01.
Data Fiduciary & Scope
This Privacy Policy explains how Parozo Technologies ("Parozo", "we", "our", or "us") processes and protects personal information collected through our official domain https://parozo.in, restaurant QR code scan endpoints (/r/[slug]), digital bill views, and our administrative dashboard.
Under India’s Digital Personal Data Protection (DPDP) Act, 2023, Parozo operates as a Data Fiduciary for restaurant account holders and as a Data Processor on behalf of restaurant partners for processing diner orders at physical tables.
02.
Categories of Data We Process
We collect information in distinct tiers based on whether you are a Restaurant Merchant or a Dining Customer:
A. Restaurant Partner & Merchant Data
- Account Credentials: Full name, verified email address, contact phone number, encrypted password hash.
- Restaurant Profile: Business name, branch physical addresses, GSTIN number (optional for billing), currency preference, brand logo, and social links.
- Catalog Content: Menu categories, dish names, descriptions, pricing, preparation times, food allergens, dietary badges (Veg, Non-Veg, Vegan, Jain).
- Subscription & Invoicing: Billing cycle, payment reference tokens (handled securely via Razorpay/Stripe; Parozo never stores raw credit/debit card numbers).
B. Dining Patrons (Diners at Table)
- Order Payloads: Table number, selected food items, customized cooking notes (e.g., "no onions", "extra spicy"), order timestamp, and preparation status.
- Optional Contact: If requested by the diner to receive an SMS or WhatsApp e-bill receipt, the guest’s mobile number.
- Location Verification (Geofencing): If the restaurant has GPS geofencing activated, device browser coordinates are verified client-side to validate table presence. Coordinates are never logged or stored permanently.
C. Technical Telemetry & CDN Edge Logs
- Device user-agent (mobile browser model, screen size) to render responsive menu layouts.
- Anonymized IP address and edge response latency to ensure sub-second menu loading across India.
03.
How We Use the Information
We process data strictly for operational fulfillment:
- Transmitting orders instantly to the Kitchen Display System (KDS) and thermal KOT printers.
- Enabling waiters and floor captains to service water and call requests triggered from table QR codes.
- Generating GST-compliant digitized invoices and split-bill receipts.
- Providing restaurant operators with analytical reports (hourly rush patterns, bestselling dishes).
- Managing SaaS subscription renewals and security alert dispatches.
04.
Strict Zero Data-Selling Commitment
We adhere to a strict Zero Data Monetization policy:
Our Guarantee: Parozo does not sell, rent, lease, or trade personal data, diner order histories, or restaurant sales statistics to advertising networks, data aggregators, or marketing brokers. We do not display third-party banner ads on restaurant QR menus.
05.
Cloud Infrastructure & Security Standards
We employ enterprise-grade security protocols across all software layers:
- Encryption in Transit & Rest: All network traffic is encrypted via TLS 1.3/SSL. Database records and backups are encrypted at rest using AES-256.
- Cloud Architecture: Managed by industry leaders (Supabase on AWS and Vercel Edge Network), with automated DDoS mitigation, isolated tenant databases, and continuous vulnerability scans.
- Granular Role-Based Access: Staff accounts are compartmentalized (Kitchen Staff see only order tickets; Cashiers handle billing; Owner alone has access to financial payouts).
06.
Cookies & LocalStorage Usage
Parozo avoids intrusive third-party cross-site tracking cookies. We utilize essential browser localStorage keys to ensure uninterrupted dining:
parozo_cart_[restaurantId]_[table]: Preserves dishes added to the guest’s cart so accidental browser refreshes do not erase the order.parozo_active_order_[restaurantId]: Keeps active order IDs in memory to show live preparation status updates (Pending → Preparing → Served).- Learn more in our dedicated Cookie & LocalStorage Policy.
07.
Data Retention & Account Erasure
We retain merchant data for as long as your subscription is active. Upon account termination, restaurant records are retained for a 30-day grace period to facilitate data export or account reactivation, after which all private credentials and menu databases are permanently wiped from production clusters.
Diner order histories retained by restaurants for tax and GST reporting are maintained in accordance with Indian commercial accounting regulations.
08.
Your Rights under the DPDP Act & GDPR
Regardless of your geographic location, you enjoy comprehensive data rights:
- Right to Access: Request a copy of all personal information held about your account.
- Right to Correction: Update or rectify incomplete or inaccurate business information via dashboard settings.
- Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your profile and data records.
- Right to Grievance Redressal: Submit a complaint regarding data handling to our designated Grievance Officer.
09.
Data Grievance Officer & Contact Details
To exercise your data privacy rights, request account deletion, or address privacy concerns, please contact our Data Protection & Grievance Officer:
Designated Grievance Officer: Sunil Savaliya
Headquarters: Rajkot, Gujarat, India - 360005
Direct Privacy Email: privacy@parozo.in / savaliyasunil25@gmail.com
WhatsApp Support Line: +91 98797 12066
We respond to all verified privacy and data deletion inquiries within 48 to 72 business hours.