Privacy policy

Dinapse is operated by Blue Moon Enterprise, a business registered in India with its office at Azamgarh, Uttar Pradesh 276131, India (“Dinapse”, “we”, “us”).

For restaurant accounts (owners and their staff), we decide how and why your information is used, so we are the data fiduciary under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

For guests who order at a restaurant, the restaurant is the data fiduciary for their information and we process it on the restaurant's behalf as its data processor, only to run their menu and table ordering. Questions about a restaurant's use of your information are best sent to that restaurant; we'll help them answer.

Restaurant owners

• Your email address and a password (stored only as a secure hash).
• Restaurant details: name, menus, dishes, prices, photos, logos, tables and settings you add.
• Billing details you give us: business name, billing address, country and, if you have one, your GSTIN.
• Your plan and payment history: amounts, dates, the payment and subscription IDs from our payment provider, and whether the card was issued outside India. We never see or store your full card number or bank details; Razorpay handles them.

Staff

• The name and role (for example waiter or kitchen) the owner gives each staff member, and their PIN, stored only as a secure hash.
• Which staff member seated a table or handled an order.

Guests

• The first name or nickname a guest types so their table can see who added what. Guests don't need an email, phone number or account.
• What they order, likes and comments on dishes, and requests such as “water” or “bill”.
• A random identifier for their browser, so they stay part of their table group if they refresh the page.

People who book a demo

• Name, email, phone number, restaurant name, the time you choose and any message you write.

Everyone

• Technical information our servers receive with every request, such as IP address, browser type and the country your connection appears to come from. We use it to keep Dinapse secure (for example to stop repeated sign-in attempts).

• To run Dinapse: menus, table ordering, the kitchen board, the floor view and insights.
• To create and secure accounts, including sign-in and staff PINs.
• To take payments, apply the right prices and taxes, and keep tax records.
• To send service emails: account and security notices, receipts and plan changes, trial reminders and demo confirmations.
• To answer support requests and run demos you book.
• To prevent fraud and abuse, and to fix and improve Dinapse.

We don't sell personal information, and we don't use it for advertising. We won't send marketing emails without your permission.

Why we're allowed to use it: under the DPDP Act, we use your information either with your consent, which you can withdraw at any time, or for a legitimate use the Act allows: for example, when you give us information for a specific purpose (such as signing up or booking a demo), or when the law requires it (such as keeping tax records).

We share information only with service providers who help us run Dinapse, under contracts that require them to protect it and use it only for us:

Guests' names, orders and requests are shared with the restaurant they ordered from. We may also disclose information if the law requires it, to protect people's safety, or as part of a merger or sale of our business (you'd be told first).

Dinapse is run from India, and our website and database are hosted in India. Some of our service providers (listed above) may process information outside India; we only do this as the DPDP Act permits, and never to a country the Government of India has restricted.

We use only what Dinapse needs to work. There are no advertising or tracking cookies.

• Account and restaurant data: while your account is open, then deleted within 30 days of closing it, except what we must keep by law.
• Payment and tax records: 8 years, as Indian tax law requires.
• Guest orders and requests: kept as part of the restaurant's order history for as long as the restaurant's account is open, unless the restaurant asks us to delete them sooner.
• Demo bookings: 12 months after the demo, unless you become a customer.
• Security logs: no longer than needed to keep Dinapse secure.

Connections to Dinapse are encrypted. Passwords and PINs are stored only as secure hashes. Sign-in is rate-limited, staff see only what their role needs, and access to our systems is restricted and logged. No system is perfectly secure, but if a breach affects you, we'll tell you and the authorities as the law requires.

Under the DPDP Act, you can ask us to:

• give you a summary of the information we hold about you and how we use it, and tell you who we've shared it with;
• correct, complete or update information that is wrong;
• delete your information, unless we must keep it by law (such as tax records);
• withdraw consent you've given, as easily as you gave it;
• nominate someone to exercise these rights if you die or can't act yourself.

Email team@dinapse.com and we'll reply within 30 days. Guests can also ask the restaurant directly. If you're unhappy with our answer (see Grievances), you can complain to the Data Protection Board of India.

Restaurant accounts are for adults running a business. Children may order at a restaurant with the adults they're with; we don't knowingly collect more than a first name from them and never use it for anything but their order.

In line with India's Information Technology Rules, 2021 and the Digital Personal Data Protection Act, 2023, you can raise a grievance with us:

Blue Moon Enterprise
Azamgarh, Uttar Pradesh 276131, India
Email: team@dinapse.com

We acknowledge complaints within 24 hours and resolve them within 15 days.

If we make important changes, we'll email restaurant owners and update the date at the top of this page before they take effect.

Questions about privacy: team@dinapse.com. For anything else, see our contact page.