Legal
Privacy Policy
Effective date: January 1, 2025 · Last updated: 2025
GrindX Technologies PVT LTD · West Bengal, India
TablZ does not sell your personal data. We use it only to provide and improve our service.
1. Introduction
GrindX Technologies PVT LTD ("TablZ", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use TablZ (discover.tablz.io, tablz.io, and associated applications).
By using TablZ, you consent to the data practices described in this policy.
2. Information We Collect
We collect several types of information:
Account Information
- Name, email address, and phone number when you register
- Restaurant details when you list an establishment
- Profile photo (optional)
Usage Information
- Pages visited and features used
- Order history and booking history
- Search queries and filters applied
- Device type, browser, and IP address
Payment Information
- Payment transactions are processed by Razorpay. TablZ does not store full card numbers or banking credentials.
- We store transaction IDs and payment status for order records.
Location Information
- City selection for restaurant discovery
- We do not track your precise GPS location without explicit permission.
3. How We Use Your Information
We use collected information to:
- Provide and operate the TablZ platform
- Process orders, bookings, and payments
- Calculate and manage loyalty points and rewards
- Send transactional notifications (order confirmations, booking updates)
- Provide AI-powered insights to restaurant owners (aggregated, anonymised data)
- Improve our services through analytics
- Send marketing communications (only with your consent)
- Comply with legal obligations under Indian law
We do not sell your personal data to third parties.
4. Sharing Your Information
We share information only in the following circumstances:
With Restaurants
When you place an order or make a booking, we share your name, phone number, and order details with the relevant restaurant to fulfil your request.
With Service Providers
We work with trusted third-party services including:
- Razorpay (payment processing)
- Twilio (OTP and SMS notifications)
- Resend (email delivery)
- AWS (infrastructure and storage)
These providers are contractually obligated to protect your data.
Legal Requirements
We may disclose your information if required by Indian law, court order, or government authority.
Business Transfers
In the event of a merger or acquisition, your data may be transferred to the successor entity, subject to the same privacy protections.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting privacy@tablz.io.
Order records and financial transactions may be retained for up to 7 years as required by Indian tax regulations.
6. Security
We implement industry-standard security measures to protect your data:
- All data transmitted over HTTPS/TLS encryption
- Passwords stored as bcrypt hashes (never in plain text)
- API keys and secrets stored in encrypted environment stores
- Regular security audits and vulnerability assessments
- Manager PINs verified server-side, never exposed client-side
No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
7. Cookies
TablZ uses cookies and similar tracking technologies to:
- Maintain your login session
- Remember your city and search preferences
- Analyse platform usage (via anonymised analytics)
- Prevent fraud and abuse
You can control cookie settings through your browser. Disabling certain cookies may affect platform functionality.
8. Your Rights
Under applicable Indian data protection law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (subject to legal obligations)
- Object to certain processing of your data
- Withdraw consent for marketing communications at any time
To exercise any of these rights, contact us at privacy@tablz.io. We will respond within 30 days.
9. Children's Privacy
TablZ is not directed to children under the age of 13. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it immediately.
10. Third-Party Links
TablZ may contain links to third-party websites (such as restaurant social media pages or Razorpay). We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or a prominent notice on the platform. Your continued use of TablZ after any changes constitutes acceptance of the updated policy.
Last updated: 2025
12. Contact Our Privacy Team
If you have questions or concerns about this Privacy Policy or how we handle your data:
Email: privacy@tablz.io
Company: GrindX Technologies PVT LTD
Location: West Bengal, India
Response time: Within 30 business days