Menu99 Privacy Policy

1. Introduction

Menu99 (“Menu99”, “we”, “us” or “our”) provides cutting-edge digital operating tools that allow customers to view digitized culinary menus, transmit contactless orders, settle payments, and interact smoothly with independent food kiosks, food stalls, cafes, cloud kitchens, and restaurants (“Merchants”).

This Privacy Policy explains how personal data is collected, handled, maintained, and safeguarded when visiting menu99.in, associated subdomains, QR-based ordering portals, and merchant operating consoles (collectively, the “Platform”).

2. Information We Collect

To ensure lightning-fast counter operations, accurate kitchen order tickets, and reliable transaction records, we collect minimal and relevant information across user categories:

A. Customer Information

• Contact Identification: Customer name, mobile phone number, and email address where voluntarily provided for token delivery, receipts, or loyalty.
• Order & Dining Records: Items chosen, food notes, table number, stall counter token identifier, timestamp, fulfillment method (Dine-in, Takeaway, Delivery), and customer care interactions.
• Fulfillment Coordinates: Table reference, stall QR code locator, or designated takeaway delivery location where applicable.
• Guest Checkout: Customers may order frictionlessly via guest mode without app installations; only data critical for cooking and serving the order is captured.

B. Merchant Information

• Business Credentials: Food stall/cafe/cloud brand title, business location coordinates, owner and manager authorized details, and dashboard credentials.
• Operational Catalog: Menu inventories, pricing structures, modifier configurations, live availability flags, operating hours, and daily turnover reports.
• Regulatory Compliance: FSSAI registration numbers, business licenses, and tax identifiers required for statutory verification.

C. Transactional & Financial Data

Payment settlements may occur via authorized third-party UPI gateways (e.g., Google Pay, PhonePe, Paytm), QR stands, or card acquirers. Menu99 does NOT collect, view, or retain secret financial credentials such as card CVVs, Netbanking credentials, or UPI PINs. All payment processing occurs on encrypted, PCI-DSS compliant partner networks.

D. Technical Diagnostics & Telemetry

To preserve 99.9% cloud uptime, verify device compatibility across Android, iOS, tablets, and desktops, and prevent fraudulent punch manipulations, we process browser identifiers, session cookies, connection IP, and technical diagnostic telemetry.

3. Purpose and Enhanced Platform Intelligence

We utilize collected data transparently to deliver, secure, and continually refine our food operating ecosystem:

• Instant Order Routing: Transmitting live orders directly to counter screens, kitchen display units, and automated token printers.
• Real-time Status Alerts: Dispatching token calls, KOT receipts, and bill confirmations seamlessly via WhatsApp, SMS, or in-browser notifications.
• Platform Analytics & Intelligence: Aggregating anonymized consumption trends, peak-hour traffic logs, and menu interaction metrics to assist food entrepreneurs in optimizing inventory, reducing food waste, and curating superior dining menus.
• Security & Abuse Prevention: Guarding merchants against malicious spam orders, unverified chargebacks, and unauthorized terminal access.
• Statutory Adherence: Generating accurate billing registers, GST reconciliation reports, and complying with lawful government directives.

4. Legal Grounds, Notice & Consent

All data operations comply strictly with applicable Indian legislation, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and associated data governance rules.

By utilizing Menu99’s digital QR codes and merchant software, users consent to data processing necessary for order fulfillment. Consent may be revised or withdrawn at any time by contacting our Privacy Desk, without affecting prior lawful processing.

5. Disclosure & Information Sharing

We strictly preserve your data privacy: Menu99 NEVER sells, rents, or monetizes personal customer details to third-party data brokers or advertisers.

Information is disclosed solely under legitimate operational parameters:

• To the Preparing Merchant: Necessary order specifics (items, table number, customizations, customer note) are shared exclusively with the outlet preparing your food.
• To Essential Infrastructure Partners: Highly trusted cloud hosting platforms (e.g., AWS/Google Cloud), SMS/WhatsApp notification gateways, and certified payment switches.
• Legal & Regulatory Authorities: Where mandated by court decrees, valid judicial warrants, or competent government authorities.

6. Merchant & User Responsibilities

Merchants accessing customer contact details through the Menu99 Dashboard agree strictly to use such information solely for authentic order coordination, customer service, or feedback. Unsolicited third-party promotion or unpermitted customer data harvesting by merchants constitutes a material breach of terms.

7. Cookie Usage & Preferences

Menu99 uses lightweight, essential functional cookies to keep track of active tables, counter POS sessions, and selected cart items. These cookies contain no sensitive tracking payloads and can be managed directly through browser preferences.

8. Data Retention & Erasure

Operational logs and transaction histories are retained only as long as required for accounting compliance, fraud defense, and audit obligations under Indian taxation law. Once expired, records are systematically scrubbed or permanently anonymized. Users may request account deletion by emailing info@menu99.in.

9. Robust Data Safeguards

We enforce enterprise-grade security protocols, including 256-bit SSL/TLS encryption for all data-in-transit, strict role-based access tokens, hashed password cryptography, and continuous cloud threat monitoring.

10. Grievance Redressal & Official Contact

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Rules, 2021, queries, rights requests, or grievances may be lodged with our appointed officer: