Privacy Policy

Introduction

Welcome to Servyn. We respect your privacy and are committed to protecting your personal data. This policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and rules made thereunder, and explains how we collect, use, store, and share your personal data as a "Data Fiduciary" when you visit our website or use our services as a "Data Principal".

Consent

By checking the consent box at signup and creating an account, you give us specific, informed, and unambiguous consent to process your personal data as described in this policy, in accordance with Section 6 of the DPDP Act, 2023. We record the date and time this consent was given against your account. You may withdraw consent at any time by contacting us (see "Contact Us" below); withdrawal will not affect the lawfulness of processing carried out before withdrawal.

Personalized recommendations (separate opt-in): Using your order history to recommend dishes to you across different restaurants on the platform is a separate purpose from fulfilling your orders, and requires its own explicit consent. It is off by default; you may enable it at signup or later from your profile, and turn it off at any time, as easily as it was given. We record the date and time of each grant and withdrawal of this consent.

Information We Collect

We may collect, use, store and transfer different kinds of personal data about you:

• Identity Data: Name, username, or similar identifier
• Contact Data: Email address, telephone numbers, and business address
• Technical Data: IP address, browser type and version, device information
• Usage Data: Information about how you use our website and services
• Business Data: Restaurant information, menu details, transaction data

Servyn Browser Extension Privacy Notice

This section applies specifically to users of the Servyn - Dine-in Price Comparator Chrome Extension:

• Data Accessed: The extension reads publicly available restaurant names and dish prices only when you visit supported delivery websites (Zomato and Swiggy).
• Local Storage: Your configuration preferences (such as platform toggles, preferred domain, and cumulative savings counters) are stored locally in your browser via Chrome Storage API.
• No Tracking or PII Collection: The extension does NOT collect, store, or transmit any personally identifiable information (PII), passwords, payment card details, browsing history outside supported delivery sites, or personal messages.
• Data Sharing: We do not sell, rent, trade, or share any data collected by the extension with third parties or advertising networks.

How We Use Your Information

• To provide and maintain our POS and ordering services
• To process transactions and manage your restaurant operations
• To communicate with you about service updates and support
• To improve our services and develop new features
• To comply with legal obligations

Who We Share Data With

We do not sell your personal data, and we do not share it with advertising networks. We share it only with service providers who process it on our instructions as Data Processors, and only to the extent needed to run the Service:

• Cloud hosting and database providers — to store and serve your data
• Payment aggregators licensed by the Reserve Bank of India — to process payments. Card numbers and banking credentials are handled by them and are never stored by us.
• Communication providers — to send transactional email, SMS and OTPs
• Restaurants you order from — if you are a diner, the restaurant receives the details it needs to prepare and serve your order

We may also disclose personal data where we are required to by law, by a court, or by a government authority acting under lawful authority, and where necessary to establish, exercise or defend a legal claim.

Transfers outside India. Some of these providers operate infrastructure outside India, so your personal data may be processed outside India. We make such transfers in accordance with Section 16 of the DPDP Act, 2023, and we do not transfer personal data to any territory that the Central Government has notified as restricted. We remain accountable for that data and require our processors to protect it under contract.

Children’s Data

The Service is intended for use by businesses and by adults placing food orders. In accordance with Section 9 of the DPDP Act, 2023, we do not knowingly process the personal data of a child (a person under 18 years of age) without the verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us personal data, contact our Grievance Officer and we will delete it.

Cookies and Local Storage

We use cookies and browser storage that are strictly necessary to operate the Service — keeping you signed in, remembering your cart and table, holding your interface preferences, and enabling offline operation of the point-of-sale. We do not use third-party advertising or cross-site tracking cookies. You can clear or block browser storage at any time through your browser settings, though parts of the Service will stop working if you do.

Personal Data Breach

If a personal data breach occurs, we will notify the Data Protection Board of India and each affected Data Principal in the form and within the timeframe required by the DPDP Act, 2023 and the rules made under it, describing the nature of the breach, its likely consequences, and the measures we have taken.

Data Security

We implement reasonable security safeguards as required by Section 8(5) of the DPDP Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to prevent personal data from being lost, misused, altered or accessed without authorisation. These include encryption of data in transit, access controls that restrict each account to the data of its own restaurant, row-level authorisation enforced in the database itself, hashed credentials, and audit logging of privileged actions.

No system is completely secure. We do not guarantee absolute security, and you are responsible for keeping your own account credentials, staff PINs and devices secure.

Your Rights

As a Data Principal under the DPDP Act, 2023, you have the right to:

• Access a summary of your personal data and how it is processed
• Request correction, completion, or updating of your personal data
• Request erasure of your personal data (unless retention is required by law)
• Withdraw your consent at any time, as easily as it was given
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Register a grievance with our Grievance Officer, and if unresolved, with the Data Protection Board of India

Data Retention

We retain personal data only for as long as necessary to provide our services, comply with legal obligations (including tax and consumer-protection recordkeeping under Indian law), resolve disputes, and enforce our agreements. Consent records (including the date and time consent was given) are retained for the lifetime of your account plus the statutory limitation period thereafter.

Grievance Officer

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023, the details of the Grievance Officer are:
Name: Amandeep
Designation: Grievance Officer, Bairwal Tech Solutions
Email: [email protected]
Phone: +91 95887 95400
Address: Kanganpur Road, Sirsa, Haryana 125055, India
We will acknowledge your grievance within 24 hours, issue a ticket number, and dispose of it within 15 days of receipt. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

Contact Us

Bairwal Tech Solutions, a sole proprietorship firm registered in India, trading as Servyn
Email: [email protected]
Phone: +91 95887 95400
Address: Kanganpur Road, Sirsa, Haryana 125055, India