Privacy Policy for Restaurant Partners
This policy explains how AIIBLUE TECHNOLOGIES PRIVATE LIMITED ("OonDrop", "we") handles the personal data of restaurant owners and the staff who use the OonDrop restaurant console, as the Digital Personal Data Protection Act, 2023 and its Rules require. Business information about the restaurant itself (its name, menu and prices) is covered by the Restaurant Partner Agreement. Registered office: No. 31A, Ground Floor, Dr. Seethapathy Nagar, 100 Feet Taramani Link Road, Chennai City Corporation, Chennai, Tamil Nadu 600042, India.
1. What we collect
- Owner and contact details: name, phone number, email, and the people you add to manage the console.
- Business documents: FSSAI licence, GST registration, PAN, and the photos or files you upload.
- Bank details: account number and IFSC for payouts. The account number is stored encrypted, and only its last four digits are shown.
- Activity: sign-ins, orders handled, menu changes, payouts, support chats and photos, and records of calls made through OonDrop's number (calls are not recorded).
- Device data: browser or app version and technical logs.
2. Why we use it
- To verify your restaurant and keep its licences valid.
- To run your listing, send you orders and pay you.
- To keep tax and accounting records and meet the law.
- To support you, handle complaints and prevent fraud.
3. Who we share it with
- Customers: your restaurant's name, address, FSSAI licence number and menu (not the owner's personal details).
- Delivery partners: the restaurant's name, address and pickup details for their orders.
- Service providers: Amazon Web Services (hosting in Mumbai, India), Razorpay (payments and payouts), Plivo (masked calls), Meta WhatsApp and email (sign-in codes), Google Maps.
- Government bodies when the law requires it, such as for tax or food safety.
We do not sell personal data.
4. How long we keep it
Account details are kept while the restaurant is listed. After the listing ends, personal details are deleted, and orders, invoices and payouts are kept for as long as tax law requires (today 8 years).
5. Your rights
Under the DPDP Act you can ask what personal data we hold, correct it, ask us to delete it when the listing ends, withdraw consent, nominate someone to act for you, and complain to our Grievance Officer and then to the Data Protection Board of India. Use the console's support chat or write to the Grievance Officer. We acknowledge a request within 24 hours and answer it within 15 days (and within 90 days at the latest).
6. Security
We protect your data with access controls, encrypted bank account numbers, encrypted connections and audit logs. If a breach affects you, we will tell you and the Data Protection Board as the law requires.
7. Changes
We may update this policy. The console shows the new version and asks you to read it.