Privacy Policy

• Business name, address, city, and operational details
• GST number and FSSAI license number
• Owner/admin name, phone number, and email address
• Account credentials (username and hashed password)
• Subscription plan and billing information
• Menu items, pricing, descriptions, and images uploaded to the platform

• Name, phone number, and email address
• Delivery address and location details
• Order history, preferences, and cart data
• Payment information (processed via Razorpay; we do not store full card or UPI credentials)
• WhatsApp phone number and conversation data, where ordering is via WhatsApp

• Usage data: pages visited, features used, time spent, and interaction logs
• Device information: device type, operating system, browser type, and unique device identifiers
• IP address and approximate location derived from IP (we do not collect precise GPS location without consent)
• Log data: server logs, error reports, and diagnostic data
• Session cookies and analytics identifiers

Marinate360 operates as a Meta Tech Provider and integrates with the WhatsApp Business Platform (Cloud API) to enable restaurants to receive and manage customer orders via WhatsApp. We collect and process:

• WhatsApp Business Account (WABA) details of onboarded restaurants
• WhatsApp phone numbers associated with restaurant accounts
• Message content sent and received through the WhatsApp Business API on behalf of restaurants
• Message delivery status, read receipts, and conversation metadata
• Customer WhatsApp numbers and conversation history as directed by the restaurant

We process this data strictly to provide messaging and ordering services. We act as a data processor on behalf of restaurants (data controllers). We do not use WhatsApp message content for advertising or sell it to third parties.

All payment transactions are processed through Razorpay, a licensed Payment Aggregator regulated by the Reserve Bank of India. We receive transaction confirmation and order reference data from Razorpay. We do not store full card numbers, CVV codes, UPI PINs, or other sensitive payment credentials on our servers.

When an order involves third-party delivery, we share necessary order and address data with our delivery API partners (Pidge, Rapido, Borzo, Shadowfax, and others as applicable). We receive back delivery status, tracking updates, and fulfilment data from these partners.

We use MSG91 for SMS and OTP delivery. Phone numbers used for communication are processed through MSG91 in accordance with their data handling policies and TRAI regulations.

• Create and manage restaurant, staff, and customer accounts
• Process food orders and facilitate customer-restaurant communications
• Enable WhatsApp-based ordering on behalf of restaurants
• Manage menus, inventory, and restaurant operations (Marinate Dine, Marinate Menu, and Marinate360 tiers)
• Process payments via Razorpay and generate invoices
• Coordinate delivery dispatch via third-party delivery APIs

• Analyse usage patterns to improve features and user experience
• Conduct research and development of new features
• Diagnose and fix technical issues using log and analytics data

• Send service-related notifications, OTPs, and order updates via SMS (MSG91) and push notifications (Firebase/FCM)
• Respond to support requests and inquiries
• Send platform updates, policy change notifications, and marketing communications (with consent where required)

• Comply with applicable Indian laws, including the DPDP Act 2023, IT Act 2000, and RBI/FSSAI regulations
• Enforce our Terms of Service
• Protect against fraud, abuse, and security threats
• Respond to lawful requests from government authorities

Payment transactions are processed by Razorpay Software Private Limited. Customer payment data is governed by Razorpay's Privacy Policy. Marinate360 receives only order confirmation and settlement data.

Our WhatsApp integration operates through Meta's Cloud API. Message data is subject to Meta's Data Policy and WhatsApp Business Platform Terms. We access WhatsApp Business accounts only with explicit restaurant authorisation.

For delivery orders, we transmit the customer's name, delivery address, and order details to the relevant delivery API partner via their APIs. Each partner processes this data under their own privacy terms. Marinate360 is a technology intermediary and is not a delivery company. Future integrations may include Swiggy, Zomato, or other delivery networks.

Phone numbers are shared with MSG91 for delivery of OTPs, order confirmation SMS, and other transactional messages. MSG91 processes this data in compliance with TRAI guidelines.

Our backend runs on Supabase (PostgreSQL database and Edge Functions) and Google Firebase (push notifications via FCM). Data is stored and processed on these platforms in accordance with their respective data processing agreements. Some of our service providers (including Meta, Google, and Supabase) may process data outside India. We ensure appropriate contractual safeguards are in place for such transfers, consistent with the DPDP Act 2023.

We use the Google Distance Matrix API and related Google Maps services for proximity-based features such as restaurant discovery and delivery radius calculations. Location data used for these purposes is subject to Google's Privacy Policy.

We may disclose information if required by law, court order, or government authority in India, or if necessary to protect the rights, property, or safety of Marinate360, our users, or the public.

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify affected users of any material change.