Privacy Policy
ChahPasand ("we", "us") operates a chai-and-snacks ordering and delivery platform (the mobile apps and the web app at chahpasand.in). This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have. By using ChahPasand you agree to the practices described here.
1. Who we are (data controller)
ChahPasand, operated by Jitendra Singh. For questions or to exercise your rights, contact us at support@chahpasand.in.
2. What we collect
- Account details: your name and mobile phone number, and a password (stored only as a cryptographic hash — we never see it in plain text).
- Delivery information: your delivery address, a nearby landmark, and city / state / pincode.
- Precise location: the GPS coordinates of your delivery point, captured when you register (to check that a chai stall is within delivery range) and attached to each order so the delivery partner can find you.
- Order data: the items you order, quantities, prices, notes you add at checkout, and order status history.
- Photos: an optional shop/property photo captured at registration, and profile photos.
- Device & push data: a Firebase Cloud Messaging token so we can send you order-status notifications, plus basic app/diagnostic data.
- For delivery partners & stalls: their account details, assigned orders, and the partner's reported location used to route nearby jobs.
3. Why we use it
- To create and secure your account and sign you in.
- To check serviceability and fulfil deliveries — routing each order to the nearest stall and giving the delivery partner your address, phone and location.
- To send transactional notifications (order accepted / ready / delivered / cancelled) and a one-time passcode over WhatsApp/SMS.
- To provide customer support, prevent fraud and abuse, and meet legal/accounting obligations.
We do not sell your personal data, and we do not use it for advertising.
4. Who we share it with
To deliver your order, the necessary details (name, phone, address, landmark, location and order contents) are shown to the chai stall preparing it and the delivery partner assigned to it. Beyond that, we use trusted service providers:
| Provider | Role |
|---|---|
| Supabase | Database, authentication, file storage and server functions |
| Google Firebase (Cloud Messaging) | Push notifications |
| Renflair | Delivery of one-time passcodes over WhatsApp |
| Vercel | Hosting of the web app and this site |
These providers may process data on servers located outside India. We may also disclose data where required by law or to protect the safety and rights of users.
5. Cookies & local storage
The web app stores your login session (an access token and a refresh token) in your browser's local storage so you stay signed in. This is strictly necessary for the app to work and is not used for tracking or advertising. Full details are in our Cookie & Storage Policy.
6. How long we keep it
We keep your account and delivery data while your account is active. Order records are retained as needed for accounting, dispute resolution and legal compliance. You can ask us to delete your account and its data (subject to records we must legally retain).
7. Security
Data is transmitted over encrypted HTTPS, passwords are hashed, and database access is protected by row-level security so each user can only see their own data. No method of transmission or storage is 100% secure, but we take reasonable technical and organisational measures to protect your information.
8. Your rights (DPDP Act, 2023)
- Access a summary of the personal data we hold about you.
- Request correction or completion of inaccurate data.
- Request erasure of your data, where lawful.
- Withdraw consent at any time (this may limit our ability to deliver orders).
- Grieve — contact our grievance contact below; we will respond within the timelines required by law.
To exercise any right, email support@chahpasand.in from your registered contact.
9. Children
ChahPasand is not intended for persons under 18, and we do not knowingly collect their data.
10. Changes to this policy
We may update this policy; the "Last updated" date above will change. Material changes will be communicated through the app where practical.