DATA PROTECTIONS

Privacy Policy

Last Updated: July 1, 2026

1. Information We Collect

When placing orders, we collect details necessary to process and track your transaction. This includes customer name, email address, phone number (for tracking and status updates via WhatsApp), selected items, delivery address, and payment transaction references.

2. Use of Information

We use collected information to:

  • Process and route orders to the correct kitchen display queue (KDS).
  • Coordinate delivery drops to your exact office location.
  • Generate secure payment sessions via integrated gateways (eSewa).
  • Trigger automated status notifications and loyalty points.

3. Information Sharing

We do not sell, rent, or distribute your personal information. Your order data is shared exclusively with the operating cafe tenant from whom you ordered. Third-party logistics or processing partner access is limited to payment verification gateways and notification services (Twilio).

4. Cookies and Sessions

We use local storage and cookies to retain active session data, cart selections, active tables, and tracking states. You can control or refuse cookies in your browser settings, though some checkout parts may lose functional continuity.

5. Security Measures

We run query isolation policies via scoped databases and sign sensitive query references (such as table tokens) using secure HMAC-SHA256 tokens. Private keys remain secure on server environments to safeguard your order information.

6. Policy Changes

We may update this Privacy Policy from time to time. The latest iteration will always be available on this page with the modified timestamp.