Privacy Policy

Overview

MasalaDish is a white-label food delivery application platform developed and operated by Grepix Infotech Pvt Ltd ("we", "us", or "our"), registered in Noida, India. This Privacy Policy applies to:

• Visitors to our website at www.masaladish.com
• Customers using the MasalaDish-powered food delivery apps
• Restaurant partners using the Restaurant Panel
• Delivery drivers using the Driver App
• Businesses who license our white-label platform

Information We Collect

We collect information in the following ways depending on how you interact with our platform:

A. Information You Provide Directly

• Full name, email address, phone number / WhatsApp number
• Delivery address and location data
• Payment information (processed securely via third-party gateways)
• Business details (for restaurant partners and licensees)
• Profile photo and preferences
• Messages sent through in-app chat
• Demo request form submissions on our website

B. Information Collected Automatically

• Device type, operating system, and browser information
• IP address and approximate geographic location
• App usage data, session duration, and clickstream data
• GPS / real-time location (for order tracking and driver navigation)
• Log files and crash reports
• Cookies and similar tracking technologies

C. Information from Third Parties

• Social login data (Google, Facebook) if you choose to sign in via these services
• Payment verification data from payment processors
• Analytics data from Google Analytics and similar tools

How We Use Your Information

We use the collected information for the following purposes:

• To create and manage your account on the platform
• To process food orders, payments, and deliveries
• To provide real-time order tracking and delivery updates
• To communicate with you via push notifications, SMS, email, or WhatsApp
• To respond to demo requests, support queries, and customer service needs
• To send promotional offers, discounts, and product updates (with your consent)
• To improve platform performance, fix bugs, and develop new features
• To analyse usage patterns and optimise user experience
• To comply with legal obligations and resolve disputes
• To prevent fraud, abuse, and unauthorised access
• To enable AI-powered features such as route optimisation and demand prediction

Sharing Your Information

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

• Restaurant Partners: Your name, order details, and delivery address are shared with the restaurant fulfilling your order.
• Delivery Drivers: Your name, contact number, and delivery address are shared with the assigned driver.
• Payment Processors: Payment data is shared with secure, PCI-compliant payment gateways (e.g., Razorpay, Stripe, PayU).
• White-Label Licensees: If you use a platform powered by MasalaDish, the licensee (app owner) may also access your data within their platform.
• Service Providers: We may share data with trusted vendors for hosting, analytics, customer support, and cloud infrastructure.
• Legal Requirements: We may disclose data when required by law, court order, or government authority.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.

Data Storage & Security

Your data is stored on secure cloud servers. We implement industry-standard technical and organisational measures to protect your information, including:

• SSL/TLS encryption for all data in transit
• OAuth 2.0 authentication for secure login
• Encrypted storage for sensitive personal and payment data
• Regular security audits and vulnerability assessments
• Role-based access controls to limit internal data access

We retain your personal data only as long as necessary to provide services or as required by applicable law. You may request deletion of your account and associated data at any time (see Your Rights section).

Cookies & Tracking

Our website and apps use cookies and similar technologies to enhance your experience. These include:

• Essential Cookies: Required for the website and app to function correctly (login sessions, cart data).
• Analytics Cookies: Used to understand how visitors use our site (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.
• Preference Cookies: Store your settings and preferences (language, location).

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

Third-Party Services

Our platform integrates with the following types of third-party services. Each has its own privacy policy:

• Maps & Location: Google Maps for order tracking and navigation
• Analytics: Google Analytics, Firebase Analytics
• Communication: Twilio / Firebase Cloud Messaging for SMS and push notifications
• Payments: Razorpay, Stripe, PayU, and other regional gateways
• Social Login: Google Sign-In, Facebook Login
• Live Chat: JivoChat for website support

We encourage you to review the privacy policies of these third-party providers, as we are not responsible for their data practices.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for marketing purposes.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at reachus@grepixit.com. We will respond within 30 days.

Children's Privacy

MasalaDish services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete such information promptly.

International Data Transfers

Grepix Infotech is based in India. If you access our services from outside India, your data may be transferred to and processed in India or other countries where our servers or service providers are located.

We ensure that any international transfer of data is protected by appropriate safeguards, including standard contractual clauses and data processing agreements compliant with applicable regulations (including GDPR where applicable).

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email or in-app notification
• Post a prominent notice on our website

We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: