Privacy Policy

This Privacy Policy explains how Pruthviraj Fulsundar (Proprietor, trading as “AnantSwad” — “we”, “us”, or “our”) collects, uses, stores, and protects personal information when you use the AnantSwad platform — our website, tenant admin dashboards, kitchen and counter systems, and customer-facing ordering pages (together, the “Service”).

We are committed to handling your data responsibly and in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws. By using the Service, you agree to the practices described here.

01 Who this policy covers

AnantSwad is a multi-tenant platform used by restaurants. This policy applies to two groups:

• Restaurant owners and staff — those who sign up for an account and use the admin dashboard, kitchen display, waiter app, or counter desk.
• Customers (diners) — those who place orders or interact with a restaurant that uses AnantSwad.

Where a practice applies to only one group, we say so.

02 Information we collect

From restaurant owners and staff

• Account details — name, email address, phone number, and login credentials.
• Business details — restaurant name, subdomain, GSTIN and tax details (where provided), and address.
• Billing information — subscription plan and payment records. Card and bank details are handled directly by our payment provider (Razorpay); we do not store your full card numbers.
• Usage data — actions taken in the dashboard, and technical data such as IP address, browser type, and log timestamps.

From customers (diners)

• Contact information — phone number (required to place a counter or online order) and, where provided, name.
• Order information — items ordered, table number, order history, and payment status.

Collected automatically

• Cookies and session data — used to keep you signed in and to operate core features. See Section 07.

03 Why we use your information

We use personal information only for legitimate purposes connected to running the Service:

• To provide the Service — creating and managing accounts, processing and displaying orders, and running the kitchen, counter, and waiter workflows.
• For customer support — responding to your questions and resolving issues, using the contact details you provide.
• For authentication and security — verifying that an account or order belongs to a genuine user, sending one-time passwords (OTPs), and preventing fraud and abuse.
• For payments and billing — processing subscription payments and, where applicable, order payments.
• For invoicing and tax compliance — generating GST-compliant invoices and meeting record-keeping obligations under Indian law.
• For service communications — sending transactional messages such as receipts, OTPs, and important account notices.

We do not use your contact details for third-party advertising.

04 How your information is shared

We do not sell your personal data, and we do not share it with third parties for their own marketing.

We do rely on trusted service providers (“data processors”) who handle data strictly on our instructions and only to make the Service work:

• Razorpay — payment processing.
• Supabase — database and file storage hosting.
• Cloudinary — image hosting (e.g. menu photos).
• Email providers (Brevo, Mailjet, Resend) — sending OTPs, receipts, and account emails.
• Google — optional “Sign in with Google” authentication.

These providers are bound to protect your data and use it only for the services they provide to us. We may also disclose information if required by law, court order, or a valid government request, or where necessary to protect our rights, our users, or the security of the Service.

05 How we protect your data

• Data is transmitted over encrypted HTTPS connections.
• Each restaurant’s data is isolated in its own database schema to keep tenants separate.
• Payment card data is handled by Razorpay under its own security standards; we do not store it.
• Access to systems is restricted, and sensitive credentials are protected.

No system is completely secure, but we take reasonable technical and organizational measures to safeguard your information.

06 How long we keep your data

We retain personal data for as long as your account is active or as needed to provide the Service. After that, we keep certain records only where required:

• Invoices and tax records are retained for the period required under GST and other applicable Indian laws.
• Other data is deleted or anonymized once it is no longer needed, unless a longer period is legally required.

07 Cookies

We use cookies and similar technologies to keep you signed in, remember your session, and operate core features of the dashboard and ordering pages. These are essential to the Service. You can control cookies through your browser settings, but disabling them may prevent parts of the Service from working.

08 Your rights

Subject to the DPDP Act and other applicable laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, where there is no legal reason for us to keep it.
• Withdraw consent for processing that relies on your consent.
• Raise a grievance about how your data is handled.

To exercise any of these rights, contact us using the details in Section 11. We may need to verify your identity before acting on a request.

09 Children’s privacy

The Service is intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, please contact us and we will take appropriate steps.

10 Changes to this policy

We may update this policy from time to time. When we make significant changes, we will update the “Last updated” date above and, where appropriate, notify you. Please review this page periodically.

11 Contact us

This document is provided to help you get started and is not legal advice. Given GST registration and the handling of customer data under the DPDP Act, we recommend having it reviewed by a qualified professional before publishing.