Privacy Policy

Last updated: 19 September 2026 · Applies to the NamastePOS mobile app, web dashboard, and namastepos.in

NamastePOS ("we", "us") is a point-of-sale and restaurant-management platform built in India for Indian food businesses. This policy explains what data we collect, why, and the rights you have under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

1. Who this policy covers

It covers two kinds of people: business users (owners, managers, and staff of restaurants that subscribe to NamastePOS) and end customers (diners whose orders, bills, or loyalty points are processed by a restaurant using NamastePOS). For end-customer data, the restaurant is the data fiduciary and we act on its instructions as a processor.

2. Data we collect

Account data — name, email address, and profile photo when you sign in with Google or register with an email and password; phone number if you sign in via SMS OTP.

Business data — restaurant name, address, GSTIN, menu, prices, orders, invoices, staff names and roles, and settings you configure.

End-customer data — where a restaurant chooses to record it: customer name, phone number, order history, and loyalty balance. QR/online orders may include a delivery address.

Payment data — subscription payments are processed by Razorpay. We receive payment status and invoice metadata; we never see or store your card number, UPI PIN, or banking credentials.

Technical data — device type, app version, IP address, and crash/error reports (via Sentry) used to keep the service reliable. Crash reports are scrubbed of emails, phone numbers, and tokens before they leave your device.

3. Why we use it

To operate the POS (orders, billing, kitchen display, printing), generate GST-compliant invoices, send transactional messages (order updates, OTPs, invoices via SMS/WhatsApp where enabled), bill your subscription, provide support, secure the platform against fraud and abuse, and improve reliability. We do not sell personal data, and we do not use your business's data to advertise to your customers.

4. Who we share it with

Only service providers needed to run NamastePOS: Supabase (database) and Render (application servers), both in Singapore; Cloudflare (website, file storage, network protection); Google (sign-in, phone-number verification, push notifications, and the AI assistant described in section 4a); Razorpay (subscription payments); Brevo (email); Upstash (caching); Sentry (crash reporting); and Meta WhatsApp Cloud API where a restaurant enables WhatsApp messages. Each receives only what its function requires, and the full register - what each one does, where it does it and a link to its terms - is published at namastepos.in/sub-processors. We may disclose data where required by law or a competent authority.

Restaurants: the terms on which we process your diners' data on your behalf are in the Data Processing Addendum.

4a. Processing outside India, and the AI assistant

Our servers and database are currently hosted in Singapore, and some providers above process data in other countries. Indian law permits this; we tell you so you know where your data goes. The optional AI assistant (menu import, daily summary, "Ask", voice matching, review replies, support chat) sends the text or image you supply to Google's Gemini API. Under Google's free tier, those inputs may be used by Google to improve its models, so we remove phone numbers, email addresses and GSTINs before sending, and we never send passwords, payment details or your full customer list. Any restaurant can switch the AI off entirely for its account in Settings → AI features, and no prompt is sent while it is off.

5. Retention

Business records that Indian tax law requires (invoices, GST records) are retained for the statutory period even after account closure. Everything else runs on a fixed schedule:

• A diner who has not ordered for 3 years is anonymised: the name is deleted and the phone number is replaced by a one-way token.
• A diner's name and phone are stripped from individual orders after 3 years. The amounts, tax and invoice number stay, because tax law requires them.
• An account you ask us to erase is stripped of its identifiers immediately and permanently deleted 30 days later.
• Anonymous cookie-banner records are deleted after 180 days; a closed account's remaining data after 90 days.
• Security and access logs are archived after 3 years and deleted after 7.

End-customer data is also deleted on verified request or on the restaurant's instruction — see section 6a.

6. Your rights (DPDP Act 2023)

You may access a copy of your personal data, correct it, request erasure and withdraw consent. Business users can do this from Privacy in the dashboard or app. If you are a diner whose phone number a restaurant holds, see section 6a. We acknowledge a verified request within 48 hours and answer it within 30 days, and in no case later than 90 days. The right to nominate someone to exercise your rights on your behalf is not yet available in the product; until it is, write to the Grievance Officer and we will handle such a request manually.

6a. Diners: see or delete what we hold

If a restaurant took your phone number at the counter or you ordered from a QR menu, you do not need an account to exercise your rights. Go to namastepos.in/my-data, enter that number and confirm the one-time code we send to it. You will see every restaurant on NamastePOS that holds it, what they hold, and who the information has been shared with — and you can delete it in one tap.

Deleting removes your name and clears your phone number from the restaurants' records and from past orders. The bill amounts, tax and invoice numbers stay, because Indian tax law requires the restaurant to keep them; they simply stop being connected to you. The restaurant is told the record was erased at your request.

7. Security

Data is encrypted in transit (TLS), access is role-based and tenant-isolated, passwords are hashed with bcrypt, staff PINs are rate-limited with persistent lockout, and administrative access requires two-factor authentication. No system is perfectly secure; if a breach affecting you occurs we will notify you and the Data Protection Board of India as required.

8. Children

NamastePOS is a business tool and is not directed at children. We do not knowingly process children's personal data.

9. Grievance Officer

For privacy questions, requests, or complaints, contact our Grievance Officer, Shivhari Lokhande, at support@namastepos.in. If unsatisfied with our response, you may escalate to the Data Protection Board of India.

10. Changes

We will post updates to this policy here and, for material changes, notify you in the app or by email. Continued use after the effective date constitutes acceptance.