Privacy Policy

Who we are

Rasoi (“Rasoi”, “we”) operates the Rasoi consumer app, the Rasoi delivery partner app and this website. Our registered address is No. 31, Shop No. 2, Puspa Nilay, 2nd Cross, Vagdevi Layout, Munnekolal, Marathahalli, Mahadevapura, B.B.M.P. East, Bengaluru, Karnataka 560037, India. For anything in this policy, contact support@rasoinow.in.

What we collect

Information you give us

• Mobile number. Required — it is how you log in and how we reach you about an order.
• Name. Optional, but your first name is shown to the delivery partner so they can hand the right bag to the right person.
• Preferred language. So the app, notifications and support speak to you in it.
• Order details. Items, customisations, the pickup point and slot you chose, delivery notes, and your feedback and ratings.
• Optional profile details such as email or date of birth, only if you choose to add them.

Location

Collected automatically

• Device and app information — model, operating system, app version — to diagnose crashes and support older devices.
• Push notification token, so we can tell you your order is ready. You can revoke this in your device settings at any time.
• Usage and diagnostic logs, to find and fix problems.

What we never collect

We do not store your full card number, CVV or UPI PIN. Payments are handled entirely by our payment partner; we only ever see a transaction reference and whether it succeeded.

Why we use it

• To verify your number and keep your account secure.
• To work out whether we can serve your location, and show you the right menu.
• To take payment, prepare your order and hand it over to the right person.
• To tell you about your order by push notification and SMS.
• To provide support and investigate a problem with an order.
• To improve the food and the service, using feedback and aggregate order patterns.
• To detect and prevent fraud and abuse — including rate-limiting login codes so our SMS cannot be used to harass people.
• To meet legal, tax and food-safety obligations.

We send you transactional messages about your orders because they are necessary to the service. Marketing messages are separate and you can turn them off without affecting your ability to order.

Who we share it with

We do not sell your personal data. We share only what is necessary, with:

• Our payment partner (Cashfree Payments) — to take payment and process refunds. They receive the amount, order reference and contact details needed to process the transaction.
• Our SMS provider — your mobile number and the verification code, so it can be delivered.
• Google Firebase (Google Cloud) — our hosting, database and push infrastructure.
• Delivery partners — deliberately the bare minimum: your first name and the items in your order, revealed only after they enter your collection code. They are not given your mobile number, your address or your order history.
• Authorities, where we are legally required to disclose information.

Where your data is stored

Your data is stored in Google Cloud's Mumbai region (asia-south1), inside India. Some of our service providers may process limited data outside India; where they do, we rely on contractual safeguards with them.

How long we keep it

• Account details — while your account is open.
• Order and transaction records — retained as long as tax and accounting law requires, even after you delete your account.
• Login codes — deleted within minutes; only a one-way hash is ever stored, never the code itself.
• Diagnostic logs — typically 90 days.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything inaccurate — most of it you can edit yourself in the app.
• Delete your account and data. There is a Delete account option in the app under Account — you do not have to email anyone. It erases your profile, saved pickup points and push tokens immediately, and unlinks your past orders from you: they are re-keyed to an anonymous identifier so the records we must keep for tax no longer identify you. Deletion is refused only while an order is still in progress, since we would otherwise have cooked food nobody can collect.
• Withdraw consent for marketing messages.
• Nominate someone to exercise these rights if you are unable to.

We respond within 30 days. Account deletion itself is immediate and self-service. Order and tax records survive it, as the law requires, but they are unlinked from you rather than retained against your identity.

Security

• All traffic between the apps and our servers is encrypted in transit (TLS).
• Login codes are stored only as salted one-way hashes, with short expiry and attempt limits.
• Access to production data is restricted to staff who need it, with role-based permissions enforced on the server rather than merely hidden in the interface.
• Your collection code is readable only by you; delivery partners verify it through our servers and never receive a list of codes.

No system is perfectly secure. If we discover a breach affecting your data we will notify you and the Data Protection Board as required by law.

Children

Rasoi is not intended for children under 18. We do not knowingly collect their data; if you believe we have, contact us and we will delete it.

Cookies on this website

This marketing site sets no advertising or tracking cookies. Fonts are served from our own domain rather than a third party, so visiting this page does not disclose your visit to anyone else.

Grievance officer

In accordance with the Information Technology Act, 2000 and the rules made under it:

• Name: Mr Prakash
• Email: support@rasoinow.in
• Address: No. 31, Shop No. 2, Puspa Nilay, 2nd Cross, Vagdevi Layout, Munnekolal, Marathahalli, Mahadevapura, B.B.M.P. East, Bengaluru, Karnataka 560037, India

Changes

If we change this policy we will update the date at the top and, for anything material, tell you in the app before it takes effect.