MealVersity Restaurant Partner Privacy Policy

Entity: MealVersity Technologies Private Limited
CIN: U62099WB2025PTC284465
Version: 1.0
Effective Date: 01 August 2026
Last Updated: 01 August 2026
Registered Office: Brainware University Business Incubation Centre (BWU-BIC), Barasat, North 24 Parganas, West Bengal, India
Contact: business@mealversity.com | +91 8900099783

---

1. Information We Collect

1.1 Applicant and authorised-person information

We may collect:

• Full name;
• Mobile number;
• Email address;
• Password and authentication information;
• Mobile and email OTP verification status;
• Date of birth, where required;
• Residential or correspondence address;
• Photograph;
• Government-issued identity information;
• Role or relationship with the Restaurant;
• Authority to act for the Restaurant; and
• Signature, declaration or acceptance records.

1.2 Restaurant and business information

We may collect:

• Restaurant name;
• Legal or registered business name;
• Business type or constitution;
• Restaurant address;
• Restaurant latitude and longitude;
• Service zone;
• Customer contact number;
• Cuisine and category;
• Operating hours;
• Restaurant, kitchen and storefront photographs;
• Menu, item, add-on and pricing information;
• Packaging information;
• Business licence information;
• Ownership and authorised-representative information; and
• Application and approval status.

Some restaurant information may relate to a business rather than an identifiable individual. This Policy applies where such information constitutes or contains personal data.

1.3 Compliance and verification documents

We may collect:

• PAN;
• GSTIN;
• FSSAI licence or registration;
• Trade or municipal licence;
• Identity proof;
• Address proof;
• Ownership or authorisation documents;
• Cancelled cheque;
• Bank-account proof;
• Insurance documents, where applicable;
• Food-safety or inspection records; and
• Other compliance documents reasonably required for onboarding or continued operation.

1.4 Bank, payment and settlement information

We may collect:

• Account-holder name;
• Bank account number;
• IFSC code;
• Bank and branch information;
• Cancelled cheque or other bank proof;
• Settlement amount;
• Payout status;
• Settlement adjustments;
• Refund and cancellation deductions;
• Tax deductions;
• Payment or transfer references; and
• Settlement-dispute records.

MealVersity does not require your internet-banking password, UPI PIN or card PIN.

1.5 Application and verification information

We may collect:

• Registration date;
• OTP challenge and verification status;
• Duplicate-application indicators;
• Document-verification results;
• Application status;
• Approval or rejection reason;
• Additional-verification requests;
• Correction and reapplication history;
• Previous connected applications;
• Fraud or identity-mismatch indicators; and
• Administrator review and decision records.

1.6 Order and operational information

We may collect:

• Orders offered to the Restaurant;
• Accepted, rejected and missed orders;
• Preparation and ready times;
• Item availability;
• Restaurant online/offline status;
• Customer cancellation records;
• Restaurant cancellation records and reasons;
• Rider arrival and handover records;
• Returned-order confirmation;
• Restaurant notes and support responses;
• Menu and catalogue-change requests;
• Offer, discount and gift activity; and
• Restaurant operational events.

1.7 Earnings and performance information

We may collect or generate:

• Gross sales;
• Restaurant earnings;
• Commission;
• Promotional funding;
• Packaging revenue;
• Taxes;
• Refund deductions;
• Cancellation penalties;
• Return adjustments;
• Net settlement;
• Order acceptance rate;
• Missed-order rate;
• Preparation performance;
• Ready-on-time performance;
• Verified complaint rate;
• Item availability; and
• Compliance or quality-performance indicators.

Performance information should distinguish Restaurant responsibility from customer, delivery-partner and platform responsibility.

1.8 Complaint and food-safety information

We may collect:

• Customer complaint information;
• Affected order and items;
• Complaint descriptions;
• Customer-provided photographs or evidence;
• Restaurant responses and evidence;
• Packaging or handover evidence;
• Refund and fault decisions;
• Food-safety investigation records;
• Contamination or illness reports;
• Inspection or corrective-action information; and
• Appeals and review outcomes.

Customer personal data received through a complaint must be used only for authorised investigation and resolution.

1.9 Device and technical information

We may collect:

• Device type and name;
• Operating system;
• App version;
• Push-notification token;
• IP address;
• Login and session information;
• Device identifiers used for security;
• Application logs;
• Network and security events;
• Crash and diagnostic information; and
• App interaction information.

1.10 Support and communication information

We may collect:

• Support tickets;
• Messages and attachments;
• Call-request records;
• Email and SMS communications;
• Notification delivery status;
• Settlement disputes;
• Appeals;
• Account-security reports; and
• Grievance records.

2. How We Use Partner Information

We may use Partner information to:

1. Create and authenticate a Restaurant Partner account.
2. Verify mobile number and email through OTP.
3. Confirm the applicant's identity and authority.
4. Verify the Restaurant's legal, tax, banking and food-safety documents.
5. Detect duplicate, misleading or fraudulent applications.
6. Determine whether the Restaurant is within an active service zone.
7. Review, approve, reject or request correction of an application.
8. Create and display the Restaurant listing.
9. Publish approved menu, prices, offers, photographs and operating hours.
10. Send and manage customer orders.
11. Coordinate preparation, rider pickup and delivery.
12. Calculate Restaurant earnings, deductions and settlements.
13. Process payouts to the approved bank account.
14. Administer promotions, refunds, cancellations and returns.
15. Investigate customer, rider and Restaurant disputes.
16. Monitor operational and food-safety performance.
17. Maintain platform security and prevent fraud.
18. Send order alerts, application updates and settlement notices.
19. Provide support and grievance redressal.
20. Comply with food-safety, tax, accounting, consumer and other legal obligations.
21. Establish, exercise or defend legal claims.
22. Improve the Partner App and MealVersity services.
23. Send optional promotional or educational communications where permitted.

3. Information Displayed to Customers

To allow customers to make informed ordering decisions, MealVersity may publicly display:

• Restaurant name;
• Logo and approved photographs;
• Restaurant locality or address information;
• Cuisine and categories;
• Menu items and prices;
• Vegetarian/non-vegetarian classification;
• Offers and promotions;
• Operating status and hours;
• Customer-care contact where required;
• Ratings or aggregated feedback;
• FSSAI licence or registration number;
• Hygiene rating, where available; and
• Other seller information required by applicable law.

Personal residential addresses, private identity documents, PAN, bank-account information and private owner contact information will not be publicly displayed unless legally required or expressly designated as business contact information.

4. Information Shared with Customers

Customers may receive information reasonably required for:

• Identifying the Restaurant;
• Placing and tracking an order;
• Receiving an invoice;
• Contacting the Restaurant through an authorised channel;
• Making an informed purchasing decision;
• Submitting a complaint; or
• Exercising a legal consumer right.

MealVersity may provide additional seller information to a customer after purchase where required by applicable e-commerce or consumer law.

5. Information Shared with Delivery Partners

The assigned delivery partner may receive limited information such as:

• Restaurant name;
• Pickup address and location;
• Restaurant contact facility;
• Order or pickup reference;
• Preparation and ready status;
• Pickup instructions; and
• Return-to-Restaurant instructions.

Delivery partners must use this information only for fulfilment, safety and authorised support.

6. Information Shared with Service Providers

MealVersity may use third-party providers for:

• Payment and bank settlement;
• SMS and OTP delivery;
• Email delivery;
• Firebase push notifications;
• Mapbox mapping, location and routing;
• Cloud hosting and databases;
• S3-compatible document and media storage;
• Document or identity verification;
• Security and fraud prevention;
• Analytics and diagnostics;
• Professional support; and
• Customer-support infrastructure.

Each provider should receive only the information reasonably required to perform its contracted function.

7. Information Shared with Authorities and Advisers

We may share Partner information with:

• FSSAI or food-safety authorities;
• Tax and GST authorities;
• Municipal or licensing authorities;
• Banks and payment institutions;
• Law-enforcement agencies;
• Courts or tribunals;
• Government departments;
• Auditors;
• Accountants;
• Insurers;
• Lawyers; and
• Other legally authorised recipients.

Disclosure will be made when required by law, necessary for a valid investigation or reasonably required to protect legal rights.

8. Verification of Partner Information

MealVersity may verify submitted information by:

• Comparing details across Partner applications;
• Contacting the applicant;
• Checking information against documents;
• Contacting issuing authorities or verification providers;
• Conducting physical, video or remote verification;
• Reviewing restaurant-location evidence;
• Reviewing publicly available business information; and
• Requesting additional documents.

A Partner must not provide another person's information without authority.

Verification information will not be used for unrelated marketing.

9. Duplicate and Fraud Prevention

MealVersity may compare email, phone, PAN, GSTIN, FSSAI, bank and Restaurant identity information to detect:

• Duplicate applications;
• Previously rejected applications;
• Connected fraudulent accounts;
• Forged or altered documents;
• Identity substitution;
• Multiple accounts created to avoid restrictions; and
• Payment or settlement abuse.

A flagged application should receive appropriate human review before a final adverse decision.

Where reasonably possible, the Partner will receive a reason and an opportunity to correct inaccurate information or appeal the decision.

10. Consent and Processing Choices

Where processing is based on consent:

1. MealVersity will explain the data and purpose before or when it is collected.
2. Consent will require an affirmative action.
3. Optional marketing consent will be separated from information necessary to operate the Partner service.
4. Consent may be withdrawn through account settings or by contacting Partner Support.
5. Withdrawal will not affect processing lawfully completed before withdrawal.

Certain information is necessary to:

• Verify the Restaurant;
• Comply with food-safety or tax law;
• Process orders;
• Make settlement payments;
• Prevent fraud; or
• Maintain legal records.

Failure to provide necessary information may prevent approval or continued use of the Partner platform.

11. Marketing Communications

MealVersity may send information about:

• Partner offers;
• Promotional opportunities;
• Training;
• New platform features;
• Business-growth programmes; and
• Optional campaigns.

Where consent is required, such messages will be sent only after obtaining it.

The Partner may opt out of optional marketing. Opting out will not stop essential:

• OTPs;
• Order alerts;
• Application-status notices;
• Settlement notices;
• Security alerts;
• Compliance requests; or
• Service communications.

12. Data Accuracy

The Partner must keep personal and business information accurate and current.

The Partner must promptly update or request correction of:

• Contact information;
• Authorised-person details;
• Operating address;
• Restaurant hours;
• FSSAI details;
• Tax information;
• Bank information; and
• Ownership or business-status changes.

Certain verified identity fields may require additional verification before they can be changed.

13. Data Retention

MealVersity retains Partner information only for as long as required for the stated purpose or applicable law.

Different periods may apply to:

• Registration and OTP records;
• Approved and rejected applications;
• Identity and compliance documents;
• FSSAI and tax records;
• Bank and settlement records;
• Orders and invoices;
• Refund and cancellation records;
• Support tickets and disputes;
• Food-safety incidents;
• Fraud and duplicate-application records;
• Device and security logs; and
• Account-suspension or termination records.

Information may be retained longer where necessary for:

• Tax or accounting obligations;
• Food-safety investigations;
• Payment or settlement disputes;
• Fraud prevention;
• Litigation or legal claims;
• Government investigation; or
• Another applicable legal requirement.

After the retention period, information will be securely deleted or irreversibly anonymised, subject to backup-deletion cycles and legal holds.

14. Rejected Applications

If an application is rejected, MealVersity may retain limited information necessary to:

• Record the decision and reason;
• Allow correction and reapplication;
• Prevent duplicate or fraudulent applications;
• Respond to disputes;
• Comply with legal obligations; and
• Protect the platform and customers.

Rejected-application data will not be retained indefinitely without a defined purpose and retention period.

15. Account Closure and Deletion

A Partner may request account closure through Partner Support.

After verifying the request, MealVersity may:

• Disable Partner access;
• Remove active login sessions and notification tokens;
• Remove or anonymise information no longer required;
• Retain completed-order, settlement, invoice, tax and compliance records as required;
• Retain information necessary for unresolved complaints, food-safety matters, fraud investigations or legal claims; and
• Inform the Partner about the outcome of the request.

Account closure does not automatically erase legally required business or transaction records.

16. Partner Privacy Rights

Subject to applicable law, an identifiable proprietor, authorised person or staff member may request:

1. Information about personal data being processed.
2. Correction of inaccurate or misleading data.
3. Completion of incomplete data.
4. Updating of outdated data.
5. Erasure of data no longer required.
6. Withdrawal of consent where consent is the processing basis.
7. Information about categories of organisations with which personal data has been shared.
8. Grievance redressal.
9. Nomination of another person to exercise applicable rights in the event of death or incapacity, where legally available.

MealVersity may verify identity and authority before processing a rights request.

Erasure may be refused or limited where retention is required for:

• Tax and accounting;
• Orders and invoices;
• Settlement disputes;
• Food-safety investigations;
• Fraud prevention;
• Legal claims; or
• Compliance with another law.

17. Restaurant Staff Information

The Partner must ensure that personal information concerning employees or authorised staff is submitted to MealVersity lawfully.

The Partner is responsible for:

• Informing staff about the submission;
• Obtaining required authorisation or consent;
• Providing only necessary information;
• Removing access when a staff member leaves; and
• Keeping staff access and contact information current.

MealVersity will process staff information for account access, security, operational communication and support.

18. Customer Data Obligations

Customer data made available through the Partner App must be used only for:

• Preparing the order;
• Handling approved instructions;
• Coordinating authorised fulfilment;
• Resolving a complaint; or
• Complying with law.

The Partner must not:

• Save customer phone numbers outside authorised systems;
• Contact customers for independent marketing;
• Share customer information;
• Publish customer information;
• Use customer addresses for unrelated purposes;
• Move customers to unauthorised off-platform transactions; or
• Retain customer information longer than necessary.

A suspected customer-data breach must be reported to MealVersity immediately.

19. Data Security

MealVersity uses reasonable technical and organisational safeguards, which may include:

• Encryption during transmission;
• OTP and password authentication;
• Controlled administrative access;
• Role-based permissions;
• Secure document storage;
• Session and device controls;
• Security and audit logging;
• Vendor-access controls;
• Backup and recovery procedures;
• Fraud monitoring; and
• Incident-response processes.

Partners must also maintain reasonable security, including:

• Strong passwords;
• Restricted staff access;
• Updated devices;
• Secure disposal of printed customer records;
• Protection against phishing; and
• Prompt reporting of suspected compromise.

No electronic system is completely secure, but this does not remove either party's duty to maintain legally required safeguards.

20. Personal-Data Breaches

If a breach affects Partner or customer personal data, MealVersity will:

1. Investigate and contain the incident.
2. Assess the nature and potential impact.
3. Take reasonable corrective action.
4. Preserve required incident records.
5. Notify affected persons and authorities where required.
6. Provide available protective instructions.

The Partner must immediately inform MealVersity if a breach occurs within the Restaurant's systems, staff or devices.

21. International Processing

Some technology providers may process information outside the Partner's state or outside India.

Where international processing occurs, MealVersity will apply contractual, security and other safeguards required by Indian law and applicable government restrictions.

22. Children's Information

Restaurant Partner accounts are intended for legally competent adults and authorised business representatives.

A person under 18 must not independently register or operate a Partner account.

The Partner must not submit a child's personal data unless legally required and supported by valid parental or guardian consent.

23. Changes to This Policy

MealVersity may update this Policy when:

• Partner services change;
• New data processing is introduced;
• Technology providers change;
• Security practices change; or
• Legal requirements change.

Material changes will be notified through the Partner App, registered email or another appropriate channel.

Fresh consent will be obtained where required.

24. Contact and Grievance Officer

For privacy questions, rights requests or complaints, contact:

Company / Data Fiduciary: MealVersity Technologies Private Limited

Registered Address: Brainware University Business Incubation Centre (BWU-BIC), Barasat, North 24 Parganas, West Bengal, India

Partner Privacy Email: privacy@mealversity.com

Partner Support Number: [Phone Number to be confirmed]

Partner Support Email: partnersupport@mealversity.com

Grievance Officer: [Name to be confirmed]

Designation: [Designation to be confirmed]

Grievance Email: grievance@mealversity.com

Telephone: [Phone Number to be confirmed]

Postal Address: Brainware University Business Incubation Centre (BWU-BIC), Barasat, North 24 Parganas, West Bengal, India

MealVersity will acknowledge and resolve privacy grievances within the period required by applicable law.

MealVersity Technologies Private Limited

Registered Office: Brainware University Business Incubation Centre (BWU-BIC), Barasat, North 24 Parganas, West Bengal, India | CIN: U62099WB2025PTC284465