Quick Bites Privacy Policy

Effective Date: September 5, 2026 Last Updated: October 11, 2026 Governing Law: Digital Personal Data Protection Act (DPDP Act 2023), Republic of India

Who operates this platform

Quick Bites is operated by:

The Udyam registration can be verified by anyone at https://udyamregistration.gov.in.

This is an MSME registration, not a tax registration. It confers no right to charge or reclaim tax, and nothing issued by this platform is a tax invoice. Customers receive a payment receipt, which says what was paid and makes no tax claim. A GST registration, if and when one exists, is a separate thing and will be shown separately.

These details are held as a record an administrator can correct, not compiled into the software, so an address change or a reclassification is a correction rather than a release. The authoritative copy is the one served at /api/policies/business; if this document and that endpoint ever disagree, the endpoint is current.

1. Introduction

Quick Bite Technologies Private Limited ("Quick Bite", "we", "our", or "us") operates the Quick Bite customer mobile application, restaurant partner portal, rider partner application, and administrative web interfaces (collectively, the "Platform"). We are committed to safeguarding the privacy and personal data of our customers, merchant partners, and delivery personnel.

2. Personal Data We Collect

1. Identity & Contact Data: Full name, verified email address, verified Indian mobile phone number, delivery addresses, and profile pictures.
2. Geolocation Data: Precise GPS coordinates (latitude and longitude) captured to enable restaurant discovery, accurate doorstep delivery routing, and live order tracking.
3. Transactional & Billing Data: Order histories, item preferences, dietary preferences (such as vegetarian flags), coupon redemption records, and payment transaction identifiers (we do NOT store credit card CVVs or netbanking passwords; all payments are processed via PCI-DSS certified gateways such as Razorpay).
4. Merchant KYC Data: 14-digit FSSAI license numbers, Goods and Services Tax Identification Numbers (GSTIN), Permanent Account Numbers (PAN), and bank account verification details for payout settlement.
5. Technical & Telemetry Data: Device models, operating system versions, IP addresses, correlation IDs, and crash telemetry.

3. Legal Grounds & Purpose of Processing

We process personal data solely for lawful purposes under Section 4 and Section 6 of the DPDP Act 2023:

• Order Fulfillment: Transmitting delivery address and order items to fulfilling restaurants and assigned delivery partners.
• Safety & Verification: Verifying order dropoffs via one-time passwords (OTPs) and verifying merchant food safety credentials.
• Customer Support & Dispute Resolution: Investigating delivery failures, processing authorized refunds, and responding to consumer inquiries.
• Fraud Mitigation: Preventing payment velocity fraud, multi-accounting coupon abuse, and automated scraping.

4. Data Sharing & Third-Party Processors

We do not sell personal data to data brokers. We share data only with the service providers strictly necessary to deliver our services:

• Railway Corporation: Hosting of our servers and our database, where account, order and payment records are stored.
• Razorpay Software Private Limited: Payment processing, refunds and payouts to restaurants and delivery partners.
• Brevo (Sendinblue SAS): Emailing the one-time sign-in code to the email address you give us.
• Firebase / Google Cloud: Push notifications sent to Android phones.
• Apple Inc.: Push notifications sent to iPhones (Apple Push Notification service).
• Mapbox Inc.: Maps, address lookup and road distances used to calculate delivery pay and fees.
• Meilisearch: Search across restaurants and dishes (restaurant and menu data only).
• Groq Inc.: Reading a restaurant's printed menu from photos the restaurant chooses to upload (menu images only, no customer data).

5. User Rights Under the DPDP Act 2023

You have the following statutory rights regarding your personal data:

1. Right to Access: Request a complete summary of personal data held about you and processing activities undertaken.
2. Right to Correction & Erasure: Request correction of inaccurate information or permanent deletion of your account and associated personal data.
3. Right of Grievance Redressal: Lodge inquiries or complaints with our designated Data Protection Officer.
4. Right to Nominate: Nominate an individual to exercise your rights in the event of death or incapacity.

6. Data Retention & Security

• Personal transaction records are retained for a period of five (5) years to comply with Indian tax regulations and the Consumer Protection (E-Commerce) Rules 2020.
• Telemetry and session logs are automatically purged after ninety (90) days.
• All stored data is encrypted at rest using AES-256 and transmitted over TLS 1.3 encrypted connections.

7. Contact & Grievance Officer

In accordance with the Information Technology Act 2000 and the DPDP Act 2023, the details of the Grievance Officer are:

• Designation: Data Protection & Grievance Officer
• Email: officalquickbites@gmail.com
• Phone: 7899415741
• Address: QUICK BITES, Harohalli, Kanakapura Main Road, Harohalli, Ramanagara, Karnataka 562112, India.