This Privacy Policy (“Policy”) is issued by ResQBox Food India Private Limited (CIN: U63120TS2026FTC214890) (“ResQBox”, “we”, “us”, or “our”), an Indian private limited company operating the ResQBox Food platform (“Platform”). This Policy outlines how ResQBox, as a data fiduciary, collects, uses, discloses, and protects the personal data of data principals in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).
1. Scope
1.1 This Policy applies to all individuals who access or use the Platform, including Consumers and Vendors.
1.2 By using the Platform, you consent to the collection, use, and disclosure of your personal data in accordance with this Policy. Our processing of your personal data is based on the consent you provide, and you may withdraw that consent at any time as described in Clause 9.
2. Types of Information Collected
2.1 ResQBox may collect the following categories of personal data:
- Identity and contact details, including name, email address, and mobile number;
- Location data, if location services are enabled;
- Transaction data, such as order history, transaction IDs, payment status, and order value;
- Vendor business information, including FSSAI licence or registration number and GST registration details;
- Order history, ratings, feedback, and communications;
- Technical data, including IP address, browser type, device information, and usage patterns.
2.2 Financial Data Exclusion: ResQBox does not collect, store, or process sensitive financial information such as full credit card numbers, bank account numbers, or CVC codes. All financial data is handled directly by our third-party payment processor (to be confirmed — Cashfree or Razorpay).
3. Methods of Collection
3.1 Personal data may be collected through:
- Account registration and onboarding forms;
- Order placement and payment processing integrations;
- Location services and device permissions;
- Communications with ResQBox support or administrative teams;
- Cookies and similar tracking technologies (refer to Clause 7).
4. Purpose of Collection
4.1 ResQBox collects and uses personal data for the following purposes:
- To operate and maintain the Platform;
- To process orders and facilitate payment status updates;
- To verify Vendor eligibility and regulatory compliance, including FSSAI licensing status;
- To personalise user experience and display relevant listings;
- To respond to inquiries, complaints, and support requests;
- To improve Platform functionality, performance, and security;
- To comply with legal obligations and regulatory requirements.
5. Disclosure of Information
5.1 ResQBox may disclose personal data to:
- Payment processors (to be confirmed — Cashfree or Razorpay) and financial institutions for the purpose of facilitating transactions;
- Vendors, for the purpose of fulfilling orders and coordinating pickups;
- IT service providers and infrastructure partners;
- Legal, regulatory, or government authorities, where required by law;
- Third parties with your express consent.
- Cloud infrastructure and platform providers including Google LLC (Firebase, Google Sign-In, Google Maps Platform) and Amazon Web Services, some of whom may store data on servers located in India or outside India, as permitted under the DPDP Act and subject to any restrictions notified by the Central Government;
- Authentication providers, including Meta Platforms Inc. (where users elect to sign in via Facebook), Apple Inc. (Sign in with Apple), and Google LLC (Google Sign-In), who receive limited profile and authentication data necessary to verify identity;
- Communication providers (push notification delivery, transactional email and SMS) acting on our instructions.
5.2 Advertising, Marketing and Analytics
We work with third-party advertising and analytics providers to measure the effectiveness of our marketing, deliver relevant advertisements about our services, and understand how users interact with our apps. Where you use our mobile applications, certain device identifiers (including advertising identifiers where available), app events, and conversion signals may be shared with the following providers:
- Meta Platforms Inc. (Facebook, Instagram)
- TikTok Pte. Ltd.
- Google LLC (Google Ads, Google Analytics)
These providers may use this information to deliver advertisements and measure campaign performance on our behalf and, where permitted, on their own behalf in accordance with their privacy policies.
We do not sell your personal data.
Your choices regarding advertising and direct marketing:
- You can opt out of personalised advertising by adjusting your device settings (iOS: Settings → Privacy & Security → Apple Advertising; Android: Settings → Privacy → Ads → Reset advertising ID / Opt out of Ads Personalization).
- You can opt out of receiving marketing communications from us by adjusting your notification preferences in the app, or by emailing team@nousattva.com with “Unsubscribe” in the subject line.
- Opting out of marketing communications does not affect transactional communications related to your orders.
Marketing communications are sent only in accordance with the consent requirements of the DPDP Act, and you may withdraw your consent to receive them at any time.
6. Data Security
6.1 ResQBox implements reasonable security practices and procedures, consistent with the DPDP Act and the SPDI Rules, to protect personal data from unauthorised access, misuse, loss, or disclosure.
6.2 Security measures include:
- Secure servers and encrypted data transmission;
- Access controls and authentication protocols;
- Regular monitoring and security audits.
6.3 Despite these measures, no system is completely secure. You acknowledge and accept the inherent risks associated with digital data transmission and storage.
6.4 Payment Security: All financial transactions are processed through our payment processor's secure encryption infrastructure. By using the Platform, you acknowledge that the processing of your financial data is subject to the payment processor's Privacy Policy.
7. Cookies and Tracking Technologies
7.1 The Platform may use cookies and similar technologies to:
- Maintain session state and user preferences;
- Analyse usage patterns and improve performance;
- Deliver relevant content and listings.
7.2 You may disable cookies via your browser settings; however, doing so may affect Platform functionality.
8. Location Data
8.1 If you enable location services, ResQBox may use your device's location to:
- Display nearby Vendors and food listings;
- Provide accurate pickup instructions and travel estimates;
- Improve search relevance and user experience.
8.2 Location Data Retention
We handle location data in two distinct ways:
- Real-time location used during in-app search (for example, to show restaurants near your current location) is processed in the session and not stored against your account once the session ends.
- Saved address coordinates, including the latitude and longitude associated with delivery addresses, restaurant pickup addresses, and account locations, are retained for as long as the address remains active on your account. These coordinates are stored to enable accurate distance calculations, pickup window estimates, and the location-based features of the platform.
Coordinates linked to a saved address are deleted when you remove the address or close your account, subject to any legal retention requirements as set out in Section 11.
Address coordinates derived from third-party mapping services (such as Google Places) are stored only after you have confirmed the address as your own. We do not cache or persist coordinates from search-time autocomplete suggestions you do not select.
9. Your Rights as a Data Principal
9.1 As a data principal under the DPDP Act, you have the right to:
- Access a summary of the personal data ResQBox holds about you and the processing activities undertaken;
- Request correction, completion, or updating of your personal data to ensure accuracy;
- Request erasure of your personal data that is no longer necessary for the purpose for which it was collected, subject to legal retention requirements;
- Withdraw your consent to processing at any time, with effect for future processing;
- Grievance redressal, as set out in Clause 11;
- Nominate another individual to exercise your rights in the event of your death or incapacity.
9.2 Requests must be submitted in writing to the contact details provided in Clause 11.
9.3 ResQBox will respond to requests within a reasonable timeframe and in accordance with the DPDP Act.
9.4 If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India after exhausting the grievance redressal process described in Clause 11.
10. Third-Party Links
10.1 The Platform may contain links to third-party websites or services.
10.2 ResQBox is not responsible for the privacy practices or content of external sites.
10.3 Users are encouraged to review the privacy policies of third-party services before providing personal data.
11. Grievance Officer and Contact Information
Grievance Officer
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Consumer Protection (E-Commerce) Rules, 2020, our Grievance Officer is:
[Grievance Officer name]
ResQBox Food India Private Limited
Email: team@nousattva.com
We will acknowledge your complaint within 48 hours and resolve it within one (1) month of receipt.
Questions about this Policy?
ResQBox Food India Private Limited
CIN: U63120TS2026FTC214890
Email: team@nousattva.com
12. Changes to This Policy
12.1 ResQBox may amend this Privacy Policy from time to time.
12.2 Material changes will be communicated via the Platform.
12.3 Continued use of the Platform following any amendments constitutes acceptance of the revised Policy.
13. Communications and Notifications
With your permission, we send two categories of push notifications to your device:
- Transactional notifications relating to your orders, including order confirmation, restaurant acceptance, ready-for-pickup alerts, and pickup window reminders. These are essential to the service.
- Marketing notifications including promotional offers, new restaurant launches, and feature updates. These are optional.
You can manage notification permissions at the operating-system level (iOS: Settings → Notifications → ResQBox; Android: Settings → Apps → ResQBox → Notifications). You can also opt out of marketing notifications specifically through the in-app notification preferences without losing transactional notifications.
Opting out of marketing notifications takes effect within a reasonable period of receipt of your request, consistent with the consent and withdrawal provisions of the DPDP Act.