Dineverse Solutions Private Limited (“Dineverse”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you access or use our website dineverse.in, mobile applications, or any related services (collectively, the “Platform”).

By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

1. Scope and Applicability

This Privacy Policy applies to all users of the Platform, including Customers, Restaurant Partners, Delivery Partners, and visitors. It covers the processing of digital personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable laws.

We act as a Data Fiduciary under the DPDP Act.

2. Information We Collect

We collect the following types of information:

Personal Data You Provide:

• Account information: Name, email address, phone number, password, date of birth, gender.
• Delivery and order details: Delivery address, landmarks, preferences, special instructions.
• Payment information: UPI ID, card details (processed securely via third-party gateways), billing address.
• Profile and usage data: Reviews, ratings, photos, dietary preferences, order history.
• Identity verification: Government-issued IDs (if required for specific features).

Automatically Collected Information:

• Device and usage data: IP address, device ID, browser type, operating system, app version.
• Location data: Precise or approximate location (for delivery, tracking, and service improvement) — with your consent where required.
• Cookies and tracking technologies: Session data, preferences, analytics.

Information from Third Parties:

• Data from Restaurant Partners or Delivery Partners (e.g., order status).
• Data from payment processors or analytics providers.

We collect only data necessary for the specified purposes and obtain your consent where required under the DPDP Act.

3. Purpose of Processing Personal Data

We process your personal data for the following lawful purposes (with your consent or under legitimate uses permitted by law):

• To create and manage your account.
• To process, confirm, and fulfill food orders.
• To facilitate delivery and provide real-time tracking.
• To communicate with you (order updates, promotions, customer support) — you can opt out of marketing communications.
• To improve our services, personalize recommendations, and conduct analytics.
• To process payments and handle refunds.
• To verify identity, prevent fraud, and ensure platform safety.
• To comply with legal obligations (tax, regulatory, court orders).
• To share limited data with Restaurant Partners (e.g., name, phone number, address for order fulfillment — only with your consent where required).

We will not process your data for purposes incompatible with those stated above without obtaining fresh consent.

4. Consent

We obtain your free, specific, informed, unconditional, and unambiguous consent through clear affirmative action (e.g., ticking a checkbox or clicking “I Agree”) before processing your personal data.

You may withdraw your consent at any time by contacting us or using the settings in the app/website. Withdrawal will not affect the lawfulness of processing done before withdrawal.

5. Sharing and Disclosure of Personal Data

We may share your personal data with:

• Restaurant Partners — Limited information (name, phone, delivery address) necessary for order preparation and fulfillment (subject to your consent).
• Delivery Partners — For successful delivery and tracking.
• Service Providers — Payment gateways, cloud storage (e.g., AWS or equivalent), analytics, marketing, and customer support tools — under strict confidentiality agreements.
• Affiliates and Group Companies — For operational purposes.
• Legal Authorities — When required by law, court order, or government request.

We do not sell your personal data to third parties for marketing purposes.

6. Data Storage and Security

• Your data is primarily stored in India. We may use secure third-party servers (in or outside India) with adequate safeguards.
• We implement reasonable security safeguards (technical, organizational, and physical) to protect against unauthorized access, loss, misuse, or alteration of data.
• However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected or as required by law. Once no longer needed, we will delete or anonymize it.

You may request deletion of your data (subject to legal obligations and ongoing legitimate business needs).

8. Your Rights as a Data Principal (under DPDP Act)

You have the right to:

• Access your personal data and request a summary of how it is processed.
• Correct or update inaccurate or incomplete data.
• Withdraw consent.
• Request erasure / deletion of your data (where applicable).
• Nominate another person to exercise rights on your behalf in case of death or incapacity.
• File a complaint with the Data Protection Board of India.

To exercise these rights, email us at info@dineverse.in. We will respond within the timelines prescribed under law.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, analyze traffic, and personalize content. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

10. Children’s Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such collection, we will take steps to delete it.

11. International Transfers

If any data is transferred outside India, we ensure appropriate safeguards are in place as per the DPDP Act.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The revised version will be posted on the Platform with an updated “Last Updated” date. Continued use of the Platform after changes constitutes your acceptance of the revised policy.

13. Grievance Redressal

If you have any questions, concerns, or grievances regarding this Privacy Policy or our data practices, please contact our Grievance Officer:

Dineverse Solutions Private Limited 304, Lunkad Sky Station, Konark Nagar, Viman Nagar, Pune, Maharashtra 411014

Email: info@dineverse.in Contact Number: 7607437896

We will address your grievance within the timelines specified under applicable law.

By using Dineverse.in, you acknowledge that you have read, understood, and agreed to this Privacy Policy.