Privacy Policy

1. Introduction

This Privacy Policy explains how BiteDirect, a restaurant technology platform operated by SWADAR LABS (OPC) PRIVATE LIMITED ("BiteDirect", "we", "us" or "our"), collects, uses, stores, discloses and otherwise processes personal information when people use our websites, applications and services.

BiteDirect provides technology services to restaurants, cafés and other food businesses, and may also provide digital interfaces through which their customers view menus or place orders. This Policy applies to restaurant owners and administrators, employees and authorised users, customers who interact with restaurants through BiteDirect, and visitors to our websites and applications.

The restaurant operating the relevant account is generally responsible for the customer-facing food service and for determining the purposes for which it uses customer order information. BiteDirect processes information to provide and secure the platform and may separately process limited information for its own account administration, security, support and legal compliance purposes.

2. Services covered

BiteDirect offers the following commercial service categories. The information processed can vary according to the service selected and the features enabled:

• Lifetime Offline Billing: device-based billing functionality designed to operate offline, subject to the purchased licence and product configuration.
• Online Billing: billing functionality using online services and cloud synchronisation where enabled.
• Restaurant/Cafe Management: tools such as menu, table, billing, kitchen, staff, reporting and restaurant operations management.
• Online Orders: digital menus, QR-code ordering, customer order submission and order management.

Some accounts may use more than one service or additional features. The applicable account configuration determines which features are available.

3. Information we collect

Restaurant and account information. This may include restaurant or business name, owner or authorised user's name, contact details, email address, business address, restaurant location, GSTIN or other business details, logo, menu, prices, opening hours, subscription and licence details, and account preferences.

Employee and authorised-user information. This may include names, login identifiers, roles, permissions, contact details where supplied, and account activity needed to administer access.

Customer and order information. Depending on the restaurant's settings and ordering flow, this may include customer name, phone number or email address if provided or requested, table identifier, order items, quantities, special instructions, order history, timestamps, invoice details and order status.

Payment and transaction information. We may receive transaction references, amount, payment status, payment method category and reconciliation details from a payment provider. Payment credentials such as UPI PINs, banking passwords and full card security credentials should be entered only in the payment provider's secure interface and are not intended to be stored by BiteDirect.

Technical information. This may include device type, operating system, browser and app version, IP address, diagnostic logs, crash reports, login timestamps and security events.

Location information. Restaurant location or coordinates may be used for restaurant discovery or location-based features. Device location is used only where a feature requires it and the relevant permission is granted.

4. How we use information

We use information, as applicable, to:

• create, authenticate and administer restaurant and user accounts;
• provide billing, invoicing, menu, QR ordering, kitchen and restaurant management features;
• receive and route orders to the relevant restaurant and its authorised devices;
• generate operational, sales, tax and reconciliation reports based on information entered into the platform;
• maintain subscriptions, licences, payments and customer support;
• send service messages, security alerts and operational notifications;
• diagnose errors, maintain platform performance and improve features;
• detect fraud, abuse, security incidents and unauthorised access;
• comply with legal obligations and respond to lawful requests.

We do not sell personal information to third parties for their independent marketing purposes.

5. QR-code ordering and restaurant responsibilities

When a customer scans a restaurant's QR code or uses a BiteDirect ordering interface, the customer may view a menu and submit an order. The order and related details are made available to the restaurant and its authorised users so that the restaurant can accept, prepare and fulfil the order.

The restaurant determines its menu, prices, availability, food preparation, customer service and fulfilment. Customers should review the restaurant's own notices and policies where provided. The restaurant is responsible for having an appropriate legal basis and providing required notices for its use of customer information.

6. Payments

Payments may be processed by third-party payment gateways or payment service providers selected or enabled for the relevant transaction. Those providers may collect and process payment details under their own terms and privacy policies. BiteDirect may receive payment status, transaction identifiers and related reconciliation information to update order or billing records.

BiteDirect does not control the independent privacy and security practices of payment providers. Customers should review the applicable provider's terms when making a payment.

7. Offline billing and local device storage

Lifetime Offline Billing and other supported configurations may store billing or operational information locally on a device. Depending on the configuration, local information may not be uploaded to BiteDirect cloud systems or synchronised with other devices. Online features, updates, activation, backups or support may require an internet connection.

Local data may be lost if a device is damaged, reset, replaced, the application is removed, or browser/application storage is cleared. Restaurants are responsible for securing their devices, controlling access and maintaining appropriate backups. Do not assume that offline records are backed up to the cloud unless the relevant feature confirms synchronisation.

8. Sharing and service providers

We may disclose information where reasonably necessary to provide the service or meet legal obligations, including to:

• cloud hosting, database, authentication, analytics, security and infrastructure providers, including Firebase or other providers used by the platform;
• payment gateways and financial service providers for payment processing and reconciliation;
• SMS, email, push notification and communications providers where enabled;
• the restaurant and its authorised staff, for orders and restaurant operations;
• professional advisers, auditors and insurers where reasonably necessary;
• courts, regulators, law enforcement or government authorities where disclosure is required by law or a valid legal process.

We require service providers handling information on our behalf to use appropriate safeguards and process it for authorised purposes, subject to their applicable contractual arrangements.

9. Data security

We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss, misuse, alteration and disclosure. Measures may include authentication, access controls, security monitoring and safeguards provided by our infrastructure vendors.

No electronic system or transmission method can be guaranteed to be completely secure. Users must protect passwords, devices and access credentials and promptly report suspected unauthorised access.

10. Data retention and deletion

We retain information for as long as reasonably necessary to provide the services, administer accounts and licences, maintain transaction records, resolve disputes, protect the platform and comply with applicable legal requirements. Retention periods may differ by data type and service configuration.

When information is no longer required, we will take reasonable steps to delete or anonymise it, subject to legal retention duties, dispute preservation and technical limitations. Information held only on a restaurant's device may need to be deleted by the restaurant or device user.

11. Your choices and rights

Subject to applicable law, individuals may have rights to request access to information, correction of inaccurate information, erasure, withdrawal of consent where processing is based on consent, and grievance redressal. The availability and scope of these rights depend on the applicable law and the role BiteDirect or the restaurant has in relation to the information.

For information relating to a particular food order, customers may need to contact the restaurant that received the order.

12. Children's information

BiteDirect is intended for business users and general restaurant customers. Restaurants must not knowingly collect or submit children's personal information through BiteDirect except in compliance with applicable law, including any required parental or guardian consent and safeguards. If you believe a child has provided personal information inappropriately, contact us.

13. Third-party services

BiteDirect may link to or integrate with third-party websites, payment providers, devices, applications or services. Those services are operated independently and are governed by their own terms and privacy policies. We are not responsible for their content, availability or independent data practices.

14. Changes to this Policy

We may update this Privacy Policy to reflect changes to our services, data practices, technology or applicable law. We will publish the updated version with a revised effective date. Where required by law, we will provide additional notice or obtain consent.

15. Contact and grievance redressal

For privacy questions, requests or complaints, contact:

• Platform: BiteDirect
• Legal entity / Operator: SWADAR LABS (OPC) PRIVATE LIMITED
• Support email: contact@swadar.in
• Website: https://www.bitedirect.in/
• Registered address:
  SWADAR LABS (OPC) PRIVATE LIMITED
  #677, 1st Floor, Suite No.365
  27th Main, 13th Cross
  HSR Layout, Sector 1, Bangalore
  Karnataka, India 560 102

We will handle grievances within the period prescribed by applicable law.