1. Who we are and scope
Smart City Group for Information Technology L.L.C (Smart City Group L.L.C), Tripoli, Libya, provides QR Menu Libya and qr.scg.com.ly. This policy explains data handling when creating a restaurant account, managing menus and cashier operations, using public menus and contacting support.
The restaurant receiving your order uses order information to serve you. Smart City Group provides the technical platform and manages account, operational and support data.
2. Information we process
- Account and contact information: name, email, phone number, sign-in information, account and restaurant identifiers. Passwords are stored as hashes for verification.
- Restaurant and menu information: name, address, city, location and contact links, opening hours, logos, cover and product images, categories, prices, availability and files you choose to upload.
- Orders and billing: items, quantities, totals, table numbers, notes, order and payment status, customer name and phone number when required by the restaurant or entered with an order, and service subscription and payment records.
- Operational and device information: IP address, browser information, activity and error logs, sessions, device name, app version, push notification token and its enabled status when notifications are used.
- Support: messages, attachments and information you send to resolve an issue or make a data request.
3. How we use information
We use information to sign users in, manage accounts and permissions, publish menus, operate orders, cashier and table QR features, administer subscriptions and billing, import menus, deliver operational alerts, provide support, analyse website usage, prevent abuse and resolve errors.
Some features cannot operate without the information they need. Customers do not need to install the app simply to browse a public menu.
4. Published content and customer information
Information you publish in a menu, including food photos, prices and restaurant contact details, is accessible to people who open its link or QR code. Do not include private or confidential information in content intended for publication.
Order information is available to the relevant restaurant and users authorised to manage orders. Platform administrators or support staff may access relevant information to operate the service and resolve issues. Customer names and phone numbers are not intended for publication in the public menu.
5. External services and sharing
| Service | Purpose and relevant information |
|---|---|
| Hosting and infrastructure | Storage and operation of service data, websites, databases and logs. |
| Apple Push Notification service | Delivery of notifications using a device token and notification content. |
| Cloudflare | Processing menu images, PDFs and extracted text when smart import is used. |
| Google Analytics | Website and menu page visits, interactions, browser information and cookie identifiers. |
| Telegram and email | Operational alerts to administrators when enabled; these may contain account or restaurant information and details of the relevant event. |
| Messages you choose to send when contacting us through WhatsApp. |
These providers may operate or process information outside Libya. Their services are also subject to their privacy policies. We may disclose information when legally required or to protect the service and users’ rights.
6. AI-assisted menu import
When you use smart import, the files you select are uploaded to our server and sent to Cloudflare services to extract text and structure categories, items and prices. Processing may include the complete file and any names, phone numbers or other information it contains.
Only upload menus you are authorised to process, and remove unnecessary personal information first. Review the results before approving their addition, as extraction can contain errors. You can add products manually without using smart import.
7. Permissions and notifications
When you use a feature requiring the camera, photos or files, we process the content you choose to capture or upload for that feature. Manage permissions and notifications in your device settings. Disabling notifications stops alerts appearing on that device; it does not cancel your account or delete your data.
A restaurant address or location link you enter forms part of its business profile.
9. Retention and deletion
We retain account, menu and order information while needed to provide the service and administer the account. Account deletion removes the related account and restaurant data, operational records and uploaded files covered by the deletion process. Some data may remain in backups or records needed for security or legal obligations until no longer required or removed through their retention cycle.
External services may retain copies or logs under their own policies. Deleting an account does not mean every external copy is immediately erased. Contact us below to ask about remaining information or request its deletion.
Use the account deletion option in the app if available in your version, or email info@scg.com.ly with the subject “Account deletion request”, your restaurant name and registered email. We verify ownership before acting. Uninstalling the app does not delete your account.
10. Your choices and privacy requests
You can edit restaurant details and menu content through the management tools. To request access, correction, a copy or deletion of your information, or withdraw permission you previously gave, contact info@scg.com.ly. We may request appropriate information to verify identity, but will not ask for your password.
Customers should identify the restaurant and order reference, if available. We may need to coordinate with the restaurant on requests concerning its records. Some requests depend on legal obligations and the rights of others.
11. Security, children and updates
The service uses HTTPS, sign-in and permission checks, and password hashing to protect access. No transmission or storage method guarantees absolute security.
Management tools are intended for restaurant and café operators and authorised staff, not children under 13. Contact us if you believe a child has provided personal information so we can consider its removal.
We may update this policy as the service or data practices change. The latest update date appears at the top of this page.
12. Privacy contact
Smart City Group for Information Technology L.L.C
Tripoli, Libya
Email: info@scg.com.ly
Phone and WhatsApp: +218 94 257 6803