Fodista
Ar

Privacy Policy

Last updated: November 4, 2026

This policy explains how Fodista handles data for the Fodista website, Fodista platform, Reach (Fodista Reach), Dash Courier and Fodista AI app, including use through ChatGPT and MCP tools.

Website language preference

  • The website uses your browser’s language preference to select Arabic or English unless you choose a language yourself. Your choice is saved in a first-party language-preference cookie for up to one year so it can apply across pages and later visits. You can remove the preference by clearing this site’s cookies in your browser. This cookie is used for language selection, not advertising.

Website demo requests

  • When you request a demo, we collect your name, business name, country, phone number, optional work email, branch count, and contact consent. Campaign and referral details included with your visit help us associate the request with its source.
  • Your request is processed through Fodista’s landing-page intake service and CRM so our team can arrange your demo and follow up about your request. Request references help prevent duplicate records when a submission is retried.
  • Contact info@fodista.com if you have questions about your demo-request data.

Reach (Fodista Reach)

  • Reach is Fodista’s customer ordering and loyalty app. It processes account and contact details, delivery addresses, carts, orders, payment references, rewards and points activity, ratings, notification preferences, and support information to provide restaurant ordering, delivery, payments, rewards, and account services.
  • With your permission, Reach uses your device location to help select a nearby branch or delivery address. You can enter an address manually and manage location permission in your device settings. Reach does not use Dash Courier’s on-duty background location tracking.
  • Reach processes device identifiers, app and device information, authentication sessions, and push notification tokens to maintain access, deliver notifications, and protect the service. You can manage optional notifications in the app and device settings. Optional Face ID or fingerprint authentication is handled by your device; Reach uses an authentication credential, not your biometric image or fingerprint data.
  • Information needed to fulfill an order is shared with the selected restaurant and its delivery operations. Hosting, authentication, maps, notification, and payment providers process the information needed for their services. Payment references and saved payment tokens may be retained to support checkout, refunds, and transaction records. Access to customer information is restricted to authorized users and services, and connections to the production service use HTTPS.
  • Account and order information is retained for service delivery, support, security, and applicable accounting or legal obligations. You can request account deletion from the account settings in Reach, or email info@fodista.com with the subject “Reach account deletion” and your registered email or phone number. We may verify account ownership; do not send your password or payment card details. Deletion removes saved carts, preferences, and payment tokens, disables device access, and anonymizes retained order and loyalty history where applicable. Records required for accounting, legal, security, or dispute purposes may be retained for those purposes.
  • For access, correction, deletion, or other Reach privacy requests, contact info@fodista.com. The restaurant’s own privacy information may also apply to its handling of your order. Fodista does not sell your personal data.

Dash Courier

  • Dash Courier processes your account, assigned trips, delivery addresses and recipient contact details for your organization’s delivery operations. While you are on duty, it sends location updates, including in the background. Turning off duty stops these updates. The camera scans QR codes and captures delivery proof photos; uploaded photos are stored in your organization’s Dash server. Optional call-log access records delivery-related calls when enabled.
  • Your organization controls access and retention under its account settings and applicable requirements. You can manage camera, location and notification permissions in your device settings, and request access, correction or deletion through your organization or info@fodista.com.

Data collected

  • Account and access data, such as the Fodista user account, restaurant workspace, role, permissions, and authentication status used to verify access.
  • Tool inputs, including the questions, prompts, filters, document names, report names, record identifiers, recipient addresses, uploaded files, and instructions you provide when using Fodista AI through ChatGPT or another MCP client.
  • Tool outputs, including report summaries, document links, created or updated record details, generated customization details, email or file results, and any user-related data returned from the connected Fodista workspace based on your permissions.
  • Saved instructions, such as explicit future-facing preferences or operating instructions you ask Fodista AI to remember for your MCP user.
  • Operational, nested, and debug data, such as tool names, timestamps, request identifiers, response status, error traces, validation messages, and nested fields needed to troubleshoot MCP calls and protect the service.

Purposes

  • Authenticate users, apply Fodista workspace permissions, and route MCP tool calls to the correct restaurant data.
  • Answer user requests, run reports, retrieve records, create or update records when requested, send messages, process files, and save explicit user instructions.
  • Maintain security, prevent abuse, debug failures, audit tool activity, measure usage, provide support, and improve reliability of Fodista AI.
  • Comply with legal, tax, accounting, security, and platform review obligations.

Recipients

  • Fodista and Divic personnel and service providers who operate hosting, authentication, support, analytics, security, and infrastructure systems under confidentiality and access controls.
  • The customer Fodista workspace or tenant that owns the restaurant data involved in the request.
  • OpenAI or the ChatGPT app host when you use Fodista AI inside ChatGPT, including the MCP tool inputs and outputs needed to complete your request.
  • External recipients only when you direct Fodista AI to send data, such as email recipients, file destinations, or connected business tools.

Retention

  • Workspace records are retained according to the customer Fodista account configuration and applicable subscription or legal requirements.
  • Saved instructions remain until you update, disable, or delete them, or until the connected account is removed.
  • Operational logs, debug data, and audit data are retained only as long as needed for security, troubleshooting, support, legal compliance, and service reliability.
  • Generated answers in ChatGPT may also be retained by OpenAI according to the settings and policies that apply to your ChatGPT account.

User controls

  • You can choose what prompts, filters, files, recipients, and instructions you provide to Fodista AI.
  • You can ask Fodista AI to update, disable, or remove saved instructions for your MCP user.
  • Workspace administrators control user roles, permissions, app access, and connected integrations inside Fodista.
  • You can revoke access from connected clients, request support, or ask for export, correction, or deletion where applicable by contacting info@fodista.com.

Data minimization and sensitive data

  • Fodista AI should only receive information needed for the task. Do not submit passwords, payment card numbers, government IDs, health data, or secrets unless your organization has approved that use with Fodista. Fodista does not sell personal data.

Contact

  • For privacy questions, user controls, or data requests, contact info@fodista.com.