Privacy Policy
Last updated: June 8, 2026
What we collect
Account information you provide (name, email, phone, restaurant name, address, GSTIN), usage data from the product, and customer/order data your restaurant processes through BiteSlot.
Why we collect it
To provide the service, send transactional communications, improve the product and (with your consent) market new features. We do not sell personal data.
How long we keep it
Account data: as long as your account is active, plus 90 days after cancellation. Order/customer data: as long as your account is active. After cancellation, you may export it; we delete it within 30 days unless legally required to retain longer.
Data residency
Primary data is stored in India (Mumbai region). Disaster-recovery copies are stored in a second Indian region. Cross-region replication may be enabled on Enterprise plans on request.
Your rights
Access, export, correct or delete your personal data at any time by writing to hello@biteslot.com. We will respond within 30 days. India IT Act, GDPR and equivalent rights apply where applicable.
Sub-processors
We use sub-processors for hosting (AWS Mumbai), email (Mailgun), error tracking (Sentry), analytics (Google Analytics 4) and WhatsApp Business API (Meta). Full list available on request.
Cookies
We use cookies for session, security, analytics and marketing. You can opt out of non-essential cookies in our cookie banner.
Contact
Data Protection Officer: dpo@biteslot.com