Privacy Policy

When you place an order, the restaurant needs enough to cook it and get it to you, so we collect:

• Your name and mobile number.
• Your email address, if you choose to give one.
• For delivery orders: your delivery address, city, PIN code and the approximate coordinates of that address, which our delivery partner needs to quote a fee and route a rider.
• The order itself — items, variants and add-ons, quantities, amounts, your note to the restaurant, and the order’s status over time.
• A payment reference returned by our payment gateway, so we can match your payment to your order and process a refund if one is due.

Automatically, from ordinary web-server operation: your IP address, browser type and the pages you request, kept in short-lived security and error logs used to keep the Platform up and to block abuse.

On your own device, and never uploaded to us: your cart is held in your browser’s local storage so it survives a page refresh, and is cleared once the order is placed.

If you are restaurant staff, we additionally hold the email address you sign in with, your role at the restaurant, and — only if you turn on order alerts — the push-notification address your browser issues, along with the device description, so we can tell your devices apart.

• Card numbers, CVVs, UPI PINs, net-banking passwords or OTPs. Payment details are entered on the payment gateway’s own secure interface and never reach our servers.
• Continuous or background location. Where coordinates are used, they are those of the delivery address you supplied for that order.
• Your contacts, photos, files or any other content on your device.

• To perform the order — pass it to the restaurant, take payment, book a delivery, and show you your order’s status.
• To communicate about that order — the restaurant or the delivery rider may call or message you about it.
• To handle refunds, complaints and disputes, including with the payment gateway.
• To keep the Platform secure — rate limiting, fraud prevention and diagnosing faults.
• To meet legal obligations, including accounting and tax record-keeping.

We do not use your data to build advertising profiles, and we do not send you marketing messages unless you have asked us to.

Only those who need it to complete your order:

• The restaurant you ordered from — receives your name, phone number, order details and, for delivery, your address. It receives nothing about your orders at any other restaurant on the Platform: each restaurant’s data is isolated at the database level.
• Our payment gateway — receives the amount and the contact details needed to process the payment and any refund.
• Our delivery partner — for delivery orders only, receives the pickup and drop addresses and the recipient’s name and phone number, so the rider can complete the delivery.
• Our infrastructure providers — the hosting and managed database services that run the Platform, which store the data on our instructions.
• Authorities — where we are required to disclose information by law or a valid legal order.

We do not sell or rent personal data to anyone.

The ordering pages set no tracking cookies. What we use is strictly functional:

• Sign-in cookies — set only in the restaurant dashboard and admin areas, to keep a signed-in session. Diners are never asked to sign in, so they are never given one.
• Local storage — your cart, and a dashboard user’s sound preference. Both stay on the device.

Because none of this is used for tracking or advertising, there is no consent banner to click through.

• Order and payment records — kept for as long as accounting, tax and dispute-resolution requirements demand.
• Customer contact details — kept by the restaurant you ordered from for as long as it maintains a relationship with you as a customer.
• Security and error logs — kept for a short period, then discarded.
• Push-notification registrations — deleted when the staff member turns alerts off, signs out of that device, or the browser invalidates the registration.

• All traffic to the Platform is encrypted in transit (HTTPS).
• Each restaurant’s records are separated at the database level by row-level security, so one restaurant cannot read another’s orders or customers.
• Payment and refund operations are authorised server-side and verified against the gateway’s signatures, so they cannot be forged from a browser.
• Dashboard access requires a password-protected account tied to a specific restaurant.

No system is perfectly secure. If a breach affects your personal data, we will act on it and notify you and the authorities as the law requires.

Under India’s Digital Personal Data Protection Act, 2023, you may ask us to:

• Tell you what personal data of yours we hold and who we shared it with.
• Correct or complete anything inaccurate.
• Erase data we no longer need — noting that records we must keep for tax or legal reasons will be retained for that period.
• Withdraw a consent you previously gave.
• Nominate someone to exercise these rights if you are unable to.

Write to goutham@pagix.in from the email address or with the phone number used for the order, so we can be sure it is you. Where the data sits with a restaurant as its own customer record, we will pass your request to that restaurant and tell you we have.

The Platform is not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has given us data, write to us and we will delete it.

In line with Indian law, complaints about the handling of your personal data may be addressed to:

Pakala Goutham, Grievance Officer
Pakala Goutham
Yellareddy Colony, Hayathnagar, Hyderabad, Telangana 501505, India
goutham@pagix.in

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

We will update this page when our practices change, and revise the “Last updated” date above. Material changes will be highlighted on the Platform. See also our Terms & Conditions.