Privacy Policy

1. Who We Are

EatBuzz operates the EatBuzz platform — a school tiffin/meal subscription service headquartered at Kalyan, Maharashtra, India. We are the data controller for personal information collected through our website (eatbuzz.in), mobile web application, and WhatsApp ordering channel.

For any privacy-related questions, contact us at hello@eatbuzz.in.

2. Information We Collect

2.1 Information You Provide

• Account details: Your name, mobile phone number, and (where applicable) the names, class, and division of your children.
• School information: The school your child attends, selected from our list of partner schools.
• Order data: Meal selections, delivery preferences, break-slot preferences, and subscription plan details.
• Payment information: Transaction amounts and payment method (wallet/subscription/UPI). Card or bank details are processed directly by Razorpay — we do not store raw card numbers or CVVs.
• Support communications: Messages you send through our support channel, including WhatsApp conversations.
• Ratings & reviews: Feedback you submit about our menu items or service.

2.2 Information Collected Automatically

• Device & browser data: IP address, browser type, operating system, and referring URLs when you visit our website.
• Push notification tokens: Web-push subscription endpoints if you opt in to browser notifications.
• WhatsApp message logs: Message direction, timestamp, and content of WhatsApp conversations routed through the Meta WhatsApp Business Platform, stored to provide support and compliance records.

2.3 Information from Third Parties

• Razorpay: Payment confirmation, transaction ID, and failure reason to update your order and wallet status.
• Meta (WhatsApp Business API): Inbound messages and delivery receipts when you communicate with us via WhatsApp.

3. How We Use Your Information

We use your personal information to:

• Create and manage your account and your children's meal profiles.
• Process orders, manage subscriptions, and handle wallet transactions.
• Send transactional notifications (order confirmed, dispatched, delivered) via WhatsApp and web push.
• Coordinate meal preparation and delivery with our partner kitchens and vendors.
• Respond to support requests and resolve disputes.
• Send weekly review nudges and (with your consent) publish testimonials.
• Comply with legal obligations, including FSSAI food-safety requirements.
• Detect and prevent fraud.
• Improve our menu, service quality, and application features.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. WhatsApp Business & Meta Platform

EatBuzz uses the Meta WhatsApp Business Platform (Cloud API) to send order confirmations, dispatch alerts, and support messages. By messaging us on WhatsApp or providing your phone number for WhatsApp notifications, you acknowledge that:

• Your phone number and message content are transmitted to and processed by Meta Platforms, Inc. (Meta) pursuant to Meta's own WhatsApp Privacy Policy.
• Message templates are approved by Meta before use and contain only transactional or service-related content.
• You may opt out of WhatsApp notifications at any time by sending "STOP" in the chat or contacting us at hello@eatbuzz.in.

5. Data Sharing

We share your information only in the following circumstances:

• Partner kitchens & vendors: Name, class, and meal details necessary to prepare and deliver your child's tiffin.
• Razorpay: Payment processing. Governed by Razorpay's Privacy Policy.
• Meta (WhatsApp Business API): As described in Section 4.
• Legal authorities: When required by law, court order, or to protect the rights and safety of our users and staff.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

• Account and order data: Retained for a minimum of 3 years after last activity to comply with tax and FSSAI record-keeping requirements.
• Payment transaction records: Retained for 7 years in accordance with Indian accounting regulations.
• WhatsApp message logs: Retained for 1 year for support and compliance purposes.
• Push notification tokens: Deleted immediately upon unsubscription.

Upon account deletion request, we anonymise or delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

Under applicable Indian data protection law (including the Digital Personal Data Protection Act, 2023 — DPDP Act), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (subject to legal retention obligations). See our Data Deletion page for instructions.
• Grievance redressal: Lodge a complaint with us if you believe your data has been misused.

To exercise any of these rights, contact us at hello@eatbuzz.in. We will respond within 30 days.

8. Cookies & Local Storage

Our web application uses browser local storage and session cookies solely to maintain your authenticated session. We do not use third-party tracking cookies or advertising pixels.

9. Security

We use industry-standard security measures including HTTPS encryption, hashed authentication tokens (JWT), and access-controlled cloud infrastructure (Microsoft Azure). Payment data is handled exclusively by PCI-DSS compliant Razorpay. No security measure is 100% infallible; please contact us immediately at hello@eatbuzz.in if you suspect any unauthorised access to your account.

10. Children's Privacy

Our service is directed at parents and guardians — not children directly. We collect children's names, class, and school solely to facilitate meal delivery. Children do not create accounts or interact with the platform independently. If you believe a child has provided us with personal information without parental consent, please contact hello@eatbuzz.in and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, notify registered users via WhatsApp or email. Continued use of our service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please reach out: