← Back to Home
        Privacy Policy
        Last updated: October 17, 2025
        At SAVORAI ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of
            your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your
            information when you use our WhatsApp-powered food ordering and marketing platform that enables restaurants,
            bakeries, home kitchens, and other food businesses ("Clients" or "Tenants") to connect with their customers.
        
        
            IMPORTANT NOTE: This app is provided by SAVORAI, not Meta (Facebook). The data you
                provide is collected by SAVORAI and used in accordance with this Privacy Policy.
         
        Who This Policy Applies To
        This Privacy Policy applies to two categories of users:
        
            - Clients/Tenants: Businesses (restaurants, bakeries, home kitchens, etc.) who use
                SAVORAI's platform to manage their food ordering and customer communications. Clients must be 18 years
                or older to use our platform.
 
            - End Customers: Individuals who place orders with our Clients through WhatsApp. End
                customers may include minors placing orders with parental consent.
 
        
        1. Information We Collect
        1.1 Information Collected from Clients/Tenants
        When you register as a Client on our platform, we collect:
        
            - Account Information: Business name, owner/manager name, email address, phone number,
                business address, business type (restaurant/bakery/home kitchen/etc.)
 
            - WhatsApp Business Information: WhatsApp Business phone number and display name for
                integration purposes
 
            - Payment Information: Billing address, GST number (if applicable), payment method
                details for subscription fees (processed securely through third-party payment processors)
 
            - Business Details: Menu items, pricing, photos, operational hours, delivery areas, and
                other business-related information
 
            - Customer Database: Customer names, phone numbers, order history, and any other customer
                information you upload to our platform for marketing campaigns
 
            - Usage Data: How you interact with our platform, campaigns sent, orders processed,
                features used, and analytics data
 
        
        1.2 Information Collected from End Customers
        When customers place orders through our Clients using WhatsApp, we collect:
        
            - Contact Information: Name, WhatsApp phone number
 
            - Order Information: Food items ordered, quantity, special instructions, order
                preferences
 
            - Delivery Information: Delivery address, landmark details, location coordinates (if
                shared)
 
            - Payment Information: Payment method preference, transaction details (processed through
                payment gateways)
 
            - Communication Data: Messages exchanged with our AI assistant, questions asked, feedback
                provided
 
            - Order History: Past orders, preferences, and interaction patterns
 
        
        1.3 Facebook/WhatsApp Permissions
        When Clients connect their WhatsApp Business account through Facebook/Meta's WhatsApp Business API, we
            request access to the following permissions:
        
            - WhatsApp Business account profile information
 
            - WhatsApp Business account phone number
 
            - Ability to send and receive messages on behalf of the Client
 
            - Access to message templates
 
            - Webhook events for order notifications and customer interactions
 
        
        1.4 Technical Information
        We collect technical information from both Clients and End Customers:
        
            - Device Information: IP address, browser type, device type, operating system, and device
                identifiers
 
            - Usage Data: Pages visited, features used, time spent, click patterns
 
            - Cookies and Tracking Technologies: We use cookies and similar technologies to enhance
                your experience and analyze usage patterns
 
            - Facebook SDKs and Tracking Technologies: We use Facebook SDKs, cookies, and pixels to
                connect with Facebook/WhatsApp services. These technologies collect information including your device
                identifier, IP address, browser information, and usage patterns. This information may be shared with
                Facebook/Meta as described in Section 3 below.
 
            - Location Data: If permitted, we may collect location data from End Customers to
                facilitate accurate delivery
 
            - Log Data: Server logs, error reports, performance metrics, and API call logs
 
        
        2. How We Use Your Information
        2.1 For Clients/Tenants
        We use Client information to:
        
            - Service Provision: Provide and maintain the SAVORAI platform, process subscriptions,
                and deliver platform features
 
            - WhatsApp Integration: Connect and manage WhatsApp Business accounts for order
                processing and customer communication
 
            - Marketing Campaigns: Send marketing messages to customer phone numbers uploaded by
                Clients, including one-time promotional campaigns and regular/recurring marketing messages
 
            - Order Management: Process incoming orders, send order confirmations and updates
 
            - Business Analytics: Provide insights on customer behavior, order patterns, and campaign
                performance
 
            - Customer Communication: Facilitate communication between Clients and their customers
                through our platform
 
            - Invoice Generation: Create and send invoices for orders and subscription fees
 
            - Support: Provide customer support and resolve technical issues
 
            - Platform Improvement: Analyze usage patterns to improve features and develop new
                capabilities
 
        
        2.2 For End Customers
        We use End Customer information to:
        
            - Order Processing: Receive, process, and fulfill food orders placed with our Clients
            
 
            - Order Updates: Send order confirmations, preparation updates, dispatch notifications,
                and delivery status messages
 
            - Delivery Facilitation: Use address and location data to enable accurate delivery of
                orders
 
            - AI-Powered Assistance: Answer questions about menu items, orders, delivery, and other
                queries using our AI assistant
 
            - Payment Processing: Facilitate secure payment transactions
 
            - Communication: Send messages on behalf of our Clients, including marketing messages,
                promotional offers, and updates
 
            - Customer Support: Respond to queries, complaints, and feedback
 
            - Service Improvement: Analyze ordering patterns to improve the platform experience
 
        
        2.3 General Uses
        For both Clients and End Customers, we use information to:
        
            - Legal Compliance: Comply with applicable Indian laws, regulations, and legal processes
            
 
            - Security: Detect and prevent fraud, abuse, spam, and security threats
 
            - Communications: Send important updates, notifications, and policy changes
 
        
        3. Information Sharing and Disclosure
        3.1 Between Clients and Their Customers
        
            - Order Information: When an End Customer places an order, we share the customer's name,
                phone number, order details, delivery address, and location with the respective Client to fulfill the
                order
 
            - Customer Database: Clients have access to their own customer data uploaded to our
                platform, including order history and contact information
 
            - Communication: Messages from End Customers are delivered to the respective Client, and
                vice versa
 
        
        3.2 Service Providers
        We share information with third-party service providers who assist us in:
        
            - Payment Processing: Razorpay, Paytm, Stripe, PayPal, or other payment gateways
 
            - WhatsApp Business API Integration: Meta/Facebook for WhatsApp Business API services
            
 
            - Cloud Hosting and Storage: AWS, Google Cloud, or similar providers for data storage and
                infrastructure
 
            - SMS and Email Services: For backup communications and notifications
 
            - Analytics Services: To understand platform usage and improve services
 
            - AI/ML Services: For powering our AI assistant that answers customer queries
 
        
        3.3 Sharing with Facebook/Meta
        
            When you use our service, information is shared with Facebook/Meta through:
            
                - Facebook SDKs and APIs: We use Facebook's WhatsApp Business API and related SDKs to
                    provide WhatsApp integration. When you use these features, Facebook/Meta may collect device
                    information, usage data, and technical information as described in Section 1.4.
 
                - Cookies and Pixels: Facebook pixels and cookies may be placed on your device when
                    you use our service. These track your interactions with our platform and may be used by Facebook for
                    advertising and analytics purposes.
 
                - Information Shared: The types of information shared with Facebook/Meta include
                    WhatsApp Business account details, message events (including marketing messages sent), webhook data,
                    and technical information collected through SDKs and cookies.
 
            
            Important: Facebook/Meta's use of your information is governed by their own privacy
                policies and terms of service. We recommend reviewing:
            
                - Meta Privacy Policy: https://www.facebook.com/privacy/policy
 
                - WhatsApp Business Terms of Service
 
            
         
        3.4 Marketing Messages and Customer Consent
        
            Important Notice for End Customers: When a Client uses our platform to send you
                marketing messages:
            
                - The Client is responsible for obtaining your consent to receive marketing messages
 
                - You can opt out of marketing messages at any time by replying with "STOP" or contacting the Client
                    directly
 
                - Marketing messages are sent on behalf of our Clients, not by SAVORAI directly
 
                - We process and facilitate the delivery of these messages through WhatsApp
 
            
            For Clients: You are responsible for:
            
                - Ensuring you have proper consent from customers before uploading their phone numbers for marketing
                    campaigns
 
                - Complying with applicable Indian marketing and privacy laws, including the Telecom Commercial
                    Communications Customer Preference Regulations (TCCCP Regulations)
 
                - Honoring opt-out requests from customers
 
            
         
        3.5 Business Transfers
        In the event of a merger, acquisition, or sale of assets, your information may be transferred to the
            acquiring entity. We will notify you before your information becomes subject to a different privacy policy.
        
        3.6 Legal Requirements
        We may disclose information when:
        
            - Required by Indian law, regulation, or legal process
 
            - Requested by government authorities or law enforcement
 
            - Necessary to protect our rights, property, or safety, or that of our Clients, End Customers, or the
                public
 
            - Necessary to investigate fraud, security issues, or terms of service violations
 
        
        4. WhatsApp Integration and Meta Compliance
        Our platform integrates with WhatsApp Business API provided by Meta (Facebook). Important points:
        
            - Data Collection Notice: SAVORAI (not Meta) collects and processes your data through
                this app. This app is not provided by Meta.
 
            - WhatsApp Message Processing: All messages between Clients and End Customers are
                processed through WhatsApp Business API
 
            - Marketing Messages: We send marketing messages on behalf of Clients to customer phone
                numbers through WhatsApp
 
            - AI Assistant Messages: Responses from our AI assistant to customer queries are sent via
                WhatsApp
 
            - Order Updates: Order confirmations, status updates, and delivery notifications are sent
                through WhatsApp
 
            - Meta's Terms: Our use of WhatsApp Business API is subject to Meta's Terms of Service
                and Developer Policies
 
            - User Consent: We obtain consent from Clients before connecting their WhatsApp Business
                accounts
 
            - Facebook Platform Compliance: We comply with Facebook Platform Terms and Developer
                Policies in our use of WhatsApp Business API
 
        
        5. Data Security
        We implement appropriate technical and organizational measures to protect your information:
        
            - Encryption: Data is encrypted in transit using SSL/TLS and at rest using AES-256 or
                equivalent encryption
 
            - Access Controls: Role-based access controls ensure only authorized personnel can access
                specific data
 
            - Authentication: Multi-factor authentication for Client accounts
 
            - Regular Audits: Regular security assessments, vulnerability testing, and penetration
                testing
 
            - Data Minimization: We only collect and retain information necessary for providing our
                services
 
            - Secure Infrastructure: Hosted on secure, ISO 27001 certified cloud infrastructure
 
            - Payment Security: PCI-DSS compliant payment processing through certified payment
                gateways
 
            - WhatsApp Security: Messages are protected by WhatsApp's end-to-end encryption where
                applicable
 
        
        However, please note: No method of electronic transmission or storage is 100% secure. While
            we strive to protect your information, we cannot guarantee absolute security.
        6. Your Rights and Choices
        6.1 Rights for Clients/Tenants
        As a Client, you have the right to:
        
            - Access: Request access to your account information and customer data you've uploaded
            
 
            - Correction: Update or correct your business information and account details
 
            - Deletion: Request deletion of your account and associated data (subject to legal
                retention requirements)
 
            - Data Portability: Request a copy of your customer data in a portable format
 
            - Opt-out: Unsubscribe from marketing communications from SAVORAI
 
            - Restriction: Restrict processing of your data in certain circumstances
 
        
        To exercise these rights, contact us at privacy@savorai.app.
        6.2 Rights for End Customers
        As an End Customer, you have the right to:
        
            - Access: Request information about what data the Client and SAVORAI have about you
 
            - Correction: Request correction of inaccurate information
 
            - Deletion: Request deletion of your data (we will coordinate with the relevant Client)
            
 
            - Opt-out of Marketing: Reply "STOP" to any marketing message or contact the Client
                directly to opt out
 
            - Complaint: Contact us if you believe your data has been misused
 
        
        To exercise these rights, you can:
        
            - Contact the specific Client/business you interacted with
 
            - Contact SAVORAI at privacy@savorai.app
 
            - Reply to any WhatsApp message with your request
 
        
        6.3 Opting Out of Personalized Advertising
        You have choices regarding personalized advertising from Facebook/Meta:
        To opt out of Facebook advertising based on your activity:
        
            - On Facebook: Go to Settings & Privacy > Settings > Ads > Ad Preferences. You can adjust
                your ad preferences and opt out of ads based on your activity on apps and websites.
 
            - Facebook Ad Settings: Visit https://www.facebook.com/ads/preferences/ to control your
                ad preferences
 
            - Meta Account Center: Visit https://accountscenter.facebook.com/ to manage your privacy
                settings across Meta platforms
 
            - Mobile Device Settings:
                
                    - iOS: Go to Settings > Privacy & Security > Tracking > Turn off "Allow Apps to Request to Track"
                    
 
                    - Android: Go to Settings > Google > Ads > Delete advertising ID or opt out of ads personalization
                    
 
                
             
        
        Note: Opting out of personalized advertising does not mean you will see fewer ads; you will
            still see ads, but they may be less relevant to your interests.
        6.4 Cookie Management
        You can control and delete cookies through your browser settings. Most browsers allow you to:
        
            - View what cookies are stored
 
            - Delete cookies
 
            - Block third-party cookies
 
            - Block cookies from specific sites
 
            - Block all cookies
 
        
        Please note that blocking cookies may affect your ability to use certain features of our service.
        7. Data Retention
        7.1 Client/Tenant Data
        
            - Account Data: Retained while your account is active and for 3 years after account
                closure for legal and accounting purposes
 
            - Business Information: Retained as long as your account is active
 
            - Customer Database: Retained as long as your account is active; you can delete customer
                records at any time through the platform
 
        
        7.2 End Customer Data
        
            - Order Data: Retained for 7 years from the date of order for tax, accounting, and legal
                compliance purposes
 
            - Communication History: Retained for 2 years for customer service and dispute resolution
            
 
            - Personal Information: Retained as necessary for order fulfillment and as required by
                Indian law
 
            - Marketing Consent Records: Retained as proof of consent as required by Indian
                regulations
 
        
        7.3 Technical Data
        
            - Log Data: Retained for 1 year for security, debugging, and service improvement
 
            - Analytics Data: Retained for 2 years in aggregated, anonymized form
 
        
        7.4 Facebook/WhatsApp Data
        If a Client disconnects our app or we disable our use of Facebook Platform, all data obtained from
            Facebook/WhatsApp will be deleted within 90 days, except as required by law or with explicit user consent.
        
        7.5 Deletion Requests
        If you request deletion of your data, we will delete or anonymize your information within 90 days, except
            where:
        
            - Required by Indian law to retain (e.g., tax records, accounting data)
 
            - Necessary for ongoing legal proceedings
 
            - Required for fraud prevention and security
 
        
        8. International Data Transfers
        Currently, our services are provided primarily in India, and your data is stored on servers located in India
            or nearby regions.
        If we expand our services internationally in the future, your information may be transferred to and processed
            in countries other than India. In such cases, we will:
        
            - Ensure appropriate safeguards are in place for international transfers
 
            - Comply with Indian data protection laws regarding cross-border data transfers
 
            - Update this Privacy Policy to reflect any changes in data storage locations
 
        
        9. Children's Privacy
        9.1 Client/Tenant Users
        Our platform is not available to individuals under 18 years of age. Clients/Tenants must be 18 years or older
            to register and use our business services. We do not knowingly allow minors to create Client accounts.
        9.2 End Customers
        While our Client-facing platform is restricted to adults, we recognize that minors may place orders through
            WhatsApp with their parents' or guardians' consent.
        For End Customers who are minors:
        
            - We do not specifically target or market to children under 18
 
            - We process orders from minors only in the context of food ordering with presumed parental consent
 
            - Parents/guardians can request deletion of their child's data by contacting us at privacy@savorai.app
            
 
            - We collect only the minimum necessary information to fulfill orders (name, phone number, delivery
                address)
 
            - We do not knowingly send marketing messages directly to minors; marketing consent must come from adults
            
 
        
        If we become aware that we have collected personal information from a child without appropriate parental
            consent for purposes other than order fulfillment, we will take steps to delete such information.
        This service complies with applicable Indian laws regarding children's privacy and data
                protection.
        10. Specific Rights Under Indian Law
        As our services are provided in India, you have rights under Indian data protection laws including the
            Digital Personal Data Protection Act, 2023 (DPDP Act) and related regulations:
        10.1 For All Users
        
            - Right to Access: You have the right to obtain confirmation about whether your data is
                being processed and access to your personal data
 
            - Right to Correction: You can request correction of inaccurate or incomplete personal
                data
 
            - Right to Erasure: You can request deletion of your personal data, subject to legal
                retention requirements
 
            - Right to Grievance Redressal: You can file a complaint with our Grievance Officer
                (contact details in Section 14)
 
            - Right to Nominate: You can nominate another individual to exercise your rights in case
                of death or incapacity
 
        
        10.2 Withdrawal of Consent
        Where we process your data based on consent, you have the right to withdraw consent at any time. This will
            not affect the lawfulness of processing based on consent before withdrawal.
        10.3 Legal Bases for Processing
        We process personal data under the following legal bases:
        
            - Consent: For marketing communications, WhatsApp integration, and optional features
 
            - Contract Performance: To provide our services and fulfill orders
 
            - Legal Obligation: To comply with Indian laws, tax regulations, and accounting
                requirements
 
            - Legitimate Interests: For fraud prevention, security, and service improvement (only
                where not overridden by your rights)
 
        
        11. Marketing and Communications
        11.1 Marketing Messages to End Customers
        
            - Clients use our platform to send marketing messages to their customers
 
            - Marketing messages may include promotional offers, new menu items, special deals, and business updates
            
 
            - These messages are sent via WhatsApp to phone numbers provided by Clients
 
            - Opt-out: You can opt out of marketing messages at any time by:
                
                    - Replying "STOP" to any marketing message
 
                    - Contacting the Client directly
 
                    - Contacting us at privacy@savorai.app
 
                
             
        
        11.2 Compliance with Indian Marketing Regulations
        We and our Clients comply with:
        
            - Telecom Commercial Communications Customer Preference Regulations (TCCCP Regulations)
 
            - National Do Not Call (NDNC) Registry requirements
 
            - WhatsApp Business Policy on messaging
 
        
        For Clients: You must ensure that:
        
            - You have valid consent before sending marketing messages
 
            - You do not send messages to numbers registered on the NDNC Registry (unless exempt)
 
            - You honor opt-out requests immediately
 
            - You comply with message frequency limits and timing restrictions
 
        
        12. AI-Powered Customer Assistance
        Our platform uses artificial intelligence (AI) to answer customer questions through WhatsApp. Here's what you
            should know:
        12.1 How Our AI Works
        
            - Our AI assistant analyzes customer messages to understand questions about menu items, orders, delivery,
                timings, and other business-related queries
 
            - The AI is trained on general food ordering contexts and specific information provided by each Client
            
 
            - Responses are generated automatically but can be reviewed by Clients
 
            - The AI learns from interactions to improve response quality (in aggregate, anonymized form)
 
        
        12.2 Data Used by AI
        
            - Customer questions and messages
 
            - Order history and preferences (if relevant to the query)
 
            - Client's menu, pricing, and business information
 
            - Previous conversation context
 
        
        12.3 Human Oversight
        
            - Complex queries may be escalated to human Customer support
 
            - Clients can review AI conversations and intervene when needed
 
            - Customers can always request to speak with a human representative
 
        
        12.4 AI Limitations
        
            - The AI assistant is designed to help with routine queries but may not understand all questions correctly
            
 
            - AI responses should not be considered as professional advice (medical, legal, etc.)
 
            - We are not liable for actions taken based solely on AI responses
 
        
        13. Changes to This Privacy Policy
        We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal
            requirements, or for other operational reasons.
        We will notify you of material changes by:
        
            - Posting the updated policy on our website at https://savorai.app/privacy-policy with a new "Last
                updated" date
 
            - Sending an email notification to Clients at their registered email address
 
            - Displaying a prominent notice on our platform for at least 30 days
 
            - For End Customers: Through the respective Client or via WhatsApp message for significant changes
 
        
        Your continued use of our services after the effective date of changes constitutes acceptance of the
                updated Privacy Policy. If you do not agree with the changes, you should discontinue use of our
            services.
        We encourage you to review this Privacy Policy periodically to stay informed about how we protect your
            information.
        14. Contact Information and Grievance Redressal
        If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please
            contact us:
        General Privacy Inquiries
        
        Data Protection Officer
        
        Grievance Officer (As per Indian Law)
        In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023,
            we have appointed a Grievance Officer to address your concerns regarding data processing, privacy
            violations, or any grievances related to our platform.
        
        Mailing Address
        
        15. Regulatory Compliance
        This Privacy Policy is designed to comply with applicable Indian laws and regulations, including:
        
            - Digital Personal Data Protection Act, 2023 (DPDP Act) - India
 
            - Information Technology Act, 2000 - India
 
            - Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data
                    or Information) Rules, 2011
 
            - Telecom Commercial Communications Customer Preference Regulations (TCCCP Regulations),
                    2018
 
            - Consumer Protection Act, 2019 - India
 
            - Food Safety and Standards Act, 2006 (where applicable)
 
            - Goods and Services Tax (GST) regulations (for record-keeping requirements)
 
            - Indian Contract Act, 1872
 
            - Meta/Facebook Platform Terms and Developer Policies
 
            - WhatsApp Business Terms of Service
 
            - WhatsApp Business Policy
 
        
        16. Third-Party Links and Services
        Our platform may contain links to third-party websites, services, or resources (such as payment gateways,
            delivery partner apps, or Client websites).
        Please note:
        
            - We are not responsible for the privacy practices of third-party services
 
            - This Privacy Policy does not apply to third-party websites or services
 
            - We encourage you to review the privacy policies of any third-party services you use
 
            - Links to third parties do not imply endorsement of their privacy practices
 
        
        17. Business Transfers and Succession
        In the event that SAVORAI is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or
            similar transaction or proceeding:
        
            - Your information may be transferred as part of the business assets
 
            - We will provide notice before your information is transferred and becomes subject to a different privacy
                policy
 
            - The acquiring entity will be required to honor the commitments made in this Privacy Policy
 
            - You will be notified via email (for Clients) and through platform notifications
 
        
        18. Data Processing Agreement for Clients
        
            Important for Clients/Tenants: When you upload your customer data to our platform, a
                data processing relationship is created:
            
                - You (the Client) are the Data Fiduciary (data controller) for your customer data
                
 
                - SAVORAI acts as a Data Processor processing customer data on your behalf
 
                - You retain ownership and control over your customer data
 
                - We process customer data only according to your instructions through the platform
 
                - You are responsible for ensuring you have lawful basis and consent to collect and share customer
                    data with us
 
            
            By using our platform, you acknowledge and agree to these data processing terms. For enterprise clients
                with specific requirements, we can enter into a separate Data Processing Agreement (DPA).
         
        19. Security Breach Notification
        In the unlikely event of a data security breach that affects your personal information:
        For Clients:
        
            - We will notify you within 72 hours of becoming aware of the breach
 
            - Notification will be sent via email to your registered email address
 
            - We will provide details about the nature of the breach, data affected, and remedial measures
 
        
        For End Customers:
        
            - We will coordinate with the relevant Client to notify affected customers
 
            - Notification will be provided through WhatsApp, SMS, or email as appropriate
 
            - We will report the breach to relevant authorities as required by Indian law
 
        
        Our Response:
        
            - Immediate investigation and containment of the breach
 
            - Forensic analysis to determine the scope and impact
 
            - Implementation of additional security measures to prevent recurrence
 
            - Cooperation with law enforcement if required
 
            - Assistance to affected users in protecting their information
 
        
        
        Consent and Acknowledgment
        
            By using SAVORAI's platform, you acknowledge that:
            
                - You have read and understood this Privacy Policy
 
                - You consent to the collection, use, and sharing of your information as described
 
                - For Clients: You have the legal right to upload customer data and have obtained necessary consents
                
 
                - For End Customers: You understand that your data will be shared with the Client you're ordering from
                
 
                - You understand this is an India-based service subject to Indian laws
 
            
            For Clients: Your use of the platform constitutes acceptance of these terms. You can
                withdraw consent by closing your account, subject to legal retention requirements.
            For End Customers: Your first order or interaction with a Client through our platform
                constitutes acceptance. You can withdraw consent by requesting data deletion, subject to legal retention
                requirements.
         
        
        Last Updated: October 17, 2025
        For the most current version of this Privacy Policy, please visit: https://savorai.app/privacy-policy