Privacy policy

Last updated 15-October-2026

This policy explains what Foodbricks collects from businesses and the people who use it, what it is used for, and the choices you have. ROFTR Clouds LLP is the data fiduciary under India's Digital Personal Data Protection Act, 2023.

What we collect

• From the owner at sign-up: business name, kind of business, your name, mobile number (confirmed by a WhatsApp code), email address, the address you choose on Foodbricks, and optionally city and state. Your PIN is stored only as a one-way hash.
• From staff: name, mobile number and role, entered by the owner. Sign-in times and the device used.
• Business records you enter: items, prices, bills, payments, stock, and customer details such as names and mobile numbers. These belong to the business; we process them only to provide the service.
• From customers who order by QR: the table, the order, and a mobile number if they choose to give one for the bill. No account is created.
• Technical: IP address, browser and device type, pages visited, errors. On the public website only, Google Analytics in aggregate; never inside the app.

What it is used for

• To run the service: sign you in, print and send bills, route orders to the kitchen, produce your reports and invoices.
• To send you service messages: the sign-in code, trial and payment reminders, invoices, security notices. Marketing messages only if you ask for them, and you can stop them at any time.
• To keep the service safe: rate limits, fraud and abuse checks, backups.
• To improve the product, using aggregate usage that identifies no business or person.

Who sees it

• Your staff, as far as you allow them; our support staff, only when you ask for help or we must fix a fault, and every such access is logged.
• Service providers who act on our instructions: hosting in India, WhatsApp (Meta) for codes and bills, the payment gateway for online payments, email delivery. They receive only what their job needs.
• Authorities, when the law requires it and after checking the demand.
• We do not sell personal data and we do not share it with advertisers.

Where it is kept and for how long

• Servers in India. Each business has its own database, backed up daily and encrypted at rest.
• Records are kept while the account is open and for the retention period after it closes described in the refund and cancellation policy, then deleted. Tax invoices we issued to you are kept for the period Indian tax law requires.
• Sign-in codes expire within minutes and are deleted once used.

Your rights

• See and correct your details from the app, or by writing to us.
• Export your business records at any time.
• Ask for the account and its data to be deleted. The owner can close the account from the app; deletion follows the retention period, except what tax law requires us to keep.
• Withdraw consent to marketing messages at any time.

Cookies

The app uses a sign-in token stored in your browser and nothing else. The public website uses Google Analytics cookies in aggregate; no advertising cookies.

Children

Foodbricks is for businesses. School canteens may hold student wallets created and controlled by the school, which is responsible for parental consent; we store no more than the name, class and balance the school enters.

Grievances

Grievance officer: Ram Kumar, ram@roftr.in, +91 97904 03333. We acknowledge within 2 working days and answer within 30 days.

Changes

If this policy changes in a way that matters, we tell the owner by email before it takes effect.