Privacy policy

DineCore OS is operated by Zentuerly Private Limited (CIN U70200OD2025PTC048847), referred to here as “we” or “us”. This policy explains how we handle personal data under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

• For website visitors, demo requests, and the people who hold a DineCore OS account, we decide why and how data is used, so we are the Data Fiduciary.
• For data a restaurant puts into the product about its own diners and staff, the restaurant is the Data Fiduciary and we process that data on its instructions. Diners and staff should contact the restaurant first. We will help the restaurant respond.

• Demo requests: your name, restaurant name, phone number, and optionally your email, city and message.
• Accounts: name, email, phone, role, restaurant and branch details, and a one-way hash of your password. If you turn on two-factor authentication, an encrypted authenticator key.
• Billing: plan, amount, dates, and the payment reference from Razorpay. We do not receive or store your card, UPI PIN or banking credentials.
• Business records you enter: menus, orders, tables, stock, staff and customer records.
• Security and usage records: sign-in events, audit logs, consent records, device and browser details, and your IP address on sign-in records, and a hashed form of it on consent records.

• To respond to a demo request you made, by calling or writing to you.
• To provide, secure and support the service you signed up for.
• To process payments, send receipts and keep the tax and accounting records the law requires.
• To detect fraud, misuse and security incidents.
• To comply with the law and lawful requests from authorities.

We rely on the consent you give, or on the legitimate uses the law allows, such as a service you have asked for or a legal obligation. We do not sell personal data.

We share data only with service providers who need it to run DineCore OS:

• Razorpay, to process payments.
• Google Cloud and Firebase, for servers, database hosting and sign-in.
• Vercel, to host this website.
• Email delivery providers, when we send you account or billing messages.

Some of these providers may process data outside India. We transfer data only as Indian law allows. We may also disclose data when the law requires it.

We keep data for as long as your account is active and as needed to provide the service. If a plan ends, your data is kept so that it can return on renewal, until you ask us to delete it. Demo requests are kept until you ask us to remove them or they are no longer needed. We keep billing and tax records for as long as Indian law requires, including after an account closes.

You can ask us to:

• Tell you what personal data we hold and how it is being used.
• Correct, complete, update or erase your personal data.
• Withdraw consent you have given. This will not affect anything done before you withdrew it.
• Nominate another person to exercise these rights if you die or become unable to act.
• Resolve a complaint through our grievance process.

Write to support@dinecoreos.com. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

We use encrypted connections, hashed passwords, two-factor authentication, role-based access and audit logs. No system is perfectly secure. If a personal data breach occurs, we will notify affected people and the authorities as the law requires.

DineCore OS is a business service for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

Grievance Officer, Zentuerly Private Limited. Email support@dinecoreos.com. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

We will post any change here and update the date above. If a change materially affects your rights, we will tell you in the product or by email.