Privacy Policy

DigiKhana (“we”, “our”, “us”) is a food marketplace platform operated by GS Tech (“the Company”). We respect your privacy and are committed to protecting your personal data.

This policy explains what data we collect, how we use it, and your rights under the Digital Personal Data Protection Act 2023 (“DPDP Act”) of India.

1. Who we are

• Operating entity: GS Tech
• GSTIN: 09AZTPA9481D1ZY
• Registered office: Brij Nursing Home, NH-2, Kosi Kalan, Mathura, Uttar Pradesh — 281403
• Privacy contact: info@gstechs.in
• Grievance officer: Grijesh Agarwal — info@gstechs.in

2. What we collect

2.1 Information you provide

• Phone number (required) — used for login and order communication.
• Name (optional) — used for greeting and order receipts.
• Email (optional) — used for receipts and important account notifications.
• Delivery address (collected at order time, future feature) — to facilitate delivery.

2.2 Information collected automatically

• Device identifiers — a unique device ID we assign on first app install.
• Device info — model, OS version, app version (for compatibility and support).
• Approximate location — used in-session to show nearby restaurants; not persisted on our servers unless you save an address.
• FCM token — to deliver push notifications about your orders.
• App usage data — basic interactions (screens viewed, taps) for product improvement.
• Crash reports — sent to Sentry for stability monitoring; may contain device info but no personal data.

2.3 Information from third parties

None at present.

3. Why we collect it

4. Who we share data with

We share limited data with these third parties only as needed to operate the service:

• Google FCM — for push notification delivery. Receives only your FCM token.
• Sentry — for crash and error monitoring. Receives device info and crash context (no personal data).
• SMS provider (MSG91 / Twilio) — for SMS delivery (OTPs, order notifications). Receives your phone number and the message content.
• Razorpay (future) — for payment processing. Receives the order amount and your phone/email for payment completion.

We do not sell your personal data to anyone. Ever.

5. How long we keep data

• Active account data: as long as your account is active.
• After account deletion: PII is anonymized within 24 hours. Order history is retained for 7 years to comply with Indian tax law (GST regulations).
• OTP codes: purged within 24 hours of generation.
• Crash reports: 90 days.
• Server logs: 30 days.

6. Your rights under the DPDP Act

You have the right to:

• Access — request a copy of your personal data.
• Correct — update inaccurate or outdated personal data.
• Delete — request deletion of your account and personal data.
• Withdraw consent — for any consent-based processing.
• Lodge a complaint — with the Data Protection Board of India.

How to exercise these rights

• In-app: Settings → Privacy → Manage / Delete Account.
• Web: digikhana.in/account-deletion
• Email: info@gstechs.in

We respond to requests within 30 days.

7. Data security

We use industry-standard security:

• TLS encryption for data in transit.
• AES-256 encryption at rest (AWS RDS).
• Limited access controls (no employee accesses your data without justification).
• Regular security reviews.

8. Children's data

DigiKhana is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact info@gstechs.in for removal.

9. Changes to this policy

We may update this policy. Material changes will be notified in-app and via email. Continued use after notification constitutes acceptance.

10. Grievance officer

Under Section 9 of the DPDP Act, you may contact our grievance officer:

• Name: Grijesh Agarwal
• Email: info@gstechs.in
• Address: Brij Nursing Home, NH-2, Kosi Kalan, Mathura, Uttar Pradesh — 281403
• Response time: within 30 days.