Privacy Policy

Effective from 15 November 2026

This policy explains what data the MakeFood service (the makefood.kz website, the café dashboard and the chat bots connected to MakeFood) collects, why, who it is shared with and how to delete it. It is prepared in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”.

1. Who we are

The service is operated by individual entrepreneur MakeFood, address: 55 Kulturnaya Street, Semey, Kazakhstan (“MakeFood”, “we”). Contact: info@makefood.kz, +7 707 764 79 64.

MakeFood is a technology service for cafés and restaurants. When you order food through a café's chat, the café is the seller, and MakeFood processes data on the café's behalf to receive and deliver the order.

2. Data we collect

Café guests (people ordering via chat):

• messenger identifier (Telegram ID or WhatsApp phone number) and the display name from your profile;
• phone number — on WhatsApp this is your number; on Telegram only if you tap “Share phone number” or type it yourself;
• the text of messages sent to the café's chat;
• order items, total, order status and payment status.

We do not receive or store bank card data: payment happens on the payment provider's page.

Cafés and their staff:

• name, email, phone, password (stored only as a hash);
• café payout details;
• menu, prices and dish photos;
• technical sign-in data: IP address, sign-in time, error logs.

3. How we use data

• to receive an order, calculate the total and pass the order to the café;
• to send a payment link and notify you when the order is ready;
• to let the café contact you about your order;
• to calculate payouts to cafés;
• to keep the service secure and investigate errors.

We do not sell data, do not use it for advertising and do not send marketing messages to guests.

4. Who we share data with

• The café you order from — order items, your name and phone for contact.
• Messaging platforms — Meta Platforms (WhatsApp) and Telegram, which deliver the messages.
• Payment providers (Freedom Pay, Kaspi) — amount and order number, and the phone number where needed for payment.
• AI providers (OpenAI, Anthropic) — the message text and the café menu, to understand orders written in natural language. Under their API terms this data is not used to train models.
• Our hosting provider, whose servers run the service.
• Public authorities — only upon a lawful request.

5. Where and how long data is stored

Data is stored on servers located in the Republic of Kazakhstan.

• chat messages — no longer than 12 months;
• orders and payments — as long as accounting and tax law requires;
• café accounts — while the café uses the service and up to 12 months after the account is closed.

6. How we protect data

Connections are encrypted (HTTPS), passwords are stored only as hashes, and access keys to third-party services are stored encrypted. A café's data is accessible only to its staff and to MakeFood administrators for support.

7. Your rights

You may ask what data we hold about you, correct it, withdraw consent and request deletion. Email info@makefood.kz — we reply within 30 days. See Data Deletion for instructions.

8. Cookies

The makefood.kz website uses no advertising or analytics cookies. The café dashboard keeps only the data needed for sign-in in the browser.

9. Children

The service is not intended for people under 16. If you learn that a child has given us data, contact us and we will delete it.

10. Changes

We may update this policy. The new version is published on this page with its effective date.