Privacy Policy

The information collected depends on how a person or business uses Bite Baba and which features are configured.

We may use information to:

• create and secure accounts;
• provide Restaurant and Store services;
• process and display direct orders;
• operate billing and document features;
• operate inventory, procurement, customer, and reporting tools;
• manage subscriptions and entitlements;
• provide support;
• communicate important service and account information;
• prevent fraud, abuse, and unauthorised access;
• troubleshoot and improve reliability;
• comply with legal obligations; and
• protect Bite Baba, ScaleVertex, businesses, customers, and users.

Businesses using Bite Baba may collect customer personal data through their public menu or catalogue and through their operational workflows. The relevant business remains responsible for:

• having a lawful reason to collect customer information;
• using customer information lawfully;
• entering lawful notes and content;
• responding appropriately to its customers; and
• complying with applicable obligations that apply specifically to that business.

Bite Baba provides the software infrastructure and also processes information necessary to operate and secure the service. The legal role of a business, Bite Baba, or ScaleVertex may depend on the particular processing context and applicable law.

Personal information may be shared only as reasonably necessary with:

• infrastructure, cloud, database, authentication, and storage providers;
• hosting and technical service providers;
• communications providers where a messaging feature is used;
• the relevant Restaurant or Store owner and authorised staff;
• professional advisers where necessary;
• law-enforcement bodies, regulators, or courts when legally required; and
• a successor entity in a lawful merger, acquisition, restructuring, or transfer of business, subject to applicable law.

Bite Baba and ScaleVertex do not sell personal data to advertising companies or data brokers.

Service providers may process or store information in India or other jurisdictions. Where cross-border processing occurs, ScaleVertex will handle it subject to restrictions and requirements under applicable Indian law.

We retain personal and business information for as long as reasonably necessary to:

• provide the service;
• maintain the user's or business's account;
• maintain authoritative business and transaction records;
• meet security, fraud-prevention, and audit needs;
• resolve disputes and enforce agreements; and
• comply with applicable legal obligations.

Different categories may have different retention periods. Where deletion is permitted and appropriate, information may be deleted, anonymised, or de-identified.

Some transaction, invoice, tax, security, or legal records may need to be retained after account deletion when applicable law or legitimate recordkeeping requires it.

Bite Baba uses reasonable administrative, organisational, and technical safeguards designed to protect information. Depending on the relevant feature, these safeguards include authentication controls, tenant access controls, permission boundaries, server-side validation, access logging, secure infrastructure practices, and restricted or private storage where appropriate.

No system can guarantee absolute security.

Subject to applicable law, to the extent available under applicable law and as relevant statutory provisions come into force, individuals may have rights relating to:

• access and information;
• correction and updating;
• deletion or erasure;
• withdrawal of consent where processing relies on consent;
• grievance redressal; and
• nomination or other rights introduced by applicable law.

Requests may be sent to support@bitebaba.in. We may need to reasonably verify the requester's identity before acting on a request.

Bite Baba may use cookies or local storage required for:

• authentication and session continuity;
• security;
• preferences;
• essential site functionality; and
• limited performance or diagnostic purposes where enabled.

Bite Baba does not currently use this policy to authorise unrelated third-party behavioural advertising. If non-essential analytics or advertising tools are added later, disclosures and consent mechanisms should be updated as legally required.

Owner and staff accounts are intended for adults capable of entering into a business agreement. Bite Baba is not designed as a service directed specifically at children.

Businesses must not intentionally use Bite Baba to unlawfully collect personal data from children. Where applicable law requires parental or verifiable consent, the relevant requirements must be followed.

Bite Baba may link to or open WhatsApp, maps, or other external services. Their privacy practices are governed by their own policies, and users should review those policies when using the external service.

Where required by applicable law, affected persons and/or authorities will be notified in accordance with applicable legal requirements.

Material changes may be posted on this page and the Last Updated date revised. For significant changes, additional notice may be provided where appropriate or legally required.

Reasonable privacy and grievance requests will be reviewed and responded to in accordance with applicable law and as relevant statutory provisions come into force.