Privacy Policy

This Privacy Policy governs how Rasoza collects, uses, processes, and safeguards personal data when restaurants (Merchants) and end-users (Customers) interact with our QR ordering platform and integrated payment solutions. This policy is designed to comply with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

We collect only the data necessary to provide and improve our services:

• Merchant Data: Business name, FSSAI license details, contact details, PAN/GST information, and registered bank account details (for payment routing).
• Customer Data: Names, phone numbers, email addresses, and table assignments provided during the ordering process.
• Transaction Data: Order history, menu interaction data, payment-related identifiers, and transaction logs.
• Technical Data: Device-related operational information, IP addresses, Petpooja POS IDs, and integration parameters.

We process this data strictly for the following legitimate purposes:

• To facilitate QR-based ordering, menu management, and seamless order routing to the restaurant kitchen.
• To enable secure payment processing and settlement routing via our regulated banking partners.
• To ensure platform stability, monitor technical performance, and fix bugs.
• For fraud prevention, security compliance, and operational analytics.
• To comply with legal, accounting, and regulatory obligations (e.g., IT Act, PMLA, FSSAI).

Rasoza does not sell your personal data to third parties. We only share data with trusted, regulated service providers essential to our operations:

• Payment Gateways: HDFC Bank (for processing and settling transactions securely).
• POS Integrations: Petpooja (for syncing orders, menu data, and inventory).
• Cloud Infrastructure: Database (for secure data hosting and storage).
• Legal/Regulatory Authorities: Only when required by law, court order, or to prevent fraud and protect our rights.

Transaction and compliance records may be retained for the period required by applicable Indian laws (including tax and banking regulations) or for operational, fraud prevention, and security verification purposes. Anonymized platform data may be retained indefinitely for technical improvements and analytics.

We implement industry-standard technical and organizational security measures, including encryption and strict access controls, to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no electronic transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Under the Digital Personal Data Protection Act, 2023, Merchants and Customers have the right to:

• Request access to, correction of, or erasure of their personal data held by Rasoza, subject to legal retention requirements.
• Withdraw consent for data processing at any time (though this may result in the inability to continue using the Platform).
• Lodge a grievance with our designated Grievance Officer if you believe your data is being mishandled.

In accordance with the IT Rules, 2011 and the DPDP Act, 2023, we have appointed a Grievance Officer to address any privacy concerns or data-related complaints. We commit to acknowledging your grievance within 24 hours and resolving it within 15 days.

Questions about this Privacy Policy can be sent to our Grievance Officer at:
Email: support@rasoza.com
Address: B-201, Suresh Park, Devdaya Nagar, Pokhran Road No.1 Thane, Maharashtra 400606