Privacy Policy

1. Who we are

KioSnap (kiosnap.store and kiosnap.com) is an online marketplace that lets local businesses — restaurants, bakeries, home brands, makers and service providers (“vendors”) — publish their catalog and take orders and bookings from customers like you.

For the purposes of India's Digital Personal Data Protection Act, 2023, KioSnap is the data fiduciary for the customer data described in this policy. The vendor you order from receives your order details and acts on them to fulfil your order.

2. What we collect

We collect only what the marketplace needs to work:

• Order details — the items you order, table or fulfilment choice, and any notes you add.
• Contact details — your name and mobile number when you place an order that needs one, or when you create an optional customer account (verified by OTP).
• Account activity — favourites, recommendations and past orders linked to your account, if you create one.
• Device and usage data — pages viewed, searches made on a store, and approximate (city-level) location inferred from your connection, used for store analytics and to improve the product.
• Cookies and similar storage — small pieces of data kept in your browser to keep you signed in, remember your cart and remember choices like your city.

3. What we do with it

• Pass your order or booking to the vendor so they can prepare and fulfil it.
• Send you transactional updates about your order (for example, when it's ready).
• Show vendors aggregate analytics about their own store — never your identity alongside another vendor's data.
• Keep the platform safe: fraud prevention, abuse detection and debugging.
• Improve KioSnap — always on aggregated or de-identified data where possible.

4. What we never do

• We do not sell your personal data.
• We do not share your contact details with any vendor other than the one you ordered from.
• We do not send you marketing messages without your consent.

5. Sharing

Your data is shared only with: the vendor fulfilling your order; service providers that run our infrastructure (hosting, SMS/OTP delivery, push notifications, analytics) under contracts limiting them to our instructions; and authorities where the law requires it.

6. Retention

Order records are retained as long as the vendor and we need them for accounting and dispute resolution. If you delete your customer account, we disassociate your favourites and recommendations and retain only what the law requires us to keep.

7. Your rights

Under the DPDP Act you can request access to, correction of, or erasure of your personal data, nominate someone to exercise your rights, and complain to the Data Protection Board of India. Write to us at hello@kiosnap.com and we will respond within a reasonable time.

8. Children

KioSnap is not directed at children. We do not knowingly process a child's personal data without verifiable parental consent.

9. Changes

We may update this policy as the product evolves. Material changes will be flagged on this page with a new “Last updated” date.