1. Definitions

• “Qaris”, “we”, “us” — the provider of Sufra operating under qaris.dev.
• “Sufra” — the restaurant operations software, dashboards, guest menu experience, optional Assistant, and related APIs.
• “Venue”, “you” — the restaurant or business customer that purchases or uses Sufra, including its authorized owner and staff users.
• “Guest” — an end customer of the Venue who uses a table QR / guest menu to place orders.
• “Content” — menus, images, text, branding, orders, notes, and other data submitted to the Service.
• “Personal data” — any information relating to an identified or identifiable natural person, as defined in the Law of Georgia on Personal Data Protection.

2. Eligibility and authority

You must be at least 18 years old and legally able to enter contracts. If you accept these Terms on behalf of a Venue, you represent that you have authority to bind that Venue. Staff accounts may be created only by the Venue owner or an authorized administrator.

3. The Service

Sufra helps Venues manage menus, tables, guest ordering sessions, kitchen tickets, checkout calculation, staff access, business-day reporting, and optional in-product help. Features may evolve over time.

Sufra calculates table bills and coordinates service workflows. Sufra does not process guest card or cash payments and is not a payment institution, acquiring bank, or money transmitter. The Venue remains solely responsible for collecting payment from Guests and for fiscal or tax compliance under applicable law. Never collect payment card data through Sufra.

4. Hosting and tenant isolation

Sufra is hosted by Qaris. All Venue operational data — including menus, tables, staff accounts, orders, bills, guest sessions, and related records — is stored on Qaris’s shared database. We do not create a separate database project in the Venue’s name. Venues do not receive, enter, or manage database URLs or API keys in Settings or elsewhere in the Service.

Each Venue is classified as its own tenant on that shared database. Access is scoped so that one Venue cannot read or write another Venue’s data. Signed-in owners and staff see only the workspace they belong to. Guests can order only through a bound table session for that Venue. Attempts to bypass tenant isolation or to access another Venue’s data are a material breach of these Terms.

Qaris developers and platform administrators may access a Venue workspace only as needed to provide, secure, or support the Service (for example onboarding, troubleshooting, or security). They must not use that access for another Venue’s commercial purposes.

5. Accounts and security

You must provide accurate registration information and keep credentials confidential. You are responsible for all activity under your owner and staff accounts, including permissions you grant (for example declining kitchen orders).

Automated service messages such as verification codes, owner invites, and sign-in codes are sent from no-reply@qaris.dev. That mailbox is not monitored. Do not reply to those messages; we do not send or read replies there. For help, write to contact@qaris.dev or use in-app Support.

Notify us promptly at contact@qaris.dev if you suspect unauthorized access. We may suspend accounts that appear compromised or that violate these Terms.

6. Fees, setup, and subscription

Current public pricing may include a one-time setup fee and a monthly subscription after an introductory period, as described on our website at the time of purchase. The published monthly fee typically covers Sufra access together with isolated venue data hosting and monitoring, as stated on the pricing page. Exact commercial terms may also be confirmed in writing for your Venue.

Unless otherwise agreed in writing: (a) setup fees cover onboarding work described at purchase; (b) subscriptions renew periodically until cancelled before the next billing period; (c) fees are non-refundable except where our published 7-day setup-fee guarantee applies or where mandatory law requires a refund.

If you cancel within seven (7) days of completed setup under our published guarantee and Sufra is not right for your Venue, we will refund the setup fee in full according to the guarantee terms stated at purchase. Subscription charges already incurred may be handled as stated in your order confirmation.

Late or failed payment may result in suspension or termination of access until balances are cleared.

7. Acceptable use

You agree not to:

• Use the Service unlawfully, fraudulently, or to harm Guests, staff, or third parties.
• Attempt to bypass security, tenant isolation, rate limits, or access another Venue’s data.
• Upload malware, scrape the Service abusively, or overload infrastructure.
• Use guest ordering to place fake or abusive orders, or to collect payment card data through Sufra.
• Process special-category personal data (health, biometric, genetic, ethnic, political, religious, sex-life, or similar) in Sufra unless you have a lawful ground under Georgian law (explicit written or digital consent, or a statutory labour/healthcare exemption) and appropriate safeguards.
• Misrepresent your identity or Venue when contacting Qaris; incomplete or deceptive contact emails may be filtered as spam and ignored.
• Use the Sufra Assistant to obtain legal advice, to generate unlawful content, or to paste secrets or other people’s personal data unnecessarily.
• Resell, sublicense, or provide the Service to third parties except as expressly allowed in writing.

8. Venue responsibilities

The Venue is solely responsible for: menu accuracy and allergen disclosures; service quality; Guest communications; employment and wage compliance for staff; tax, fiscal, and consumer-protection obligations; obtaining any local permits; and handling Guest and staff personal data as independent controller where applicable.

As controller of workspace data, the Venue must: (a) have a valid legal ground for each processing activity; (b) inform Guests and staff as required by Articles 24–25 of the Law of Georgia on Personal Data Protection; (c) configure tables, sessions, and staff access correctly; (d) not rely on Sufra as the sole record for legal, tax, or employment obligations without its own backups; (e) cooperate with data-subject requests and with Qaris when we assist as processor; and (f) notify Qaris without delay of any personal-data incident affecting the Service.

9. Content and intellectual property

You retain ownership of your Content. You grant Qaris a worldwide, non-exclusive licence to host, process, transmit, and display Content solely to provide and secure the Service.

Sufra, its software, design, trademarks, and documentation remain the property of Qaris or its licensors. Except for the limited right to use the Service under these Terms, no IP rights are transferred to you.

You represent that you have rights to all Content you upload and that it does not infringe third-party rights or applicable law.

10. Privacy and data protection

Our processing of personal data is described in the Privacy Policy at https://sufra.qaris.dev/privacy. That Policy is an information notice under the Law of Georgia on Personal Data Protection (14 June 2023, No. 3144-XIms-Xmp); it does not replace these Terms.

Where we act as processor for Venue operational data, we will: process that data only on documented instructions (including these Terms and in-product settings); implement appropriate organisational and technical measures, including tenant isolation on the shared Qaris database described in section 4; ensure persons authorised to process data are bound by confidentiality; assist the Venue, insofar as possible, with data-subject requests, security, impact assessments, and incident notifications; delete or return workspace data after the end of the Service, unless law requires storage; and use subprocessors in the categories described in the Privacy Policy (hosting, database/auth, email, and optional AI). We remain responsible for subprocessors we engage.

If we become aware of a personal-data incident affecting Venue data, we will inform the Venue without undue delay so the Venue can meet its duty to notify the supervisory authority within 72 hours where the Law requires it.

International processing (including hosting and the optional Assistant) is described in the Privacy Policy. By using those features you instruct us to transfer data as needed to provide them, under the safeguards set out there.

11. Sufra Assistant

The optional Assistant answers product questions. It is not legal, medical, or financial advice and may be inaccurate. You must not submit passwords, payment data, special-category data, or other people’s personal data except as strictly needed for a how-to question.

Assistant messages are processed by our AI provider, which may be located outside Georgia. Using the Assistant is optional; the rest of the Service works without it. We may rate-limit or disable the Assistant to protect the Service.

12. Third-party services

The Service may rely on third-party hosting, authentication, email delivery, AI, or other infrastructure operated under Qaris’s account (including a shared database). We are not responsible for outages or acts of providers beyond our reasonable control, but we will use commercially reasonable efforts to maintain Service availability. Third-party database access is not granted to Venues as a separate project under the Venue’s name.

13. Disclaimer of warranties

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”. QARIS DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

We do not warrant that the Service will be uninterrupted, error-free, or free of harmful components, or that it will meet every operational need of your Venue.

14. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, QARIS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, DATA, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, QARIS’S TOTAL LIABILITY ARISING OUT OF OR RELATED TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE AMOUNTS YOU PAID TO QARIS FOR THE SERVICE IN THE THREE (3) MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY.

Nothing in these Terms excludes liability that cannot be limited under mandatory Georgian law (including liability for willful misconduct or other non-waivable claims). Statutory data-protection duties and data-subject rights are not waived by this section.

15. Indemnity

You will defend and indemnify Qaris against claims, damages, and costs (including reasonable legal fees) arising from your Content, your operation of the Venue, Guest disputes, tax/fiscal matters, staff employment matters, your processing of personal data as controller, or your breach of these Terms, except to the extent caused by Qaris’s willful misconduct.

16. Suspension and termination

You may stop using the Service and request account closure by contacting contact@qaris.dev. We may suspend or terminate access immediately for material breach, non-payment, legal risk, or abuse — including a processing freeze if required by the supervisory authority.

Upon termination, your right to use the Service ends. We will delete or return workspace data after a reasonable period, subject to the Privacy Policy and legal retention requirements (including tax and system-log rules). Sections that by nature should survive (including IP, fees owed, data-protection allocations, disclaimers, liability limits, indemnity, and governing law) will survive termination.

17. Changes to the Service or Terms

We may modify the Service and these Terms. We will post updated Terms with a new “Last updated” date. Material changes may also be communicated by email or in-product notice when practical. Continued use after the effective date constitutes acceptance, except where mandatory law requires additional consent.

18. Governing law and disputes

These Terms are governed by the laws of Georgia, including the Law of Georgia on Personal Data Protection (14 June 2023, No. 3144-XIms-Xmp), without regard to conflict-of-law rules. Courts of Georgia have exclusive jurisdiction over disputes, unless mandatory consumer protections in your country of residence provide otherwise for eligible individuals.

Before filing a claim, the parties will attempt in good faith to resolve the dispute by contacting contact@qaris.dev. Data-subject complaints may also be lodged with the State Audit Office of Georgia as described in the Privacy Policy.

19. General

These Terms, together with the Privacy Policy and any written order or setup confirmation, are the entire agreement regarding the Service and supersede prior conflicting terms. If any provision is unenforceable, the remainder stays in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. Notices to Qaris must be sent to contact@qaris.dev.