This Privacy Policy explains how My Task Master Ltd (“we”, “us”, “our”) collects, uses, and protects personal data when you use Pakti (the “Service”). We are the data controller. We are a company registered in England and Wales (company number 16878946), registered office Flat 93 March Court, Warwick Drive, London, SW15 6LD. For any privacy request, contact support@pakti.io.
1. Data we collect
- Account data: restaurant name, country, language, owner name and email, and a hashed password.
- Staff data: staff member names and PINs. PINs are stored hashed (not in plain text) and are used only to authenticate a staff member to the staff app.
- Proof photos and order records: photos of packed orders, receipt text read by automated OCR, order IDs, platform, timestamps, and quality scores. These photos and receipts may incidentally contain personal data of your customers — for example a name, address, or phone number printed on a delivery receipt. You control what you photograph; we process this content on your behalf to provide the Service.
- Billing data: subscription plan and status, and a Stripe customer reference. Card details are collected and stored by Stripe, not by us.
- Technical data: basic request metadata (such as IP address and timestamps) used for security, rate-limiting, and abuse prevention.
2. How and why we use data
We use personal data to create and operate your account, authenticate owners and staff, store and display your proof evidence, generate evidence bundles and dispute text, process payments, send you transactional emails (for example sign-up, password reset, and payment notices), and to secure and improve the Service. Our lawful bases under UK GDPR are: performance of a contract (providing the Service you signed up for), our legitimate interests (securing the Service and preventing abuse), and consent where required. Where your uploads contain your customers’ personal data, you are the controller of that data and we act as your processor.
3. Processors and third parties
We share data only with providers that help us run the Service, under appropriate safeguards:
- Stripe — payment processing and billing.
- Amazon Web Services (AWS) — hosting, database, photo storage, and email delivery, in the EU (eu-west) region.
- Anthropic — AI models used to read receipts and assess photo quality; content is processed to return a result and is not used to train models.
We do not sell personal data. We may disclose data if required by law or to protect our rights.
4. Where data is stored
Data is hosted on AWS infrastructure in the European Union (eu-west region). Where any transfer outside the UK/EEA occurs (for example a sub-processor), it is protected by appropriate safeguards such as Standard Contractual Clauses.
5. Retention
We keep your account and proof data for as long as your account is active, so your evidence remains available to contest disputes. You may request deletion of your data at any time by emailing
support@pakti.io; we will delete it within a reasonable period, except where we must retain limited records to meet legal, tax, or accounting obligations.
6. Your rights
Under UK GDPR you have the right to access, correct, delete, or port your personal data, to restrict or object to certain processing, and to withdraw consent. To exercise any of these rights, contact
support@pakti.io. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at
ico.org.uk.
7. Security
We use industry-standard measures to protect data, including encrypted transport (HTTPS), hashed passwords and PINs, tenant isolation so each restaurant can only access its own data, access-scoped storage for photos, and rate-limiting on authentication. No system is perfectly secure, but we work to protect your data and to notify you of material breaches as required by law.
8. Changes and contact
We may update this policy and will post the revised version with a new “last updated” date. For any question or request about your data, contact
support@pakti.io. My Task Master Ltd, Flat 93 March Court, Warwick Drive, London, SW15 6LD, United Kingdom.