Skip to content
BiteSlot BiteSlot
Legal

Privacy Policy

Last updated: July 9, 2026

This Privacy Policy explains how BiteSlot, based in Ahmedabad, Gujarat, India ("BiteSlot", "we", "us") collects, uses and protects personal data when you visit biteslot.com (the "Website"), use the BiteSlot restaurant POS platform (the "Platform"), or communicate with us. It is published in accordance with Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Whose data this policy covers

  • Website visitors and leads — people who browse the Website, book a demo, start a trial or contact us.
  • Merchants and their staff — restaurants that hold a BiteSlot account and the staff users they add.
  • End customers of restaurants — if you are a customer of a restaurant that uses BiteSlot, that restaurant decides how your data is used; we process it on the restaurant's behalf. See Section 3.

2. What we collect

Information you give us: name, email address, phone number, restaurant/business name, city, address, GSTIN, and anything you include in demo, trial, contact or support requests.

Information collected automatically: device and browser information, IP address, pages visited, referral source and campaign parameters (UTM), and interaction data collected via cookies and similar technologies (Section 6).

Billing information: your subscription plan, invoices and payment status. Card, UPI and bank credentials are collected and processed directly by our payment gateway (currently Razorpay); we receive only payment confirmation and metadata, never full card numbers.

Platform data you process: menus, orders, tables, reservations, inventory, staff records and End Customer records that your restaurant enters into or collects through the Platform.

3. If you are a restaurant's customer

When a restaurant uses BiteSlot to take your order, send you a bill on WhatsApp, register you for loyalty points or verify your phone with an OTP, the restaurant is the data fiduciary (controller) of your data and BiteSlot is its processor. We process that data only on the restaurant's instructions and under our Data Processing Addendum. For questions about how your data is used, or to exercise your rights, please contact the restaurant first; we will assist it in responding. You may also write to us at hello@biteslot.com.

4. Why we process personal data

  • To provide, operate and secure the Website and Platform, and to authenticate users (including OTP-based login).
  • To respond to demo, trial, sales and support requests.
  • To bill subscriptions, issue GST invoices and keep accounting records (legal obligation).
  • To send transactional communications about your account, orders and service changes.
  • To send marketing communications about BiteSlot with your consent — you can opt out at any time via the unsubscribe link or by writing to us.
  • To understand how the Website and Platform are used and improve them (analytics).
  • To detect, prevent and investigate fraud, abuse and security incidents.
  • To comply with law and enforce our agreements.

We rely on your consent and on legitimate uses recognised by the DPDP Act (such as processing necessary to provide a service you have requested, or to comply with law). We do not sell personal data.

5. WhatsApp, SMS and phone

If you share your WhatsApp number or phone number with us, we may contact you about your enquiry or account on that channel. Messages sent through the Platform on behalf of restaurants (order updates, bills, OTPs) are sent via the WhatsApp Business platform and SMS gateways as directed by the restaurant.

6. Cookies and analytics

The Website uses cookies and similar technologies for:

  • Essential purposes — session management, security (CSRF protection), remembering your preferences. These are required for the site to work.
  • Analytics — Google Analytics 4 and Microsoft Clarity, to understand site usage and improve content.
  • Advertising measurement — Meta Pixel and LinkedIn Insight Tag, to measure the effectiveness of our campaigns.

Non-essential cookies are used in accordance with the choices offered on the Website. You can also control cookies through your browser settings and opt out of interest-based advertising through the respective providers (Google, Meta, LinkedIn, Microsoft).

7. Who we share data with

We share personal data only with service providers who process it for us under contract ("sub-processors"), and only as needed to run the Service:

  • Cloud hosting and infrastructure providers.
  • Payment processing — Razorpay (and any additional gateways we enable).
  • Email delivery, SMS gateways and the WhatsApp Business platform (Meta).
  • Real-time messaging infrastructure (order and KOT updates).
  • Analytics and error-monitoring tools.

We may also disclose data to professional advisers, to authorities where required by law, and to a successor entity if the BiteSlot business is reorganised or transferred (in which case this Policy continues to apply). We never sell personal data to third parties.

8. Where data is stored

Personal data is hosted with reputable cloud infrastructure providers, primarily on servers located in India. If we store or process data in another jurisdiction, we will do so with safeguards that provide equivalent protection and in accordance with applicable Indian law.

9. How long we keep data

  • Lead and enquiry data — up to 24 months from last contact, unless you ask us to delete it sooner.
  • Account data — for as long as your account is active, plus 90 days.
  • Platform data (orders, End Customer records) — while your subscription is active. After cancellation, you may export it for 30 days; we then delete it from production systems within 30 days.
  • Invoices and financial records — retained for the period required by tax and accounting law, even after account deletion.

10. Security

We protect data using encryption in transit (TLS), access controls and least-privilege administration, rate limiting and abuse protection, audit logging and regular encrypted backups. No system is perfectly secure; if we become aware of a personal data breach affecting you, we will notify you and the authorities as required by the DPDP Act.

11. Your rights

Under the DPDP Act you have the right to: access a summary of your personal data and how it is processed; correct or update it; request erasure where we no longer need it; nominate a person to exercise your rights in case of death or incapacity; withdraw consent at any time (without affecting prior processing); and have your grievance heard. Where the GDPR or another law applies to you, you have the corresponding rights under that law, including portability and objection.

To exercise any right, email hello@biteslot.com. We will verify your identity and respond within the time required by law (and in any case aim to respond within 30 days). If you are not satisfied with our response, you may complain to the Data Protection Board of India.

12. Children

The Website and Platform are business tools intended for persons aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, notify account holders by email or in-app notice.

14. Grievance Officer and contact

Grievance Officer — BiteSlot
Email: hello@biteslot.com
Phone: +91 81407 57973
Address: SF/16, Surdhara Complex, Nikol Gam Rd, Khodiar Nagar, Ahmedabad, Gujarat 382350

We acknowledge privacy grievances within 72 hours and aim to resolve them within the timelines prescribed by applicable law.

Book demo Pricing