Privacy Policy
This Privacy Policy explains how Shaahi Biryani ("we," "us," or "our") collects, uses, and protects your information when you use our mobile app and website (together, the "Services"). By using the Services, you agree to this policy.
Information We Collect
- Account information — your name, email address, and phone number when you create an account.
- Order information — items you order, order history, pickup or delivery selection, and any delivery address and special instructions you provide.
- Payment information — card payments are processed by our payment provider, Stripe. We do not store or have access to your full card number; Stripe handles card data directly and securely.
- Loyalty & rewards — points you earn and redeem, and your rewards tier.
- Device & notification data — if you enable notifications, a device token used to send you order-status updates.
- Usage information — basic technical data (such as app version and general activity) needed to operate and improve the Services.
Ask Shaahi — AI Dining Concierge
Our website and mobile app include Ask Shaahi, an AI-powered dining concierge that helps you explore the menu, ask questions, and get recommendations.
When you choose to use Ask Shaahi, the messages you send and the relevant conversation context are sent to our AI service provider, Anthropic, so a reply can be generated. Alongside your message we send only what the conversation needs: the earlier messages in that conversation, whether you are ordering pickup or dine-in, your party size, whether you are using the app or the website, and which part of the menu you are looking at.
Our implementation is designed not to send your name, email address, phone number, delivery address, payment information, account ID, order history, or precise location as part of an ordinary Ask Shaahi conversation. Please do not type sensitive personal information or payment details into Ask Shaahi.
We do not store the text of Ask Shaahi conversations in our restaurant database. We keep limited operational information — such as technical request data, the length of a message, which service it came from, and pseudonymised identifiers — to keep the feature reliable and to prevent abuse.
Anthropic handles this information under its own commercial API terms. Anthropic's published terms state that data sent through its API is not used to train its models by default, and that API inputs and outputs are automatically deleted within 30 days, subject to limited exceptions such as where longer retention is required by law or to enforce its usage policy. See Anthropic's Privacy Center.
Cookies, Analytics & Advertising
Our website uses cookies and similar browser storage. Some are needed for the site to work — for example, remembering what is in your cart or that you have already made a cookie choice. These are always active.
With your permission, we also use:
- Google Analytics — to measure how the site is used, so we can improve it.
- Google Ads — to measure whether our advertising works and, where enabled, to show you our ads on other sites (remarketing). This may involve Google advertising domains such as doubleclick.net.
These technologies place cookies or similar identifiers in your browser (for example
_ga, _ga_<id> and _gcl_au) that let Google recognise a
browser across visits and measure site usage and advertising effectiveness.
We do not set Google Analytics or Google Ads cookies, and do not personalize advertising, until you accept. On your first visit you are asked to choose. Before you choose (or if you decline), Google's tag still runs in a privacy-restricted mode that sends only an anonymous, cookie-free signal used for aggregate measurement — no cookie is set and no identifier is stored in your browser. Accepting turns on the full cookies described above. You can change your mind at any time using the Cookie Settings link in the site footer.
Ask Shaahi, the menu, your cart, reservations and ordering all work normally whether you accept or decline — your choice here only affects analytics and advertising.
Measuring which adverts lead to orders
When you complete an order on this site, and only if you accepted analytics and advertising cookies, we send Google a one-way encrypted (hashed) version of the email address and phone number you entered at checkout, together with the order total. Google calls this enhanced conversions. It lets Google tell us that an advert led to a sale, which browsers increasingly block it from working out on its own.
The encryption happens inside your own browser, before anything is sent. We use SHA-256, which is one-way: the result cannot be turned back into your email address or phone number by Google, by us, or by anyone else. Your actual email address and phone number are never sent to Google — they are used only by us, to prepare and deliver your order and to contact you about it.
Google uses the hash solely to match the order against an advert click it already recorded, and reports the result to us as a total — never as a list of who bought what. If you decline non-essential cookies, none of this happens: nothing is hashed and nothing is sent. We also store the advert or search that brought you to the site, for up to 90 days, for the same purpose and under the same choice.
We also send Google the order total so we can see which adverts produce real revenue rather than just clicks. This is ordinary advertising measurement; we do not sell your personal information, and we never send Google the contents of your order in a form tied to you by name.
In our mobile app we do not use advertising cookies or Google advertising tags. The app uses PostHog for product analytics — which screens are opened and which features are used — to help us improve it. The text of your Ask Shaahi messages is never sent to our analytics.
How We Use Your Information
- To take, prepare, and fulfill your food orders (pickup and delivery).
- To process payments and send receipts.
- To run our loyalty/rewards program.
- To send order-status updates and respond to your requests.
- To operate, secure, and improve the Services.
How We Share Information
We do not sell your personal information. We share information with the service providers who help us run the Services, and only as needed to provide them:
- Stripe — payment processing. See Stripe's Privacy Policy.
- Supabase — secure hosting of your account and order data.
- Apple / Google / Expo — delivery of push notifications, if you enable them.
- Anthropic — processing your Ask Shaahi messages to generate a reply.
- PostHog — product analytics in our mobile app: which screens are opened and which features are used, so we can improve the app. It does not receive the text of your Ask Shaahi messages.
- Google (Analytics & Ads) — website analytics and advertising measurement. Google always receives a minimal, cookie-free signal for aggregate measurement; cookies and personalized advertising are only added if you accept analytics and advertising cookies.
We may also disclose information if required by law or to protect the safety, rights, or property of our customers or business.
Data Retention & Deleting Your Account
We keep your information for as long as your account is active or as needed to provide the Services and meet legal, tax, and accounting obligations.
You can delete your account at any time directly in the app: open Profile → Delete Account. This removes your account and associated personal profile data. Some order and payment records may be retained where required for legal, tax, or fraud-prevention purposes.
Security
We use industry-standard safeguards to protect your information, including encrypted connections and access controls. No method of transmission or storage is 100% secure, but we work to protect your data.
Children's Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Your Choices & Rights
- Access or update your account information in the app.
- Turn notifications on or off in your device settings.
- Change your analytics and advertising cookie choice at any time using Cookie Settings in the website footer.
- Delete your account as described above.
- Depending on where you live, you may have additional rights over your data; contact us to exercise them.
Changes to This Policy
We may update this policy from time to time. We will post the updated version here with a new "Last updated" date.
Contact Us
Shaahi Biryani
3421 E Renner Rd, Suite 110, Plano, TX 75074
Phone: (469) 960-3300
Email: sales@shaahibiryanidfw.com