Privacy Policy

RESTRO-VENDS — Privacy Policy Effective Date: 14 October 2026 Last Updated: 14 October 2026 Data Controller: RESTRO-VENDS Registered Address: Shop No. 3, CTS No. 1134/B-2 & 1135-B, Sadguru apartment, Kulkarni galli, Belagavi, 590001 Privacy Contact: akshaypa840@gmail.com 1. Introduction RESTRO-VENDS ("we", "us", "our", or "Platform") respects the privacy of individuals and businesses using our restaurant and vendor inventory management services. This Privacy Policy explains how we collect, use, store, disclose, protect, and process personal and business information when you use our website, create an account, use the web application, interact with another user, or contact us. The Platform connects restaurants with suppliers and vendors for inventory management, order placement, delivery coordination, and related records. It applies to restaurant owners, operators, vendor representatives, other authorised users, and individuals whose information is processed in connection with the Services. Where consent is the appropriate legal basis, we will seek it as required by law. 2. Information We Collect We collect only the information reasonably necessary for the purposes described, subject to law and the features you use. 2.1 Account and Identity: full name, business name, mobile number, email where provided, account type, unique account code, account/verification status, login records, and business logo. 2.2 Business and Licensing: business name and address, FSSAI licence/registration number and dates, copies of licences/registrations, trade licences and permits, supporting documents, and verification/review records. 2.3 Operator: operator name, mobile number, OTP verification status, restaurant association and location, account status, permissions, and activity/security records. 2.4 Inventory and Product: product/category names, images, units, quantities, availability, vendor supply categories, and preferences. 2.5 Order and Delivery: order identifiers, selected products and quantities, assigned vendors, requested/confirmed delivery dates and times, acceptance/rejection, unavailable items and pending quantities, delivery status, notes, and dispute records. 2.6 Billing and Subscription: selected plan, start/expiry/renewal/status, billing address, amount/date/status, transaction reference and provider response, refund/failed-payment records, and tax/invoice details. Card and UPI transactions are processed by third-party providers; we do not intend to store complete card credentials or authentication secrets. 2.7 Technical, Device, and Security: IP address, browser/device info, OS/language, login timestamps and sessions, authentication/security logs, error reports, cookies where used, and usage information. 2.8 Support and Communication: name, contact details, account reference, complaint details, attachments, and correspondence. Do not send passwords, OTPs, or full payment details. 3. How We Collect Information Directly from you at registration and updates; from your use of product, order, delivery, and billing workflows; from owners authorising operators; from vendors and restaurants establishing connections; from OTP, authentication, payment, and hosting providers; from support communications; and from lawful verification or public business sources where permitted. Where information relates to another individual, the submitter must have authority and a lawful basis. 4. Why We Use Your Information Account creation and management (registration, unique codes, OTP authentication, profiles, operators, permissions, linked businesses); business verification (reviewing information/licences, recording outcomes, requesting corrections); inventory and order management (catalogues, processing orders, assigning vendors, recording availability/acceptance/delivery, maintaining histories); notifications (OTPs, order updates, subscription/billing/security messages, support responses); subscription and payment administration; security and fraud prevention; service improvement (diagnostics, usage patterns, usability, testing); and legal and regulatory compliance. We will not use information for a materially different purpose without any required notice or consent. 5. Legal Basis and Consent We process information per applicable Indian data-protection and other laws, based on consent, necessity to provide a requested service, legal obligation, or another lawful basis. Where consent is required, we provide a clear notice. You may withdraw consent through the provided method; withdrawal does not invalidate prior lawful processing and may affect features requiring the information. We may continue processing/retaining where necessary for compliance, security, accounting, or legal claims. 6. How Business Connections and Account Codes Work RESTRO-VENDS assigns unique account codes to help users connect. Searching a code may display limited business information to identify the matching account. Adding a vendor or restaurant shares relevant account information with the connected business to enable ordering. Connected parties may see information relevant to their interactions, including product, order, delivery, and invoice records. Share your code only with intended businesses; codes identify accounts but are not passwords. Licence documents, private contact details, and authentication information are not made publicly searchable through the account-code feature. 7. When We Share Information We do not sell personal information as a business model. We may share: between connected restaurants and vendors as necessary to process orders, coordinate deliveries, issue invoices, or resolve issues; between restaurant owners and operators per permissions; with service providers for hosting, authentication/OTP, email/notifications, payments, security, and support (limited to what is needed, under confidentiality and security obligations); for legal and regulatory requests (limited to what is required); in business transfers (merger, acquisition, restructuring) subject to safeguards; and with your direction or consent. 8. International Data Transfers Some providers may process or store information outside India. Where transfers occur, we comply with applicable Indian legal requirements and safeguards and take reasonable steps to select providers with appropriate protections. 9. Data Security We implement reasonable technical and organisational safeguards appropriate to the information and risks, which may include access controls and role-based permissions, secure authentication and OTP, encryption in transit and where appropriate at rest, restricted access to licence documents, secure storage of credentials, logging and monitoring, backups and recovery, security updates, and breach-investigation procedures. No system guarantees absolute security; users should protect their devices, credentials, and OTPs and report incidents promptly. Where a breach occurs, we respond and notify as required by law. 10. Data Retention and Deletion We retain information only as long as reasonably necessary for the purposes described, subject to law. Retention may depend on account/subscription status, active orders and disputes, billing/accounting/tax requirements, verification/licence requirements, security and fraud prevention, and legal claims. When no longer required, we delete or anonymise information subject to law and technical limits. Closing an account does not necessarily delete every record immediately; some records are retained to complete transactions, comply with law, resolve disputes, or prevent fraud. 11. Your Privacy Rights and Choices Subject to law and the legal basis, you may request information about your data, correction, deletion where available, withdrawal of consent, raise a grievance, nominate another to exercise rights where permitted, and seek remedies through the competent authority. To exercise a right, contact akshaypa840@gmail.com and identify your account. We may verify your identity and respond within legal time limits. Some requests may be limited by a lawful exception. Requests concerning information controlled by another business may be referred to that business. 12. Marketing and Promotional Communications We may send essential service communications (OTPs, security alerts, order notifications, billing notices). Promotional communications are sent only per law and preferences. Where an opt-out is available, use the unsubscribe mechanism or support channel. Opting out does not stop essential account, security, transaction, or legally required communications. 13. Cookies and Similar Technologies The Platform may use cookies, session identifiers, and similar technologies to maintain sessions, support authentication and security, remember preferences, diagnose issues, measure performance, and improve experience. Strictly necessary technologies may be required for core functionality; others are managed per consent and privacy requirements. Disabling necessary cookies may affect functionality. New analytics/advertising tools will be reflected here before use. 14. Children's Privacy The Platform is designed for business users and is not intended for children to register or use independently. We do not knowingly collect children's personal information for ordinary registration and will take appropriate steps if we discover such collection in violation of law. 15. Third-Party Websites and Services The Platform may link to or integrate with third parties, including payment gateways, authentication providers, and communication services, which have their own policies. We do not control their independent practices; review their policies before use. 16. Changes to This Privacy Policy We may update this Policy to reflect changes in the Platform, practices, providers, security, or law. The latest version displays its effective date. Where a change materially affects processing or requires notice/consent, we will provide it as required by law. 17. Privacy Complaints and Grievances For questions, requests, or complaints, contact akshaypa840@gmail.com with subject "RESTRO-VENDS Privacy Request". Provide your account code and details; do not send passwords, OTPs, or full payment credentials. We will respond within the applicable legal timeframe and designate a grievance contact where required by law. 18. Contact Us RESTRO-VENDS, Registered Address: Shop No. 3, CTS No. 1134/B-2 & 1135-B, Sadguru apartment, Kulkarni galli, Belagavi, 590001. Email: akshaypa840@gmail.com