Privacy policy

This policy explains how Padosi handles your personal information. We keep it short and specific. We collect what we need to run orders, and we do not sell your information.

Who we are

Padosi is operated by Tejash Padia, a sole proprietor, Bengaluru, Karnataka, 560035. We decide why and how your information is used, which makes us the data fiduciary under India’s Digital Personal Data Protection Act, 2023, and the body responsible under the Information Technology Act, 2000.

What we collect

Who	Information	Why
Everyone	Mobile number; name; society, tower and flat; one-time codes (kept briefly); sign-in token; app activity such as orders and reviews	To sign you in, show you the right society’s cooks, and run orders
Residents	Orders, items, amounts, order status, pickup code, payment status and payment reference, refund status, reviews you write	To fulfil orders, process refunds, handle support and show reviews
Sellers	Store name, description and cuisine tags, location in the society, contact number, UPI ID for payouts, FSSAI number if provided, menu, earnings and payout records	To approve and run your store, pay you, and meet legal and tax duties
If you turn on notifications	A device notification address issued by your browser, and the device’s browser type	To send you order alerts
Everyone	Technical data such as IP address, device and browser type, and error logs	Security, fraud prevention and fixing faults

We do not collect or store your card number, UPI PIN, bank password or net-banking credentials. Payments are handled by our payment partner, which gives us only the result (paid, failed, refunded) and a reference number.

How we use it

To create and secure your account, including sending sign-in codes by SMS.
To process orders, payments, refunds and seller payouts.
To show sellers the details they need to hand over an order, and to show reviews.
To send order alerts you have asked for, and messages about your account or these policies.
To prevent fraud and abuse, keep records the law requires, and resolve complaints.
To improve Padosi. We do not use your information for advertising and we do not sell it.

The seller you order from. When you place an order, the seller sees your name, tower, flat and mobile number, and what you ordered, so they can prepare and hand it over. They must use these details only for that order.
Other residents. Reviews you write show your name, tower and flat.
Service providers who process data for us: our payment partner (payments and refunds), our SMS provider (sign-in codes), and our hosting provider (servers). They may use your information only to provide their service to us.
Authorities, where the law requires or to protect rights and safety.

We never show your mobile number to other residents. Sellers never see your payment details, and residents never see a seller’s UPI ID.

Notifications and device storage

Padosi does not use advertising or tracking cookies. To keep you signed in for 30 days and to remember simple preferences, the app stores a sign-in token and some settings in your browser’s local storage. If you turn on notifications, your browser also keeps a notification subscription. You can turn notifications off in Account, and logging out removes the token and the subscription from that device. Clearing your browser data does the same.

How long we keep it

Account details, while your account is active.
One-time codes, only for a few minutes.
Order, payment, refund and payout records, for as long as accounting, tax and consumer laws require, even after you delete your account.
Other information is deleted or anonymised within 30 days of a verified deletion request. See Delete your account.

Your rights

Under the Digital Personal Data Protection Act, 2023 you may:

ask for a summary of the personal data we hold and who we share it with;
ask us to correct or update it (you can also change your details in the app);
ask us to erase it, subject to records we must keep by law;
withdraw consent, for example by turning off notifications;
nominate someone to exercise your rights if you die or cannot do so;
complain to us, and if we do not resolve it, to the Data Protection Board of India.

Write to tejashpadia95@gmail.com from the email address or mobile number linked to your account. We may ask you to confirm your identity first.

Security

We protect data with encrypted connections (HTTPS), one-time-code sign-in, limits on code requests, and access controls. No system is perfectly secure. If a breach affects your personal data we will notify you and the authorities as the law requires.

Children

Padosi is for people aged 18 and over. We do not knowingly collect information from children. If you think a child has an account, tell us and we will delete it.

Changes

If we change what we collect or how we use it, we will update this page and the effective date, and tell you in the app for significant changes.

Contact

Privacy questions and requests: tejashpadia95@gmail.com, attention Tejash Padia. We acknowledge within 48 hours and respond within one month.