JhatpatOrder privacy policy

Last updated: 21 October 2026

This policy covers the JhatpatOrder Android app, the JhatpatOrder vendor dashboard and the online ordering pages customers open by scanning a JhatpatOrder QR code (together, the “Service”). The Service is provided by Webtricks Software (“we”, “us”). For privacy questions, email [email protected].

In short

• Customers give no personal details. Ordering needs no account, name, phone number or email address.
• No payments. JhatpatOrder does not accept UPI, cards, wallets or any other online payment, and we never collect or store payment or bank details.
• No advertising and no selling of data. We keep only what is needed to run a vendor's account and pass orders to the kitchen.

Information we collect

From vendors and their staff

• Account details: name, business name, email address, phone number and login details. Passwords are stored only in encrypted (hashed) form.
• Business content: menus, item names, prices, descriptions, images, tables and QR codes you create.
• Order records: the orders your business receives and their status.

From customers who place orders

• Order details only: the items ordered, the table number or order type, any notes and the time of the order. Customers are not asked for their name, phone number, email address or any other personal details.

Collected automatically

• Device and notification data: a notification token issued by Firebase Cloud Messaging so the app can receive order notifications, and basic device information such as the operating system version.
• Technical logs: IP address, browser or app version and error logs, used to keep the Service secure and working.

The Service does not collect your contacts, precise location, call logs or messages, and it does not show advertising.

Payments

No payments are made through JhatpatOrder. The app and ordering pages do not accept UPI, cards, wallets, net banking or any other online payment, and we do not collect, see or store any payment or bank details. Customers pay the vendor directly.

How we use information

• To run the Service: create accounts, show menus, pass orders from customers to vendors and send order notifications.
• To provide support and tell vendors about important changes to the Service.
• To keep the Service secure, prevent abuse and fix problems.
• To meet legal obligations.

We do not sell, rent or trade information, we do not use it for advertising, and we do not use it for any purpose other than running the Service.

Who can see it

• Vendors see the orders placed with their business, so they can prepare and hand them over.
• Service providers that help us run the Service, such as our hosting provider, Google Firebase Cloud Messaging for push notifications, and our email provider. They may only use the information to provide their service to us.
• Authorities, if the law requires us to share information, or to protect the rights, property or safety of our users or others.

How long we keep it

We keep vendor account information and business content while the account is active. Order records are kept for as long as the vendor's account is active so the vendor can see its order history. When an account is deleted, we delete its personal information and business content within 30 days, and it is removed from backups within a further 90 days. We keep limited records for longer only where the law requires it.

Security

Information is sent over encrypted HTTPS connections, passwords are hashed, and access to our systems is limited to people who need it to run the Service. No system is completely secure, so please keep your login details private.

Your choices and rights

• You can view and update your account and business details in the vendor dashboard.
• You can switch off notifications in your device settings at any time, although you may then miss new orders.
• You can ask us for a copy of your information, ask us to correct it, or ask us to delete it by emailing [email protected].
• Customers have no account and give no personal details, so there is no customer profile to view or delete. Questions about an order can be sent to the vendor or to us.

Depending on where you live, laws such as India's Digital Personal Data Protection Act, the GDPR or the UK GDPR may give you additional rights.

Deleting your account

See our account deletion page for how to delete your JhatpatOrder account and what happens to your data.

Children

The Service is meant for businesses and their customers. It is not directed at children under 13, and vendor accounts may only be opened by adults.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If a change is significant, we will tell vendors in the app or by email.

Contact

Webtricks Software, Innov8, Q Parc, Building Q2, Thane–Belapur Road, Ghansoli, Navi Mumbai, Maharashtra 400701, India. Email: [email protected].