Last updated: February 2026
Ruchiq ("we", "our", or "us") is committed to protecting your privacy and personal data in compliance with India's Digital Personal Data Protection Act (DPDP Act) 2023. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our digital restaurant order management platform. By using Ruchiq, you consent to the practices described in this policy.
This Privacy Policy complies with the Digital Personal Data Protection Act (DPDP Act) 2023 and other applicable Indian data protection laws. As a data fiduciary, we process personal data lawfully, transparently, and for specified legitimate purposes.
You own and control all data you input into Ruchiq, including menu information, pricing, restaurant settings, and team member details. This is YOUR data, not ours.
Customer names, phone numbers, addresses, and order details are collected to fulfill orders. While you own the direct customer relationship, Ruchiq retains rights to this data to operate the platform, improve services, and provide analytics. We function as joint data controllers for this information.
Privacy-By-Design: To protect customer PII (Personally Identifiable Information), Ruchiq implements automated masking and a 90-day automatic redaction policy for inactive consumers (see Section 8 for retention details).
Operational Zero-Trust: Access for staff (Delivery/Riders) is strictly limited to their assigned orders and is revoked automatically after a 60-minute post-fulfillment period or a 3-hour absolute window. Every "unmasking" action is logged in a secure, immutable audit trail for compliance.
We collect analytics on platform usage, feature adoption, and system performance to improve Ruchiq's services.
For authorized Ruchiq Agents, we collect and process identification data including full names, assigned cities, photographs, and official government ID numbers. This data is processed solely for the "Agent Dynamic Verification" system to protect merchants from unauthorized solicitation.
When you register, we collect your restaurant name, owner name, business address, phone number, business type, FSSAI license, and GSTIN (if applicable) to provide order management services and generate GST-compliant invoices. Emails are collected for business accounts only for account recovery and dashboard alerts; they are not collected from or required for consumers to place orders.
We collect information about how you interact with our platform, including order data, menu management, integration usage, and dashboard interactions to improve our services.
We collect delivery addresses from customer orders to facilitate order fulfillment. Additionally, when you grant permission, we collect precise device geolocation data to provide features like "Find Near Me" in the Ruchiq portfolio directory. This location data is processed
To help customers find your restaurant, your business name, address, cuisine type, and menu items will be publicly indexed by search engines (like Google) via our automated sitemaps. This is a core feature of your Digital Storefront. You may opt-out of public indexing by contacting support.
For merchants using the optional Ruchiq Sync Android application, we implement "Edge-Filtering" to protect personal privacy:
We share your information only when necessary:
Your data processed by our partners is governed by their respective policies:
We never sell your personal information to third parties.
You can:
Data Residency: All personal data is stored on cloud servers located in India, ensuring compliance with data localization requirements.
Database Security: Data is stored in encrypted PostgreSQL databases with regular automated backups. Access is restricted to authorized personnel only. Sensitive Business Credentials (PAN, GSTIN, Bank Details) are logically segregated into high-security tables with Zero-Knowledge access patterns, accessible only by the Restaurant Owner.
Backup Retention: Database backups are retained for 30 days and then securely deleted.
Long-Term Compliance Records: Pursuant to industrial tax laws and financial compliance, Ruchiq maintains an immutable 9-Year Audit Trail for all orders and business configuration changes. These records are stored in specialized partitioned storage, ensuring they are preserved even if the associated account is closed, for legal and audit purposes. To balance this with consumer privacy, PII (Name/Phone/Address) is automatically scrubbed from operational data exports and dashboard views once a consumer has been inactive for more than 90 days at a specific restaurant.
Device Storage: When you install the Ruchiq management app or your customers install your branded restaurant app (PWA) on their mobile devices, some data is cached locally for offline functionality and faster performance. This includes menu images, recent orders, and user preferences. This data resides solely on the user's device and can be cleared via browser/app settings.
We implement industry-standard security measures to protect your data, including encryption, secure authentication, and secure servers. However, no method of transmission over the internet is 100% secure.
We use cookies and similar technologies to maintain your session, remember your preferences, and analyze platform usage. You can control cookie settings through your browser.
Early Access Beta Notice: During Early Access, we make commercially reasonable efforts to preserve your data. However, as a beta service, we cannot guarantee data preservation indefinitely. We recommend regularly exporting your data. Upon Early Access conclusion, we will provide clear notice and a migration period before any data transitions or shutdowns occur.
We retain your personal data for as long as your account is active or as needed to provide services. However, to comply with legal, tax, and auditing obligations, certain critical records are retained for 9 years after account closure (applies after Early Access ends). This includes:
Mobile numbers in India are subject to reassignment (recycling) by telecom operators after periods of inactivity. To protect your privacy and prevent account takeovers by new owners of recycled numbers:
For end customers who use Ruchiq to order food (Phone-Only Accounts):
If you request account deletion, we will remove non-essential personal information within 30 days. Mandatory audit records will be archived securely and restricted from active access. Cached data in PWA or browser storage is cleared when you sign out or uninstall the app.
Under India's DPDP Act 2023, you have the following rights:
To exercise these rights, contact our Data Protection Officer at support@ruchiq.com. We will respond within 30 days.
In the event of a data breach that may cause harm to you, we will notify you and the Data Protection Board of India within 72 hours via email and platform notification. The notification will include details about the breach, affected data, and remedial actions taken.
Ruchiq is a B2B platform intended for business use only. We do not knowingly collect data from individuals under 18 years of age. Restaurant operators must be 18+ to create accounts.
For privacy-related questions, contact us at support@ruchiq.com
For privacy complaints or concerns, contact our Grievance Officer:
Email: support@ruchiq.com
Response Time: Within 30 days