Legal
Privacy policy
Two different people are owed this document and they are owed different things. A food business gives us its menu, its staff logins and its customer list. That business’s customers give it a phone number, an address and what they had for dinner — and we hold that on the shop’s behalf rather than for our own purposes.
The policy has to be clear about which of those it is talking about at every line, which is exactly why it is not being written quickly.
What this document will cover.
The scope is settled. The wording is not, and the wording is the part that binds — so it is being drafted with a lawyer rather than written here by whoever built the page.
- What is collected from a food business, and what is collected from that business’s customers — kept separate, because they are not the same relationship.
- Why each of those is collected, tied to what it is actually used for rather than to a list of purposes drawn as widely as possible.
- How long each is kept, and what happens to it when a business leaves.
- Who it is shared with — the messaging provider, the payment provider, the hosting provider — named, rather than described as “our partners”.
- Your rights under the Digital Personal Data Protection Act, and the address that has to answer when you use one.
- How a customer of a shop asks that shop to stop messaging them, and what happens when they do.
- Where the data is stored. It is in India, and the policy will say so plainly.
Its status, stated plainly.
This document is not published yet. Nothing on this page is a term, and nothing on it should be relied on as one. When the wording is settled it will replace this page in full, and it will carry a date so you can tell when it came into force.
We are not opening the service to businesses before these are in place. Publishing a draft here would be worse than saying this: a draft reads as binding, and a commitment nobody has agreed to is not one we should be able to make by writing it on a website.
In the meantime, write to a person.
- Grievance officer
- [GRIEVANCE OFFICER NAME]
- Grievance email
- [GRIEVANCE OFFICER EMAIL]
- Registered name
- [REGISTERED COMPANY NAME]
- Registered address
- [REGISTERED ADDRESS], [CITY], [STATE] [PIN]
Those values are placeholders. The officer has not been appointed and the address has not been filled in — and rather than print a plausible-looking name so the page looks finished, it says so. A grievance address that nobody answers is worse than an admitted gap.
Anything else, including a question about what happens to your information before these are published, goes to the contact page. You will get a written answer from a person.