Privacy Policy

Template — have it reviewed by your legal advisor before launch (e.g. for India’s DPDP Act 2023).

What we collect

Ordering: items, table/pickup point, order notes, payment status. Guests can order without an account where the restaurant allows it.
Account (optional): mobile number, verified by one-time code. Stored encrypted; only the last 4 digits are shown to staff.
Payments: handled by UPI apps / a PCI-compliant gateway. We never store card numbers or UPI PINs. We store the payment reference for reconciliation.
Reservations & leads: name, mobile, party size, date and note.
Security logs: IP address, device type and actions on staff accounts, kept for fraud prevention and audit.

We use one essential, secure, HTTP-only session cookie. No advertising cookies. Analytics, if enabled by the restaurant, is consent-aware.

To take and fulfil orders, verify payments, manage bookings, award loyalty coins, prevent fraud and meet legal obligations.

Order data is shared with the restaurant you order from. Service providers (hosting, SMS, payment gateway) process data on our instructions.

One-time codes are deleted within 24 hours; security logs and invoices are kept as required by law; you may ask us to delete your account.

You can request access, correction or deletion of your data via the contact page.