Data and security
Your money, your data, your staff.
The questions owners ask before they move their till: where the money goes, who can see what, where the data lives and what happens when the internet drops.
The money never passes through us
Each venue connects its own Stripe account and is the merchant on every payment. Card, wallet and table payments are processed on that account and Stripe pays out to your bank on your own payout schedule. Café QR takes a 0% platform fee and never holds your takings.
Card numbers are entered into Stripe’s own payment form or card reader, so they are handled by Stripe and never stored by Café QR.
Everyone signs in as themselves
Each member of staff has their own login and a role chosen by the owner: manager, waiter or kitchen. A role decides which screens that person can open, so a waiter can take orders without seeing your payment settings or staff list.
Refunds, discounts, cancelled orders and opening the cash drawer can each be allowed, refused or set to need a manager’s PIN, role by role. On the Multi-site plan, an activity log shows the owner who did each sensitive action on the account, and when.
Where your data lives
Your menu, orders, takings and customer list are stored with our hosting and database providers, Vercel and Neon, and sign-in is handled by Clerk. Guests who join your loyalty club opt in themselves, and can unsubscribe at any time.
The full list of providers, and how long information is kept, is in our privacy notice.
If the internet drops
The till keeps taking cash, and any payment types of your own, and uploads those sales when the connection is back, so the queue keeps moving. Card payments, tabs, manager approvals, QR table ordering and online orders wait for the connection. A phone hotspot is the simplest backup for those.
Questions?
Email contact@cafeqr.app and we’ll answer anything this page doesn’t.