Privacy Policy

[DRAFT – needs legal review before launch. This text is a structure to work from, not legal advice. Check it against India’s Digital Personal Data Protection Act, 2023 and its rules.]

Last updated: [PLACEHOLDER: date]

This policy explains how JPM AI labs (“Dineligent”, “we”) handles personal data when you visit dineligent.com, contact us, or use Dineligent POS and the owner dashboard at app.dineligent.com.

1. Two kinds of data

  • Your data as our customer: the restaurant owner’s and staff’s account details, and business details you enter.
  • Your guests’ data: details of your restaurant’s customers that you record in the POS. You decide what is collected and why, and we process it on your behalf. [LEGAL REVIEW: data fiduciary and data processor roles]

2. What we collect

  • Account and business details: name, phone, email, business and outlet names, addresses, GSTIN, FSSAI licence number and UPI ID.
  • Staff details: names, roles and PINs used to sign in on POS devices.
  • Guest details you record: name, mobile number, delivery address, a business buyer’s GSTIN and legal name, visits, orders, loyalty points, credit and feedback.
  • Transaction data: orders, bills, payments by mode, shifts and stock.
  • Device data: device names, roles, app versions and last-seen times.
  • Website enquiries: what you send through the demo and contact forms.
  • Website analytics and cookies: [PLACEHOLDER: tools used and cookie details]

3. What we never collect

Dineligent never captures or stores full card numbers or CVV. Card payments are taken on your own card machine, and we record only the payment mode and, optionally, the last 4 digits.

4. How we use data

  • To run the POS, sync your devices, print bills and produce reports
  • To provide support and answer enquiries
  • To bill you for your plan [CONFIRM]
  • Marketing messages to your guests are sent only to guests recorded as having agreed to offers

5. How we protect data

  • Each business’s data is kept separate in the cloud at the database level
  • Guest phone numbers are masked for staff without permission to see them, and guest details are not written to logs
  • Sign-in and device tokens are kept in the device’s secure storage, and lost devices can be revoked at once
  • Every sensitive action is recorded in an audit log

6. Where data is stored and for how long

Data is stored on your POS devices and in our cloud. Native apps keep the last 7 daily backups on the device. [PLACEHOLDER: cloud hosting location, retention periods, and how deletion requests are handled]

7. Sharing

[PLACEHOLDER: service providers used, such as hosting, email and analytics, and when data may be shared by law]. Services you connect yourself, such as UPI, aggregator or WhatsApp Business accounts, follow their own policies.

8. Your rights

[LEGAL REVIEW: rights to access, correct and erase data, withdraw consent and raise a grievance, and how to exercise them]. Guests of a restaurant should first contact that restaurant.

9. Contact and grievance officer

Grievance officer: [PLACEHOLDER: name], JPM AI labs, A 55, Sector 7, CDA, Cuttack 753014, Odisha, India. Email: contact@dineligent.com, phone: +91 77500 45333. You can also contact us.