Privacy Policy

How Servoraa collects, uses, protects and deletes your personal data

1. Who we are

Data Fiduciary: Servoraa, a HashHorizon venture. Contact: tech@hashhorizon.in · +91 89480 80894. Grievance Officer: tech@hashhorizon.in.

2. Data we collect

• Identity & contact: your name and mobile number.
• Order data: dishes, quantity, amount, date, and the restaurant you ordered from.
• Message preferences: service messages, marketing messages, or both.
• Technical data (minimal): logs needed for security and delivery.

We do not collect your address, email, payment-card numbers, government IDs, or location history through the ordering flow.

3. Why we use it

We process your data on the basis of the consent you give, and for limited legitimate uses permitted by the DPDP Act — to fulfil your order, send the service/marketing messages you opted into, run anonymised offer campaigns for restaurants without revealing your identity, and keep the Platform secure.

4. What restaurants can and cannot see

• Restaurants CAN see: dishes, quantities, amounts, sales totals and order patterns — without your identity.
• Restaurants CANNOT see: your name or mobile number — these are masked from the restaurant interface.
• Restaurants CAN request campaigns by order pattern; Servoraa sends them and never discloses your contact details.

5. Sharing & disclosure

We do not sell your personal data or share it with restaurants/third parties for their own use. We share it only with processors operating the service on our instructions (e.g. our WhatsApp Business messaging provider) under data-protection obligations, and where legally required.

6. Security

Encryption in transit and at rest, access controls that mask your identity from restaurants, and restricted internal access. The WhatsApp delivery leg is end-to-end encrypted by WhatsApp. We maintain a breach-response process and will notify the Data Protection Board and affected users as required by law.

7. Retention

We keep your name and mobile number for up to 180 days from your last order. After 180 days of inactivity — or earlier if you delete your data or withdraw consent — we delete or irreversibly anonymise it. Anonymised order statistics may be retained for analytics.

8. Your rights

• Access, correction & erasure of your data.
• Withdraw consent as easily as you gave it (reply STOP, portal, or call).
• Grievance redressal with our Grievance Officer.
• Nominate someone to exercise your rights in case of death or incapacity.

9. Children

Intended for users aged 18+. We do not knowingly collect children’s data; processing a child’s data needs verifiable parental consent.

10. Changes & contact

We may update this policy and post the new version with an updated date. Questions: tech@hashhorizon.in.

Terms of Service

The agreement governing use of the Servoraa service

1. The service

Servoraa provides a QR-based ordering and WhatsApp engagement layer used by partner restaurants. The food, service, pricing and order fulfilment are provided by the restaurant, not Servoraa.

2. Eligibility

You must be 18 or older and provide accurate information. You are responsible for the mobile number you submit.

3. Your responsibilities

• Provide an accurate mobile number.
• Use the service lawfully — no fraud, abuse, or spam.
• Do not disrupt, reverse-engineer, or gain unauthorised access to the Platform.

4. Orders, pricing & payment

Menu items, prices, availability, taxes and charges are set by the restaurant and may change. Payment is collected by the restaurant (UPI or cash at the counter) unless Servoraa expressly processes payment, in which case separate payment terms apply.

5. Messaging consent

If you opt into service and/or marketing messages, you consent to receive them on WhatsApp at the number you provide. You can opt out anytime (reply STOP or call +91 89480 80894).

6. Servoraa’s role & disclaimers

Servoraa is a technology platform, not the seller of food. To the extent permitted by law, Servoraa is not liable for the quality, safety or fulfilment of restaurant orders. The service is provided “as is”.

7. Limitation of liability

Servoraa’s total liability for any claim is limited to the amount of the relevant order. Servoraa is not liable for indirect, incidental, or consequential losses. Nothing here limits liability that cannot be limited under Indian law.

8. Intellectual property

The Servoraa name, logo, software and content are owned by Servoraa (or its licensors).

9. Suspension & termination

We may suspend the service for breach or misuse. You can stop using it and delete your data anytime.

10. Governing law

Governed by the laws of India; courts at Bengaluru, Karnataka have jurisdiction, subject to your consumer-protection rights.

11. Changes & contact

We may update these Terms; continued use means acceptance. Contact: tech@hashhorizon.in.

Data Processing Terms

Governing Servoraa ↔ Restaurant handling of customer data

1. Roles

Servoraa determines the purposes and means of processing customer personal data and is the Data Fiduciary. The Restaurant receives only anonymised order data and may request offer campaigns; it does not receive customer identity data.

2. Data access

• Customer name & mobile number — Servoraa: yes · Restaurant: no (masked).
• Dishes / quantity / amount — Servoraa: yes · Restaurant: yes.
• Daily sales totals & staff attendance — Servoraa: yes · Restaurant: yes.
• Message preferences — Servoraa: yes · Restaurant: no.
• Offer targeting by order pattern — Servoraa executes · Restaurant requests.

3. Restaurant obligations

• Do not re-identify, de-mask, scrape or otherwise obtain customer names or numbers.
• Use anonymised data and campaigns only to market your own establishment.
• Request campaigns only through Servoraa; never message customers directly using Platform data.
• Secure your own credentials, sales and staff-attendance data; limit access to authorised staff.
• Do not export, retain or transfer Platform data beyond the interface without written authorisation.
• Report any suspected breach or misuse to Servoraa without undue delay.

4. Servoraa obligations

• Mask customer identity from the Restaurant at all times.
• Process customer data only for consented purposes; honour deletion/withdrawal promptly.
• Apply reasonable security safeguards and keep records of processing.
• Execute campaigns without disclosing customer contact details.

5. Sub-processors

Servoraa may use sub-processors (e.g. WhatsApp Business messaging, cloud hosting) under equivalent data-protection obligations. A current list is available on request.

6. Breach, audit & termination

The parties cooperate on breach notification to the Data Protection Board of India as required by the DPDP Act. On termination, the Restaurant loses all access to Platform data; Servoraa deletes or anonymises customer data per its retention policy.