sofrito Cloud over the internet.

Who we share it with

• Cloudflare, Inc., which hosts Sofrito Cloud and this website as our sub-processor. To deliver and protect the service it processes connection data such as IP addresses. Our request logs there are kept for up to 7 days.
• The restaurant’s Sofrito partner, if a partner set the restaurant up. The partner portal shows the partner the restaurant’s name, country and plan and when it last used Sofrito, not its orders, team or guests. A partner who installs or supports Sofrito in your restaurant may work in your back office when you allow it.
• The restaurant’s own tools, when the owner creates an API key in Back office, Settings, API access. The restaurant decides what those tools receive.
• Authorities, when the law requires it, for example a valid court order.

We do not sell data, rent it, or share it with advertisers or data brokers.

No ads and no tracking

The Sofrito apps contain no advertising, no third-party analytics and no tracking code, and we do not track you across other companies’ apps or websites. This website sets no cookies of its own and loads no third-party scripts: its fonts and images come from our own domain.

Website enquiries

When you send the “Book a walkthrough” form, we store your name and email and anything else you add (phone, restaurant, country, number of locations, message) so we can reply. We may pass your enquiry to the Sofrito partner for your country so they can set up the walkthrough. Enquiries that do not lead to a customer relationship are deleted after 24 months, or sooner if you ask.

How long we keep it

• A restaurant’s data stays in Sofrito Cloud while the restaurant uses it, until the restaurant deletes it or closes its account.
• In Sofrito Cloud, expired sign-in sessions are removed 7 days after they expire, and pairing codes a day after they expire.
• Demo restaurants opened from the app or this website are deleted automatically after 7 days.
• Fiscal documents cannot be edited or deleted in Sofrito, because tax law requires restaurants to keep them for the period their country sets. Export them before closing an account.
• When a restaurant closes its Sofrito Cloud account, we delete its restaurant database 30 days later, keeping only what the law requires us to keep.

Your choices and rights

• Export: restaurants can export their data at any time: reports and guest lists as CSV, fiscal files (SAF-T where the country uses it) and a full export of the restaurant.
• Guests: in Back office, Guests & loyalty, the restaurant can export a guest’s data or erase the guest. Erasing clears the name, contact details, tax number, address, birthday, notes, allergies and tags, takes the guest off every list, and anonymises their bookings and waitlist entries. Visit and spend totals stay as anonymous figures, and documents the restaurant must keep by law are not changed.
• Team members can ask their restaurant to correct or delete their details. A manager can archive a person in Back office, Team & roles.
• Anyone can write to privacy@sofritopos.app to ask what we hold about them, or to have it corrected or deleted. We reply within 30 days. In the EU, the EEA and the UK you can also complain to your data protection authority; in Portugal that is the CNPD.

Delete your Sofrito Cloud account

1. 1
   Export what you need to keep: in the back office, download your reports, fiscal files and guest list.
2. 2
   In the back office, open Settings, then Account. Type the restaurant’s name and your password, and choose Close the account. Only an owner can do this.
3. 3
   Everything keeps working for 30 days, and you can keep the account until then. After that, we delete the restaurant, its team, guests and orders from Sofrito Cloud.

You can also write to privacy@sofritopos.app from the email address you sign in with, naming the restaurant. We confirm by email and delete it within 30 days.

A restaurant that uses only Sofrito Hub deletes its data itself: uninstall the hub and delete its data folder on that computer.

Security

Sofrito Cloud is served only over HTTPS, each restaurant’s data sits in its own database, and passwords, PINs and tokens are stored only as hashes. Voids, refunds and other sensitive actions can require a manager’s PIN and are written to the audit log. On site, keep the staff Wi-Fi private and separate from guest Wi-Fi. Report a vulnerability to security@sofritopos.app.

Children

Sofrito is a tool for restaurant businesses and is not meant for children. We do not knowingly collect children’s data.

Changes to this policy

We post changes on this page and update the date at the top. When a change matters, we tell restaurant owners by email before it applies.